PRIVACY POLICY
1. Introduction
At instisp.com (“we”, “us”, “our”), we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit or interact with our website or services, in accordance with applicable data protection regulations, including the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA”).
We are dedicated to maintaining the confidentiality, integrity, and security of your personal information, and we strive to process your data fairly, transparently, and in a privacy-first manner.
2. Scope of This Policy and Data Controller Role
This Privacy Policy applies to all users and visitors to instisp.com and any digital services we operate. For the purposes of applicable data protection laws, instisp.com is the data controller of your personal data. This means that we determine the purposes and means by which your personal information is processed.
If you have any questions or concerns regarding this Policy or how we handle your personal data, you can contact us at [email protected].
3. Categories of Data We Process
We may collect and process various types of personal data, either directly from you or through your interaction with our website and services. The categories of data we collect include:
a. Usage Data
This includes information on how you use our website, such as IP address, browser type, operating system, referral URLs, pages viewed, time spent on pages, and other analytical data associated with web sessions and user interaction.
b. Account Data
When you create an account or register for our services, we may collect your full name, email address, postal address, telephone number, and account credentials.
c. Profile Data
This comprises preferences, purchase history, service usage behavior, saved items, survey responses, and any custom configurations or account content associated with your user profile.
d. Communication Data
We collect and store emails, messages, support inquiries, feedback submissions, and other communications you initiate with us, including the communication history.
e. Technical Data
We collect technical identifiers such as device model, screen resolution, operating system version, language settings, and system performance data, which assist us in understanding your digital environment.
f. Transaction Data
If you make purchases or transactions through our platform, we collect payment method details (processed securely via third-party providers), billing and shipping addresses, and transaction history.
g. Preference Data
This includes explicit consents you give for marketing communications, product preferences, interests, notification subscriptions, and any opt-in choices you make on instisp.com.
4. Legal Bases for Processing
We rely upon the following lawful bases under the GDPR to process your personal data:
– Performance of a Contract: Where processing is necessary for the fulfillment of a contractual obligation, such as delivering services or managing your account.
– Consent: When you have provided clear, informed consent for specific types of data processing, such as newsletters or marketing.
– Legitimate Interests: For purposes such as improving user experience, site functionality, fraud prevention, and business analytics, where such interests are not overridden by your rights.
– Compliance with Legal Obligation: Where processing is required to meet statutory or regulatory responsibilities.
Under the CCPA, we do not “sell” personal information as defined under California law and only use it as described in this policy for business purposes.
5. Your Rights
Subject to applicable law and certain limitations, you have the following rights concerning your personal data:
– Right of Access – You may request a copy of the personal data we hold about you.
– Right to Rectification – You may request correction of inaccurate or incomplete data.
– Right to Erasure – Also known as the “right to be forgotten”, you can request deletion of your data.
– Right to Restriction – You can request the limitation of certain types of data processing.
– Right to Data Portability – You have the right to ask for your data to be transferred to another service provider in a structured, commonly used format.
– California-specific Rights – As a California resident, you may also request disclosure about the personal information we collect, share, and use for business purposes and request that your data not be sold.
To exercise any of these rights, please contact us at [email protected]. We may verify your identity prior to fulfilling your request.
6. Security Measures
We maintain reasonable and appropriate technical and organizational safeguards to protect your personal data, including:
– Data encryption in transit and at rest.
– Access restrictions and role-based permissions.
– Secure user authentication processes.
– Regular system monitoring, logging, and patching.
– Employee training programs on privacy and data security.
– Scheduled backups and disaster recovery protocols.
While no method of transmission over the internet is entirely secure, we take all reasonable steps to protect your data in line with industry standards.
7. International Data Transfers
Where your personal data is transferred outside of the European Economic Area (EEA) or your country of residence, we ensure such transfers are made in compliance with applicable data protection laws. We rely on mechanisms such as Standard Contractual Clauses (SCCs), adequacy decisions, or your explicit consent to safeguard these transfers.
Users accessing instisp.com from regions with different data protection laws acknowledge and agree to such international transfers, where legally permitted.
8. Data Retention
We retain personal data only for as long as necessary for the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specific retention periods include:
– Account and Profile Data: Retained for the duration of the relationship plus seven (7) years.
– Usage Data: Typically retained for up to 26 months.
– Transaction Data: Retained for seven (7) years for accounting and legal compliance.
– Communication Data: Retained for up to three (3) years following last contact.
Upon expiration of retention periods, data is either securely deleted or anonymized.
9. Cookie Policy
instisp.com uses cookies and similar technologies to enhance user experience and improve website functionality. These include:
– Essential Cookies: Necessary for website performance and user authentication.
– Functional Cookies: Remember preferences and enhance features.
– Analytics Cookies: Provide insights through aggregated usage data to improve site performance.
– Performance Cookies: Help us understand website speed, responsiveness, and technical optimization.
No cookies are used to infer sensitive personal data without user consent.
10. Cookie Management and Compliance
In compliance with GDPR and CCPA, users are provided with the ability to manage cookie preferences upon their first visit and can adjust these settings at any time via the site’s privacy preference center. You may also configure your browser to reject cookies; however, doing so may affect site functionality.
We do not enable third-party cookies or ad networks that process user data without providing clear opt-in mechanisms where legally required.
11. Children’s Privacy
instisp.com is not directed to children under the age of 13, and we do not knowingly collect or solicit personal data from minors under this age. If we discover that we have collected personal data from a child under 13 without verifiable parental consent, we will promptly delete such data. If you believe we may have unintentionally collected such data, please contact us immediately at [email protected].
12. Policy Updates and Notifications
We reserve the right to amend this Privacy Policy to reflect changes in legal, regulatory, or operational practices. When updates are made, we will revise the policy links on our website accordingly and may notify registered users via email or through other means where required by law.
We encourage you to review this policy periodically to remain informed about how we protect your personal data.
13. Contact Us
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data handling practices, you may contact us at:
Email: [email protected]
We are committed to resolving privacy concerns in a fair and timely manner.
—
We take your privacy seriously and operate instisp.com in full compliance with applicable data protection standards. For any questions about your data or rights, please don’t hesitate to reach out to our team at [email protected].