At Women724 Rates ("the Platform"), we are committed to protecting the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws. This policy outlines how we collect, process, store, and protect your personal data, as well as your rights concerning that data.
1. Data Controller Information
The data controller responsible for your personal data on the Women724 Rates Platform is [Your Company Name Here].
Contact Email: [contact@women724.com]
2. Principles of Data Processing
We adhere to the following principles when processing personal data:
- Lawfulness, fairness, and transparency: Data is processed lawfully, fairly, and in a transparent manner.
- Purpose limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Data minimization: Data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
- Accuracy: Personal data is accurate and, where necessary, kept up to date.
- Storage limitation: Data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- Integrity and confidentiality: Data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
3. Types of Personal Data We Collect
We may collect and process various types of personal data, which may include:
- Identification Data: Such as first name, last name, username, and email address.
- Contact Information: Such as email address and phone number (for businesses).
- Geographic Data: Such as country, city, state, postal code, and IP address (for users and businesses).
- Account Data: Including passwords (encrypted) and login logs (IP, browser, OS, location).
- Business Information: For business owners, details about their business, website, domain, and social links.
- Review and Content Data: Content of reviews (title, body, stars), comments, and any associated likes or reports.
- KYC Data: Document type (national ID, passport), document number, and images of documents for verification purposes.
- Financial/Transaction Data: For subscriptions and payments, transaction IDs, amounts, fees, payment methods, and payment proofs.
- Technical Data: Browser type, operating system, referrer (for business views), and interaction with the site.
4. How We Collect Personal Data
We collect personal data through various methods:
- Directly from you: When you register an account, create a business profile, submit a review or comment, complete KYC verification, or subscribe to a plan.
- Automatically: Through your interaction with our Services, such as IP addresses, Browse patterns, and usage data captured via cookies and analytics tools.
- From third parties: If you choose to use OAuth providers for login (e.g., Google, Facebook), we receive basic profile information from them.
5. Legal Basis for Processing Personal Data
We process personal data based on the following legal grounds under GDPR:
- Consent: Where you have explicitly given consent for specific processing purposes (e.g., subscribing to a newsletter).
- Contractual necessity: When processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (e.g., providing Services after account registration, processing subscriptions).
- Legal obligation: When processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax regulations, KYC requirements).
- Legitimate interests: When processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights and freedoms are not overridden (e.g., improving services, fraud prevention, marketing, maintaining security, analyzing platform usage).
6. How We Use Your Personal Data
Your personal data is used for various purposes, including:
- Providing and managing Services: To create and manage your account, allow you to submit reviews, manage your business profile, and process subscriptions.
- Communication: To send you transactional emails (e.g., password resets, email verification, subscription confirmations), notifications (e.g., new reviews, KYC status), and marketing communications (if consented).
- Security and fraud prevention: To protect our Platform and users from fraudulent activities, unauthorized access, and other security threats (e.g., through IP logging, captcha, KYC verification).
- Improving Services: To analyze usage patterns, identify trends, and enhance features and functionality of the Platform (e.g., through business views data, analytics extensions).
- Compliance with legal obligations: To meet regulatory requirements, such as KYC verification and tax reporting.
- Personalization: To tailor your experience on the Platform.
7. Sharing Your Personal Data
We may share your personal data with:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment gateways, hosting providers, email services, and analytics providers. These providers are obligated to protect your data and only use it for the purposes for which it was provided.
- Other Users/Public: Certain information, such as your username, profile picture (avatar), and content of your reviews/comments, may be publicly visible on the Platform. For businesses, your business name, description, contact details, and location are publicly visible.
- Legal Authorities: When required by law or to respond to valid legal processes (e.g., court orders, subpoenas).
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
8. International Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or reliance on adequacy decisions, to ensure your data is treated securely and in accordance with this policy.
9. Data Retention
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, subscription data may be deleted after a specified number of days post-expiration.
10. Your Data Protection Rights under GDPR
As a data subject, you have the following rights:
- Right to access: Request a copy of your personal data we hold.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data under certain conditions.
- Right to restriction of processing: Request restriction of processing your personal data under certain conditions.
- Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: Object to the processing of your personal data under certain conditions.
- Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.
- Right to lodge a complaint: File a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.
To exercise any of these rights, please contact us at [contact@women724.com].
11. Cookies Policy
We use cookies and similar tracking technologies to enhance your experience, analyze site usage, and serve personalized content. Our detailed Cookie Policy, available in the footer, explains the types of cookies we use, their purpose, and how you can manage your preferences.
12. Changes to This GDPR Policy
We may update this GDPR Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated policy will be effective as of the "Effective Date" posted at the top of this page. We encourage you to review this policy periodically.
13. Contact Us
For any questions regarding this GDPR Policy or your personal data, please contact us at:
Email: [contact@women724.com]
