Data Privacy and User Rights

At Data2Action Digital Analytics, we are committed to ensuring the privacy and protection of user data. Below, we outline how we manage data in compliance with applicable regulations and the rights of data subjects.

Our Approach to Data Management

• No Independent Data Collection: Our platform does not generate or collect data independently. Instead, we work by integrating with ecommerce platforms like VTEX, Magento, WooCommerce, PrestaShop, Salesforce Commerce, or similar systems.
• Pre-Authorized Data Use: The ecommerce platform ensures that all users have accepted its terms and conditions before any data is shared. As a result, Data2Action only processes data that has been pre-authorized by users.

How We Support Data Subject Rights

We ensure that the rights of data subjects are respected, in alignment with regulations like GDPR and other applicable laws. These rights include:

1. Right of Access: Users can request access to their personal data to understand how it is being used.
2. Right to Rectification: Users can request corrections to inaccurate or incomplete data.
3. Right to Erasure: Users can request the deletion of their personal data where applicable.
4. Right to Data Portability: Users can request their data to be transferred to another platform.
5. Right to Object: Users can object to the processing of their data for specific purposes, such as marketing.
6. Right to Restrict Processing: Users can request limited processing of their data under certain conditions.

How We Handle Data Requests

• Efficient Processing: We have a dedicated team to handle data-related requests promptly and efficiently.
• Compliance with Ecommerce Platforms: Any data subject request involving data from VTEX or other platforms is processed in collaboration with their terms and conditions.

Your Data, Your Rights

If you have questions or need to exercise your data rights, please contact us at:

Email: [email protected]

We are committed to transparency and compliance, ensuring that your data is used responsibly and securely. Thank you for trusting Data2Action Digital Analytics.

---

Data Retention and Deletion Policy

1. 1. Introduction “Data2Action” (referred to as "the Company") is a digital analytics platform that processes user information to provide insights into behavior on e-commerce platforms. In compliance with applicable data protection regulations, this policy establishes the criteria for retaining and deleting personal data.
2. 2. Scope This policy applies to all personal data processed by the Company, including those collected through the digital analytics platform and any other related systems.
3. 3. Principles of Retention and Deletion The retention and deletion of personal data shall be governed by the following principles:
   • ● Legality: Data will be retained only for the time required to fulfill the established purposes and in accordance with legal obligations.
   • ● Data minimization: Data will not be retained beyond the time necessary for the Company's legitimate purposes.
   • ● Security: Technical and organizational measures will be implemented to protect stored data and ensure its proper deletion.
4. 4. Retention Periods Personal data will be retained according to the following periods:
   • ● Customer and registered user data: Retained while the account is active and for up to 3 years after the last interaction, unless a law requires a longer retention period.
   • ● Anonymized data: May be retained indefinitely for statistical analysis and platform improvements, provided they do not allow the identification of individuals.
   • ● Transaction and billing data: Retained for the time necessary to comply with tax and regulatory obligations (e.g., 3 years as per applicable law).
5. 5. Data Deletion The deletion of personal data will be carried out under the following conditions:
   • ● At the request of the data subject when there are no legitimate reasons for retention.
   • ● When the defined retention period has expired.
   • ● When data is no longer needed for the purposes for which it was collected.
   • ● When required by a competent authority.
   • Data deletion will be performed using secure procedures that prevent unauthorized recovery.
6. 6. Data Subject Rights Data subjects may request at any time:
   • ● Access to their personal data.
   • ● Correction of inaccurate data.
   • ● Deletion of their personal data where applicable.
   • ● Objection or restriction to data processing.
   • Requests will be processed within the timeframe established by applicable regulations.
7. 7. Responsibilities The Company will designate to “Matias Benitez” data protection officer to ensure compliance with this policy and handle data subject requests.
8. 8. Policy Modifications This policy may be updated to reflect regulatory changes or improvements in internal processes. Any modifications will be notified to users.
9. 9. Contact For inquiries about this policy or requests related to data retention and deletion, please contact us at: [email protected]