Privacy Policy for Reset-E

1. Introduction

At Reset-E (“we,” “our,” “us”), accessible at reset-e.com, we are fully committed to protecting your privacy and ensuring the security of your personal data. Upholding the principles of transparency, accountability, and user empowerment, we process your personal information in strict accordance with the requirements of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data privacy laws. We provide this Privacy Policy to inform you of our practices concerning the collection, use, disclosure, and safeguarding of your Personal Data when you visit or interact with our website.

2. Scope of This Policy and Data Controller Role

This Privacy Policy applies to all users and visitors of our website at reset-e.com. It governs the data processing activities carried out in connection with your use of our services, including when you communicate with us or engage in transactions. For the purposes of data protection laws, Reset-E is the “data controller,” determining the purposes and means by which your personal data is processed.

3. Categories of Data We Process

We may collect, use, store, and transfer various categories of personal data based on your interactions with our website and services:

a. Usage Data
Includes information about how you use our website, such as your IP address, browser type and version, unique device identifiers, language preferences, pages visited, access times, and referring websites. We also collect session duration data and diagnostic logs for analytics and platform optimization.

b. Account Data
Includes information provided when you register for an account or transact with us, such as your name, billing and shipping addresses, phone number, and email address.

c. Profile Data
Includes data related to your user preferences, purchase history, service usage patterns, account settings, and behavioral tendencies while on our platform.

d. Communication Data
Includes records of your interactions with us, including support tickets, email correspondence, inquiries submitted via contact forms, chat logs, and communication metadata.

e. Technical Data
Includes details about the devices and technological settings used to access our website, such as device type, operating system, screen resolution, browser plugins, and system configuration details.

f. Transaction Data
Includes data regarding payments, order history, delivery details, transactional timestamps, invoice records, and payment processor references. Financial data is securely processed by third-party providers and not stored directly by Reset-E.

g. Preference Data
Includes marketing and communication preferences, product interests, participation in promotions or surveys, and consent status for email or third-party marketing.

4. Legal Bases for Processing

We process your data based on the following legal grounds:

– Performance of a Contract: To fulfill contracts, including order processing, delivery, and customer support.
– Legitimate Interests: To improve our site, market services, protect our business, prevent fraud, and maintain network security, provided such interests are not overridden by your rights.
– Consent: Where legally required, we obtain your explicit consent for data processing activities, including the use of cookies or sending promotional materials.
– Legal Obligations: To comply with regulatory or legal requirements, such as tax or fraud prevention laws.

5. Your Rights Under Data Protection Laws

Subject to the applicable law, you are entitled to the following rights regarding your personal data:

– Right of Access: Obtain a copy of your personal data we process, with details on how and why it is processed.
– Right to Rectification: Request correction of inaccurate or incomplete data we hold about you.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to conditions and legal limitations.
– Right to Restriction: Request that we limit how your personal data is processed under certain circumstances.
– Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where feasible.
– Right to Object: Object to processing carried out under our legitimate interests, or for direct marketing purposes.
– Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to its withdrawal.

To exercise any of your rights, please contact us at [email protected].

6. Security Measures

We employ a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or unlawful processing. These measures include:

– End-to-end encryption protocols for data transmission
– Secure data storage through encrypted databases
– Role-based access controls and multi-factor authentication
– Regular system audits, vulnerability scanning, and penetration testing
– Firewalls and anti-malware protections
– Data redundancy and offsite backups
– Staff training and internal access monitoring

7. International Data Transfers

Your personal data may be transferred to and stored in countries outside the European Economic Area and California. In such cases, we ensure an adequate level of protection is afforded through:

– Standard Contractual Clauses approved by the European Commission
– Data processing agreements with third-party vendors
– Verification of Privacy Shield certifications or equivalent mechanisms where applicable
– Ongoing risk assessments in respect of data sovereignty

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting obligations. General retention periods include:

– Usage and Technical Data: up to 12 months
– Account and Profile Data: until account deletion, and up to 6 years thereafter for legal compliance
– Transaction and Communication Data: 7 years to comply with tax and audit regulations
– Marketing Preference Data: until consent is withdrawn or up to 24 months of inactivity

You may request deletion of your information at any time, subject to lawful exceptions.

9. Cookie Policy

reset-e.com uses cookies and similar technologies to enhance your experience and gather analytics. Our categories of cookies include:

– Essential Cookies: Necessary for core functionality, such as account login and securing transactions
– Functional Cookies: Enable personalization, saved preferences, and improved web experience
– Performance Cookies: Collect anonymous data to analyze website traffic and identify usage patterns
– Analytics Cookies: Help us understand user behavior using platforms like Google Analytics

Cookies may remain on your device for varying durations, from session-based to persistent.

10. Cookie Management and User Consent

Pursuant to GDPR and CCPA, we provide you with clear options to manage your cookie preferences. Before placing non-essential cookies, we seek your explicit consent through a cookie banner. You can change your cookie settings at any time via your browser or website settings. Opt-out mechanisms are provided for analytics and advertising cookies. California residents can exercise Do Not Sell My Personal Information rights via the footer link on our website or by contacting us directly.

11. Children’s Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect or solicit personal data from children. If we learn that we have collected personal data from a child under 13 without verified parental consent, we will take prompt steps to delete such information. Parents or guardians who believe their child has submitted data may contact us at [email protected].

12. Updates to This Policy

We reserve the right to modify this Privacy Policy to reflect changes in legal obligations, our data practices, or website functionality. Any material changes will be posted on reset-e.com and, where appropriate, communicated to you. Continued use of our services constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, you may contact us at:

Email: [email protected]

We are committed to ensuring full compliance with applicable privacy laws, and we welcome your inquiries or concerns about how your personal data is handled.

Reset-E is dedicated to safeguarding your privacy and promoting transparency in every aspect of our data processing operations. Please don’t hesitate to contact us should you have any privacy-related questions or require more information.