Privacy Policy - Infolab 21

1. Introduction

At infolab21.com, we are firmly committed to protecting your privacy and ensuring the security of your personal data. We uphold the principles of transparency, accountability, and compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy outlines how we collect, use, store, and safeguard your personal information when you use our website and services.

2. Scope of This Policy and Our Role as Data Controller

This Privacy Policy applies to all individuals who access or use infolab21.com or communicate with us through the website. In the context of data protection legislation, InfoLab21, accessible via infolab21.com, acts as the “Data Controller” for any personal data processed under this policy. As the Data Controller, we determine the purposes and methods for processing your personal data.

You may contact us with questions about our privacy practices at [email protected].

3. Categories of Personal Data We Process

We collect and process a variety of personal data types, grouped as follows:

a. Usage Data
Includes information such as your IP address, browser type and version, internet service provider, referring URLs, date and time stamps, session duration, and your interactions with our platform.

b. Account Data
Includes basic identifiers such as your name, mailing address, email address, phone number, username, and account login credentials.

c. Profile Data
Includes information about your preferences, purchase history, browsing behavior on our site, submitted reviews, and settings selected within your user account.

d. Communication Data
Includes records of your communications with us, such as email inquiries, support requests, feedback submissions, and participation in surveys or user interviews.

e. Technical Data
Includes device type, operating system, screen resolution, device model, system configurations, language settings, and other technical identifiers sent by your device.

f. Transaction Data
Includes order history, payment details (processed by compliant third parties), shipping destination, and product delivery records.

g. Preference Data
Includes your expressed consent or opt-out status regarding marketing communications, preferred content and service offerings, and cookie consent selections.

4. Legal Bases for Data Processing

We process personal data under the following lawful bases provided for under applicable laws:

– Consent: Where you have given explicit consent for processing (e.g., newsletter subscriptions).
– Contract: When processing is necessary to fulfill a contract with you or to take steps prior to entering into a contract (e.g., product purchases).
– Legal Obligation: Processing required to comply with a legal obligation (e.g., maintaining tax or transaction records).
– Legitimate Interests: Processing that is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests (e.g., improving services, website analytics, fraud prevention).

5. Your Rights

You are entitled to exercise the following rights in accordance with GDPR and, where applicable, CCPA:

– Right of Access: To request access to your personal data we hold.
– Right of Rectification: To request correction of inaccurate or incomplete data.
– Right to Erasure: To request deletion of your personal data, under certain circumstances.
– Right to Restriction: To request limitation of data processing.
– Right to Data Portability: To receive your data in a structured, commonly used format and transfer it to another data controller.
– Right to Object: To object to particular forms of data processing, such as direct marketing.
– Right to Not Be Subject to Automated Decision-Making: To be free from decisions based solely on automated processing (where applicable).
– Right to Non-Discrimination (CCPA): You will not receive discriminatory treatment for exercising your rights.

To exercise any of your rights, please email us at [email protected].

6. Security Measures

We implement industry-accepted security measures to protect your information. These include:

– Data encryption at rest and in transit.
– Access controls and authentication protocols.
– Routine vulnerability and security assessments.
– Secure backups and data recovery systems.
– Employee training on data protection and privacy awareness.

While no system can guarantee absolute security, we continuously strive to protect your data against unauthorized access, theft, and misuse.

7. International Data Transfers

If your personal data is transferred outside of the European Economic Area (“EEA”) or other jurisdictions with similar data protection rules, we ensure that adequate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful mechanisms to ensure your rights and data remain protected.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting obligations. General retention guidelines include:

– Usage and technical data: 12 months from collection.
– Account and profile data: For the duration of your active user account plus 24 months.
– Transaction data: Retained for 7 years for financial and legal compliance.
– Communication records: Retained for up to 24 months to resolve inquiries and support history.
– Preference and consent data: Retained for 5 years unless revoked.

Upon expiration of the applicable period, data will be securely deleted or anonymized.

9. Cookie Policy

infolab21.com uses cookies to enhance user experience, provide essential functionality, analyze website traffic, and support marketing activities.

Categories of cookies we use include:

– Essential Cookies: Required for website functionality and security.
– Functional Cookies: Enable personalization features and remember user preferences.
– Analytics Cookies: Collect anonymized data for understanding user behavior and site performance (e.g., Google Analytics).
– Performance Cookies: Improve load time and responsiveness of our site.

10. Cookie Management and Compliance

Under GDPR and CCPA, you have the right to control the use of cookies and similar technologies on your devices:

– Upon your first visit, a cookie banner will allow you to accept or customize preferences.
– You may change or withdraw your consent at any time via our Cookie Settings page or through your browser settings.
– You may choose to block or delete cookies, but certain site features may not operate correctly without them.

Only essential cookies are used without your explicit consent.

11. Children’s Privacy

infolab21.com is not directed at, nor do we knowingly collect, personal information from children under the age of 13. If we become aware that we have inadvertently collected such data, we will promptly delete it. Parents and legal guardians who believe we have collected information about a child should contact us at [email protected].

12. Policy Updates

We may update this Privacy Policy from time to time in response to changes in legal, regulatory, technical, or business developments. Any material changes affecting your rights will be communicated via our website or through direct notification if appropriate. We recommend that users review this policy periodically to remain informed.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, how your data is handled, or to seek to exercise your privacy rights, please contact us at:

Email: [email protected]
Website: https://infolab21.com

We are committed to complying with all applicable data protection laws, including GDPR and CCPA, and to ensuring that your privacy rights are respected and upheld. Please contact us should you have any inquiries regarding your personal data or this policy.