Privacy Policy & Cookies
PRIVACY POLICY
Effective date: [Insert Date]
Last updated: [Insert Date]
Data protection is of particular priority to ________ (hereinafter referred as “Company”). The processing of personal data, including your name, address, email address or telephone number, will always comply with the General Data Protection Regulation (GDPR) and other data protection regulations applicable to Company.
By using our website, you automatically agree to the following terms and conditions. If you do not agree with any of the statements in this document, please contact us at info@enayasoul.com before using our website or any of its pages, folders and subdomains. We have the right to change our privacy policy without prior notice. Therefore, we advise all users to check this page regularly to be aware of its latest version.
1. General information
With this data protection statement, we inform the general public about the nature, scope and purpose of the personal data we collect, use and process. In addition, this data protection declaration contains information about the rights of website users.
As a data controller and processor, Company has implemented numerous technical and organizational measures to ensure the complete protection of your data on the Company website and all of its subdomains. Since data transmission over the Internet can have security gaps, not only absolute protection is required. In addition, every data subject is free to transmit personal data to us by direct and indirect means, such as e-mail or telephone support.
2. Types of information we collect
We collect certain information about visitors and users of our websites. The type and amount of information varies depending on the referral source and user status.
2.1. Information we receive from authors
We may collect the author’s name, company name, IP address, email address, phone number(s), photo ID, social media account URLs, payment information, and responses to surveys initiated for research purposes.
We use this information to provide support to authors or to improve our services. For example, this data is necessary for payment of commissions, verification of authors’ identities, provision of advertising and marketing services, communication, support, and billing.
2.2 Information we receive from customers
We collect customer name, username, email address, phone number(s), physical location, and contact information. In addition, we may collect, store and use information about the customer’s device(s) used to visit and interact with our websites. This includes information about the browser, referring source, and the customer’s IP address. We may also have limited access to third-party payment data collected by the customer’s payment systems (billing country, cardholder name, PayPal email address), transaction details, customer support inquiries, web analytics data, and data that customers provide when filling out forms on our websites.
We may use this information to respond to customer inquiries or correspondence, provide customer service, administer the website, improve products/services, and send technical notices/updates, security alerts, policy change notices, and administrative notices. We may also use this data for statistical, analytical and management purposes to prevent fraud and violations of policies/terms, including threats and harm.
2.3 Information we receive from partners
We collect partner names, company names, website URLs, phone numbers, billing addresses, company types, email addresses, photo IDs, and payment information. We use this information to work with partners to verify their identity, contacts, payment, support, and to monitor risks, fraud, or other similar issues. In addition, we use this information to send technical notices, updates, security alerts, administrative notices, and information about changes to our policies.
2.4. Information we receive from website visitors
We collect visitors’ device type and browser, network connection, IP address, cookies, and other web analytics data. We may also collect personal information provided by visitors through any forms available on our websites, such as chat, ticketing, subscription, and contact forms.
2.5. Information we receive from users through chat, phone calls and other indirect means
We collect names, email addresses, information about the device and browser they are using, chat transcripts, and other personal information they provide during a chat or call. In accordance with our Terms of Use, we may request additional information from users during our conversation to verify their identity or for technical support purposes.
3. Means of collecting personal data
- We collect personal information when visitors perform certain actions on our websites. These actions include, but are not limited to, registering, purchasing/ordering goods or services on our websites, subscribing to our newsletter, submitting feedback, entering a contest, completing a survey, or sending us a contact request by any available means.
- We automatically collect personal information when users navigate our websites or third-party sources that link to our websites.
4. Receiving information from third parties
In addition to the data we receive from visitors, we may collect, store, and analyze personal information from other sources.
- We receive financial and transaction information from payment providers to process transactions and complete purchases of digital products.
- Third-party services such as Google, Facebook and Twitter may provide us with certain information about our visitors when they link/connect/log in to our website using their social media account or associated email address. The scope of information may vary and can be controlled and modified by the third-party service provider or the user through privacy settings.
