Privacy Policy
1. Introduction
At Anapata, accessible at anapata.com, we are fully committed to protecting and respecting your privacy. Safeguarding your personal data is a matter of great importance to us, and we are dedicated to data protection and transparency in all our operations. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information through your use of our website and related services. We process your data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), with a privacy-first approach that respects your rights and security.
2. Scope of Policy & Data Controller Role
This Privacy Policy applies to all visitors, users, and others who access the services provided through anapata.com. Anapata is the data controller responsible for processing your personal data. This means we determine the purposes and means by which your personal information is processed.
3. Categories of Data Processed
We collect and process the following categories of personal data:
a. Usage Data
Includes information such as your IP address, browser type and version, time zone setting, pages visited on anapata.com, session identifiers, referral sources, and other diagnostic data. This data helps us understand how our website is used and how to improve user experience.
b. Account Data
Includes identifiers provided upon registration or account setup, such as full name, billing and shipping addresses, email address, and phone number.
c. Profile Data
Comprises information tied to your user profile, such as your purchase history, saved preferences, user behavior on the site, and content interactions.
d. Communication Data
Includes your queries, requests, and interactions with our support team or other correspondence exchanged via our contact forms or email communications.
e. Technical Data
Includes device type, operating system, screen resolution, language settings, and system configurations used to interact with anapata.com.
f. Transaction Data
Includes payment details, product or service purchases, order history, and delivery details. For payment processing, we employ third-party providers that comply with strict security and privacy standards.
g. Preference Data
Covers marketing preferences, newsletter subscriptions, and information about your interests and consent to receive promotional content or product updates.
We only collect personal data that is strictly necessary to fulfill legitimate purposes, and we implement data minimization principles in all collection practices.
4. Legal Bases for Processing
We rely upon the following legal bases for processing your personal data:
– Consent: When you have given us clear permission to process your personal data for specific purposes (e.g., receiving marketing emails).
– Contractual Necessity: When processing is required to fulfill a contract we have entered into with you (e.g., processing your orders).
– Legal Obligation: Where we are required to process personal data in compliance with a legal mandate.
– Legitimate Interests: Where processing is necessary for our legitimate interests, provided that your rights and freedoms do not override such interests (e.g., to improve and secure our website functionality).
5. Your Rights
Under the GDPR and CCPA, you have the following rights regarding your personal data:
– Right to Access: You have the right to obtain a copy of the data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete personal data.
– Right to Erasure: You may ask us to delete your personal data, where legally permissible.
– Right to Restriction: You can request a restriction on processing where specific grounds are met.
– Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller.
– Right to Object: You may object to processing based on legitimate interests or direct marketing purposes.
– Right to Non-Discrimination: Under CCPA, you have the right not to be subject to discriminatory treatment when exercising your privacy rights.
To exercise any of your rights, please contact us at [email protected].
6. Security Measures
We employ industry-standard security measures to protect the data entrusted to us, including:
– Encryption of data in transit and at rest
– Role-based access control to systems
– Secure backup and disaster recovery protocols
– Regular security audits and vulnerability assessments
– Staff training in data privacy and secure handling practices
While no system is infallible, we are vigilant and proactive in protecting your data from unauthorized access, misuse, alteration, or loss.
7. International Transfers
Your personal data may be transferred to jurisdictions outside your country of residence, including to countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or compliance with applicable regional protections. These measures ensure that your data is treated in accordance with GDPR standards, even when transferred abroad.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including to satisfy any legal, regulatory, contractual, or accounting requirements. Typical retention periods are as follows:
– Usage and Technical Data: retained for up to 12 months for analytics and system improvement
– Account and Profile Data: retained while the user maintains an active account and for a period of 6 years after account closure
– Communication Data: retained for 2 years following the last contact
– Transaction Data: stored for 7 years to comply with financial and regulatory requirements
– Marketing and Preference Data: retained until consent is revoked or after 2 years of inactivity
9. Cookie Policy
anapata.com uses cookies and similar technologies to ensure site functionality and optimize user experience. Cookies fall into the following categories:
– Essential Cookies: Necessary for core site functioning (e.g., login, shopping cart)
– Functional Cookies: Enable features such as remembering preferences or personalization
– Analytics Cookies: Help us understand site usage and improve performance (e.g., Google Analytics)
– Performance Cookies: Monitor overall site performance metrics such as page load times
10. Cookie Management and Compliance
By using anapata.com, you consent to the use of cookies in accordance with this Privacy Policy. Upon your first visit, you may encounter a cookie consent banner that allows you to manage your cookie preferences, including opting out of non-essential cookies. You may also alter your browser settings to disable or remove cookies at any time.
We adhere to GDPR and CCPA requirements related to cookie consent and provide mechanisms to opt out of the sale or sharing of personal information, where applicable.
11. Children’s Data
We do not knowingly collect data from children under the age of 13. If you are a parent or legal guardian and believe that your child has provided personal data to us without your consent, please contact us at [email protected], and we will take steps to delete such information from our systems promptly.
12. Policy Updates
We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements, industry best practices, or company procedures. Material updates will be prominently communicated to affected users through our website or by email, where appropriate. Continued use of anapata.com constitutes your acceptance of any changes to this Privacy Policy.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: [email protected]
We are committed to upholding the highest standards of data protection and complying with applicable privacy laws. Thank you for trusting anapata.com with your information.