Privacy Policy for indigopanama.com
1. Introduction
At indigopanama.com, we are committed to protecting and respecting your privacy. This Privacy Policy outlines our approach to collecting, using, storing, and protecting your personal data in accordance with applicable data protection legislation, including the European Union’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We believe in transparency, user rights, and strong data governance, and we are dedicated to maintaining the highest standards of privacy-first practices.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of the indigopanama.com website, services, and platforms (collectively, the “Site”). For the purposes of applicable data protection laws, indigopanama.com is the data controller responsible for determining the purposes and means of processing the personal data that we collect from you. If you have any questions about our use of your personal data or the terms of this Privacy Policy, you may contact us at [email protected].
3. Categories of Data Processed
We may process the following categories of personal data collected through your interaction with indigopanama.com:
a. Usage Data
Information automatically collected when you visit our Site, including browser type and version, IP address, date/time stamps, referring/exit URLs, pages viewed, and site interaction data.
b. Account Data
Information provided during the creation of an account or registration, including full name, physical address, email address, and telephone number.
c. Profile Data
Data generated from your user activity and preferences, including purchase history, saved items, language preferences, browsing behavior, and wish-list contents.
d. Communication Data
Records of any form of correspondence with us, such as inquiries, support tickets, feedback messages, or live chat history.
e. Technical Data
Information regarding the devices and systems used to access our Site, including device model, operating system, screen resolution, browser plugins, and system settings.
f. Transaction Data
Details relating to product or service purchases, billing and shipping addresses, payment method information (excluding complete credit card numbers), and order fulfillment data.
g. Preference Data
Your marketing preferences, communication consents, opted-in subscription items, and declared product interests.
4. Legal Bases for Processing
We rely on the following legal bases to process your personal data:
– Legitimate Interest: To analyze website performance, improve services, and conduct direct marketing where lawfully permitted.
– Contractual Necessity: To fulfill obligations related to purchases or service delivery as agreed upon with you.
– Consent: When you expressly consent to processing, particularly for email subscriptions, cookies (where applicable), and optional data uses.
– Legal Obligation: To comply with applicable laws, regulations, or court orders.
5. Your Rights
Subject to applicable laws (including GDPR and CCPA), you have the following rights regarding your personal data:
– Right of Access: You may request confirmation of whether we are processing your data and obtain a copy of such data.
– Right to Rectification: You have the right to correct incomplete or inaccurate information we hold about you.
– Right to Erasure: You may request deletion of your personal data, unless we have a legal obligation or legitimate reason to retain it.
– Right to Restrict Processing: You may request that we limit the processing of your data under certain circumstances.
– Right to Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format and to have it transferred to another controller.
– Right to Object: You may object to our processing of your data where that processing is based on our legitimate interests or for direct marketing purposes.
– Right to Non-Discrimination (CCPA): You will not be discriminated against for exercising your rights under privacy legislation.
To exercise any of the above rights, please contact us at [email protected].
6. Security Measures
indigopanama.com employs a range of technical, physical, and organizational measures to protect your personal data:
– Encryption: Data in transit and at rest is encrypted following current industry best practices.
– Access Controls: Role-based access privileges and authentication processes limit who can access sensitive information.
– Backups: Secure backups are maintained to ensure data resiliency and prevent data loss.
– Staff Training: Employees are regularly trained on data privacy, cybersecurity protocols, and compliance obligations.
While we strive to use acceptable means to protect your data, no digital transmission or storage system is 100% secure.
7. International Transfers
If your personal data is transferred outside the country of your residence, including to servers in the United States or other jurisdictions, we implement measures designed to ensure that your data is subject to appropriate safeguards. These may include standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms. Users of indigopanama.com from the EEA, UK, or other regions should be aware that we take steps to ensure your rights and data are respected during such transfers.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected or to comply with our legal obligations. The retention periods are as follows:
– Usage Data: Retained for up to 12 months for analysis and security logging.
– Account Data: Retained as long as the account is active plus 3 years.
– Profile Data: Retained as long as you use our services or products and up to 3 years after inactivity.
– Communication Data: Retained for a minimum of 2 years for customer service obligations.
– Technical Data: Retained for up to 12 months for troubleshooting and analytics.
– Transaction Data: Retained for up to 7 years for tax and accounting obligations.
– Preference Data: Retained until you withdraw your consent.
9. Cookie Policy
We utilize cookies and similar tracking technologies to enhance user experience, perform analytics, and personalize content and advertisements. The categories of cookies used include:
– Essential Cookies: Enable core functionality such as navigation, login, and secure transaction processing.
– Functional Cookies: Remember your preferences and settings to improve usability.
– Analytics Cookies: Collect information to understand user behavior and improve the website layout and content.
– Performance Cookies: Measure the load times and responsiveness of the Site to optimize performance.
Cookies may be first-party (set by indigopanama.com) or third-party (set by external services such as analytics providers).
10. Cookie Management and GDPR/CCPA Compliance
Upon your first visit to indigopanama.com, you will be presented with a cookie consent banner that allows you to accept, reject, or manage cookie preferences in accordance with the GDPR and CCPA. You can update your preferences at any time via your browser settings or by accessing the “Cookie Settings” panel on our Site. We honor “Do Not Track” signals where applicable.
11. Protections for Children
indigopanama.com is not intended for use by children under the age of 13. We do not knowingly collect, solicit, or store personal data from children. If we learn that we have inadvertently collected personal information from a user under the age of 13, we will promptly delete such data. Parents or legal guardians who believe personal data has been collected from a child under their care should contact us at [email protected].
12. Policy Updates
We reserve the right to amend this Privacy Policy at any time to reflect legal, regulatory, or operational changes. Users will be notified of significant updates through the website or via email, where appropriate. Continued use of indigopanama.com following any changes constitutes acceptance of the revised Privacy Policy.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
We are fully committed to compliance with international privacy laws, including GDPR and CCPA. We encourage you to reach out to us with any concerns about your data or this policy.