- We may obtain demographic and fraud detection information from third-party sources and combine it with existing visitor information to verify their identity. This may include identity verification services used for fraud alerts.
5. Cases of use of personal data
5.1. Order processing
We need users’ personal information mainly when we need to determine their identity to accurately process orders on our website and all its subdomains, for example, when they purchase goods and services on our marketplace.
5.2. Provision of services
Other legitimate uses include, but are not limited to, the following.
- providing the services presented on our website and all its subdomains;
- verifying the identity of users when they log in and create a personal account;
- providing general and technical support services;
- sharing company news, sales, special offers, and website/service updates;
- Reviewing user activity on our websites to identify potentially fraudulent activity and to ensure compliance with the terms and conditions applicable to our websites;
- responding to comments or requests from users on our websites when we ask them to provide feedback or opinions through surveys;
- Legal/operational affairs management, including risk management related to content and fraud issues;
- use of personalized advertising and display of personalized content based on user preferences;
- communication with users for informational purposes;
- improving the interface of our website, the quality of products and services.
5.3. Use of information requiring user consent
We may use users’ personal information when they give us their consent:
- provide them with marketing information about products and services that may be of interest to them;
- to modify/customize our offers and website layout using cookies, e.g., advertisements that appear on our website can be tailored to provide users with a personalized experience.
Users can change their mind at any time and ask us to delete their personal information by sending a request to _____.
5.4. Legal inquiries
If necessary, we may process personal information of the user for the purposes provided by law. For example, to provide to the court, law enforcement agencies, governmental requests or any other cases that may relate to judicial investigations.
6. Disclosure of personal information
Our users’ personal information can be accessed:
- employees of the company who need it to perform their tasks and duties;
- third parties who have a legitimate purpose to access it.
We may provide personal information to third parties in the following cases.
- The Client agrees to the disclosure of information.
- We need to disclose partial data for the purposes of support and verification/activation of third-party software.
- A customer orders a third-party service on our website, and the subcontractors or service providers need the data to fulfill the offer. Subcontractors or service providers may access your personal information from their countries of operation.
- This is necessary to protect our rights or to comply with a court proceeding, court order or legal process.
7. Storage and protection of personal information
The Company’s office is located in Estonia. In addition, the Company cooperates with outsourced employees around the world to provide users with timely support and a high level of service. We may store your personal data on various local servers. To protect your information, we also work with subcontractors who can maintain data security standards.
7.1. Storage time
Information about users is stored on our servers for as long as it is necessary to provide them with our services and comply with legal obligations.
If users do not want us to store their personal information, they have the right to request its deletion, but in this case we will have to deactivate their Company accounts.
All information about deleted accounts remains on our servers for use in our legitimate business interests: to comply with the law, prevent fraud, resolve disputes, troubleshoot problems, assist in investigations, enforce our terms of service, or take other actions permitted by law. We process the information we store in accordance with this Privacy Policy.
7.2. Security measures
To keep user information safe, we take special measures to protect it from unauthorized or illegal use, accidental loss or destruction.
- We share and provide access to user information to the minimum extent necessary, subject to confidentiality restrictions where necessary, and on an anonymous basis where possible.
- We use secure servers to store user information.
- We verify the identity of all persons requesting access to private information before granting them access.
- We use SSL certificate encryption to protect data transmission.
We are not responsible if users attempt to circumvent the privacy settings on our websites. If we provide users with access to certain parts of our website, they are responsible for their security. Users should not disclose access information to third parties.
For obvious reasons, we cannot monitor all user activities on our websites, such as public comments, forums, etc. Therefore, we recommend that customers share their information wisely in public places, as we cannot guarantee that unauthorized persons will not view the data that users post online.
When users choose to share their information through a third-party website, they should check that website’s privacy policy to be aware of its information management and security practices.
8. Privacy management
All personal information we collect about users is available in their accounts. Users have the right to make all necessary corrections and changes to this data.
Users can receive personal information in a structured, machine-readable format, edit, delete or restrict its processing. They can also object to the processing of their data for certain company interests, such as profiling for direct marketing and other cases where we need their consent to process the data.
