Privacy Policy
Personal data protection and compliance with privacy regulations
Purpose
Protect personal data, describe collection, processing and storage practices, and guarantee privacy rights and regulatory compliance.
Scope
Applies to all of the organization's operations, including data collected directly from individuals and managed on behalf of customers, ensuring integrity, accuracy and alignment with organizational objectives.
General Principles
- Collect only relevant, accurate, up-to-date and complete data.
- Transparency in the use and handling of personal data.
- Minimize the risk of unauthorized disclosure.
- Compliance with applicable data protection laws.
Data Collection
- Data from interactions with the website, products and services.
- Automated data (IP, device) for analysis and improvements.
- Clear collection methods and notification to users.
Use and Consent
- Data used only for the purposes explicitly communicated.
- Personal data isn't sold or shared without consent.
- For new purposes, explicit or implicit consent is obtained.
- Cookies and tracking technologies with user control.
Security
- Technical and organizational controls to protect data in transit and at rest.
- Protocols against unauthorized access, corruption or loss of data.
- Assessment and monitoring of third parties that process data.
Third Parties and Disclosure
- Disclosure only with consent or by legal mandate.
- Agreements with third parties include robust privacy commitments.
- Recording of all disclosures to maintain transparency.
Data Breaches
- Clear notification procedures for data subjects and regulators.
- Action plans to remediate and prevent future incidents.
Data Subject Rights
- Access, rectification, deletion and inquiry regarding their data.
- Direct communication with the organization or regulatory bodies.
- Detailed reports on their data and the disclosures made.
Monitoring and Review
- Regular policy updates with prior notice to users.
- Ongoing evaluation of privacy practices for compliance with standards and best practices.
- Processes for privacy inquiries, complaints and dispute resolution.