Wegatel AI Marketing

Effective Date: December 2, 2024

Last Updated: December 2, 2024

1. Introduction

Wegatel AI Marketing ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our store on Payhip.com and purchase our digital products.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you make a purchase or interact with our store, we may collect:

• Personal Information: Name, email address, billing address
• Payment Information: Credit card details, billing information (processed securely through Stripe and Payhip)
• Communication Data: Messages you send to us via email or contact forms
• Account Information: Username, password, and account preferences if you create an account

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on site, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking Technologies: We use cookies to enhance your experience and analyze site usage

2.3 Third-Party Information

• Payment Processing: Stripe and Payhip collect and process payment information on our behalf
• Analytics: Google Analytics may collect anonymized usage data
• Email Services: Our email service provider may collect engagement data

3. How We Use Your Information

We use your information for the following purposes:

3.1 Transaction Processing

• Process and fulfill your orders
• Send order confirmations and delivery notifications
• Handle refunds and customer service inquiries
• Prevent fraud and ensure payment security

3.2 Communication

• Send important updates about your purchases
• Respond to your inquiries and support requests
• Send promotional emails (with your consent)
• Provide customer support

3.3 Business Operations

• Analyze site usage and improve our services
• Conduct market research and analytics
• Comply with legal obligations
• Protect our rights and prevent misuse

3.4 Marketing (With Consent)

• Send newsletters and promotional content
• Inform you about new products and services
• Personalize your experience
• Conduct targeted advertising

4. Legal Basis for Processing (GDPR)

If you are located in the European Union, we process your personal data based on:

• Contract Performance: To fulfill our obligations under our terms of service
• Legitimate Interest: To operate our business, prevent fraud, and improve our services
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We share information with trusted third parties who help us operate our business:

• Payment Processors: Stripe and Payhip process payments securely
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: Google Analytics for website performance analysis
• Customer Support Tools: To provide efficient customer service
• Cloud Storage Providers: To securely store and deliver digital products

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our terms of service

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5.4 With Your Consent

We may share information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

6.1 Security Measures

• Encryption: All payment data is encrypted using industry-standard SSL/TLS
• Secure Storage: Personal data is stored on secure servers with access controls
• Regular Updates: We maintain up-to-date security patches and protocols
• Staff Training: Our team is trained on data protection best practices

6.2 Payment Security

• All payment processing is handled by Stripe, a PCI DSS compliant payment processor
• We do not store credit card information on our servers
• All transactions are processed using secure, encrypted connections

6.3 Data Breach Response

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take immediate steps to secure the breach
• Provide clear information about the incident and remedial actions

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests

7.2 Marketing Communications

You can:

• Unsubscribe from marketing emails using the link provided
• Update your communication preferences
• Contact us to opt-out of marketing communications

7.3 Cookies

You can:

• Control cookies through your browser settings
• Opt-out of analytics tracking
• Disable non-essential cookies

8. Data Retention

We retain your information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Provide ongoing customer support

Specific Retention Periods:

• Transaction Data: 7 years for tax and accounting purposes
• Marketing Data: Until you unsubscribe or request deletion
• Support Communications: 3 years after resolution
• Analytics Data: 26 months (Google Analytics default)

9. International Data Transfers

9.1 Cross-Border Processing

Your information may be processed in countries other than your own, including the United States, where our service providers operate.

9.2 Safeguards

When transferring data internationally, we ensure appropriate safeguards through:

• Adequacy Decisions: Transfers to countries with adequate data protection
• Standard Contractual Clauses: EU-approved contractual protections
• Certification Programs: Providers certified under recognized frameworks

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

11.1 Right to Know

• Categories of personal information collected
• Sources of personal information
• Business purposes for collection
• Third parties with whom information is shared

11.2 Right to Delete

Request deletion of personal information, subject to certain exceptions.

11.3 Right to Opt-Out

Opt-out of the "sale" of personal information (we do not sell personal information).

11.4 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

12. Contact Information

12.1 Privacy Inquiries

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: privacy@wegatel.com

Response Time: We will respond within 30 days

12.2 Data Protection Officer

For EU residents, you may contact our Data Protection Officer: Email: dpo@wegatel.com

12.3 Supervisory Authority

EU residents have the right to lodge a complaint with their local supervisory authority.

13. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Notify you of material changes via email
• Update the "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

15. Compliance Information

15.1 Regulatory Compliance

This Privacy Policy complies with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• CAN-SPAM Act
• Payment Card Industry Data Security Standard (PCI DSS)

15.2 Payment Processing Compliance

Our payment processing through Stripe complies with:

• PCI DSS Level 1 certification
• Strong Customer Authentication (SCA) requirements
• Anti-money laundering (AML) regulations
• Know Your Customer (KYC) requirements where applicable

16. Definitions

• Personal Data: Any information relating to an identified or identifiable individual
• Processing: Any operation performed on personal data
• Controller: The entity that determines the purposes and means of processing
• Processor: The entity that processes personal data on behalf of the controller
• Data Subject: The individual to whom personal data relates

Contact Us If you have any questions about this Privacy Policy, please contact us at privacy@wegatel.com.

This Privacy Policy was last updated on December 2, 2024.