There are a few situations where these rights may be limited and we may retain users’ information after they withdraw their consent. These are cases where we may require personal data to comply with legal or contractual obligations. If users do not provide us with such data , we will not be able to provide the service. In all other cases, providing the requested information may be optional.
If users have unresolved issues, they have the right to complain to data protection authorities. If you believe that our company has violated your privacy rights, please contact us at info@enayasoul.com
9. Marketing use of your personal information
If we have users’ consent, we may send them marketing materials with information about products, services or discounts. If they choose not to receive such email notifications, they can easily unsubscribe by using the unsubscribe option or contact us at info@enayasoul.com.
9.1. Google Analytics
The Company uses Google Analytics, a web analytics service created by Google, Inc. Google Analytics software uses cookies to analyze user behavior. All data (i.e., user actions on the Company’s domain and all its subdomains) is collected by cookies and stored in Google’s cloud data centers, most of which are located in the United States
In turn, Google uses this data to evaluate user behavior in general, to compile reports for website operators and to provide services related to website activity and internet usage. Google may transfer various data to third parties when required to do so by law or when third parties process information on behalf of Google.
Google will not associate users’ IP addresses with any other data stored by Google in any way. If users do not want to provide Google with their browsing data, they can block cookies in their browser settings. Users can find more information about Google opt-out, privacy and Google Analytics.
10. Cookies
A cookie is a small file that is placed on users’ devices when they visit any website. We use cookies to provide users with access to all the features of the website, as well as to analyze, personalize and improve the user experience.
We activate all cookies by default to ensure the proper functioning of our website, advertising and analytics. All users can customize their cookie settings and opt-out of analytics and advertising cookies in accordance with the General Data Protection Regulation (GDPR) and other data privacy laws. Strictly necessary cookies are always enabled to ensure the provision of requested services and resources.
11. Integration of your public information by third parties
If users click on a link to a third party website, they leave our website. Because we cannot control the activities of third parties, we are not responsible for any use of your personal information by those parties. Users should review the privacy policy of any other website they visit.
12. Deleting data
The data controller shall process and store the data subject’s data only for the time necessary to achieve the purpose of the storage in accordance with Estonian law or other legislation in laws or regulations to which the controller is subject.
If the purpose of storage is no longer applicable or the storage period established by Estonian law or another competent legal authority has expired, personal data will be blocked or deleted.
The Company reserves the right to block user accounts and delete the relevant data if they have not logged in or taken any action for six (6) months or more. This applies to accounts of clients, authors, and partners.
Users can create requests to delete their accounts and personal information by sending an email. It may take up to 2 weeks to process the request until the data is deleted. This is due to the fact that we use several third-party services, including email distribution tools and external advertising services. It may not be possible for the client to immediately refuse to receive notifications/advertisements due to third-party services, browser cache, and other technical reasons.
13. Children’s privacy on the Internet
Children under the age of 13 should not use the Company’s websites, products and services. No one under the age of 13 (thirteen) may submit personal information to our websites. We do not collect information from children under the age of 13. Users under the age of 13 may not use any of our websites, purchase products on the marketplace, comment on blog posts or social media posts, or provide personal information about themselves, including name, address, phone number, and email address. If we find out that users have violated this condition, we will immediately delete their accounts and all information. If you believe that we may have some information provided by your child, please contact us at info@enayasoul.com.
14. Changes to our Privacy Policy
As a data controller and data processor, we reserve the right to change or modify this Privacy Policy at any time. We will post changes on this Privacy Policy page and notify users by email if necessary.
Depending on the context of the personal information provided by users, the Company may be a data controller and a data processor. The Company is the processor of personal information provided to the Services or collected through the linked services.
If users have any questions about this Privacy Policy, including the collection, storage, and processing of information, or if they believe that we have violated their privacy rights, they may contact us at info@enayasoul.com. We respond to all inquiries, requests, or concerns within fifteen (15) days.