Privacy Policy

This Privacy Policy describes how AITHENTIC (referred to as "we," "us," or "our") collects, uses, and shares personal information of users ("you" or "users") of our website www.aithentic.ai (the "Website"). We are committed to protecting your privacy and ensuring the security of your personal information.

1. Information We Collect

We collect various types of personal information from you, including but not limited to:  

Identity Data: This includes your name, username or similar identifier, title, and date of birth.
Contact Data: This includes your email address, postal address, and telephone numbers.
Technical Data: This includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.  
Usage Data: This includes information about how you use our Website, products, and services, such as the pages you visit, the links you click, the time spent on pages, and other actions you take on the Website.  
Location Data: We may collect your precise or approximate location if you have enabled location services on your device.
Payment Data: If you make purchases on our Website, we will collect necessary payment information, such as your credit card details or other payment method information. Please note that payment processing may be handled by third-party payment processors with their own privacy policies.
User-Generated Content: This includes any content you submit or upload to our Website, such as comments, reviews, photos, or other media.
Marketing and Communications Data: This includes your preferences in receiving marketing from us and our third parties and your communication preferences.  
Profile Data: This includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.  

2. How We Collect Your Personal Information

We collect your personal information through various methods, including:

Direct Interactions: You may provide us with your Identity, Contact, Payment, and Profile Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
Create an account on our Website.  
Place an order for our products or services.
Subscribe to our newsletters or email updates.
Participate in surveys or promotions.
Contact us with inquiries or feedback.
Post comments or other user-generated content on our Website.
Automated Technologies or Interactions: As you interact with our Website, we may automatically collect Technical and Usage Data. We collect this data by using cookies, server logs, and other similar tracking technologies.
Cookies: These are small text files that are placed on your browser or device by websites that you visit. We use cookies to remember your preferences, track your use of our Website, and personalize your experience. You can manage your cookie preferences through your browser settings.  
Analytics Tools: We may use third-party analytics tools, such as Google Analytics, to help us understand how users interact with our Website. These tools may collect Technical and Usage Data.
Server Logs: Our web servers automatically record certain information when you access our Website, including your IP address, browser type, referring/exit pages, and operating system.  
 
Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, such as:
Service Providers: For example, payment processors, analytics providers, and marketing service providers.
Publicly Available Data: Information available in public records.
 
3. How We Use Your Personal Information

We may use your personal information for various purposes, including:

To Provide and Maintain Our Services: To operate and administer our Website, provide the services you request, and fulfill our contractual obligations.
To Manage Your Account: To register and maintain your user account, verify your identity, and manage your settings.
To Process Orders and Payments: To process your orders, handle payments, and prevent fraudulent transactions.
To Personalize Your Experience: To tailor the content and information you see on our Website, recommend products and services that may be of interest to you, and remember your preferences.
To Communicate with You: To respond to your inquiries, provide customer support, and send you administrative information, such as updates to our terms or policies.
To Send Marketing Communications: With your consent where required by law, we may send you promotional emails, newsletters, and other marketing communications about our products, services, and offers. You can opt-out of receiving these communications at any time.  
To Improve Our Website and Services: To analyze how users interact with our Website, identify trends, and make improvements to our content, functionality, and services.
For Security Purposes: To help maintain the safety and security of our Website and prevent unauthorized access or malicious activity.
To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.
For Research and Analytics: To conduct research and analyze data to understand user behavior and improve our offerings.

4. Sharing Your Personal Information

We may share your personal information with the following categories of third parties:

Service Providers: We may engage third-party service providers to perform functions on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer support, and marketing assistance. These service providers will have access to your personal information only to the extent necessary to perform their services and are obligated to maintain its confidentiality and security.  
Analytics Partners: We may share anonymized or aggregated data with analytics partners to help us understand Website usage patterns.

Business Transfers: In the event of a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the acquiring entity.  
Legal Compliance: We may disclose your personal information if required to do so by law or in response to valid legal process, such as a court order or subpoena.  
Protection of Rights: We may disclose your personal information when we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.  
With Your Consent: We may share your personal information with third parties when we have your explicit consent to do so.  

5. International Data Transfers (GDPR and APAC Considerations)

As our Website may be accessed by users in various regions, including the European Economic Area (EEA) and the Asia-Pacific (APAC) region, your personal information may be transferred to and processed in countries outside of your country of residence. These countries may have data protection laws that are different from the laws in your country.  

For EEA Users (GDPR Compliance): If you are located in the EEA, your personal data will be processed in accordance with the General Data Protection Regulation (GDPR). When we transfer your personal data outside the EEA, we will ensure that appropriate safeguards are in place, such as:

Transferring to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Implementing Standard Contractual Clauses approved by the European Commission, which provide contractual guarantees for the protection of your personal data.  
Relying on other legally permissible transfer mechanisms.
Under the GDPR, you have certain rights regarding your personal data, including the right to:

Access: Request access to your personal data.  
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request the deletion of your personal data under certain circumstances.  
Restriction of Processing: Request the restriction of processing your personal data under certain circumstances.
Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.  
Object: Object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.  
Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the contact details provided below. You also have the right to lodge a complaint with a supervisory authority in your country of residence if you believe that our processing of your personal data infringes the GDPR.  

For APAC Region Users: We recognize the diversity of data protection laws within the APAC region. For users in this region, we will process your personal data in accordance with applicable local laws and regulations. We will take reasonable steps to ensure that your personal data is protected in accordance with the data protection standards applicable in your jurisdiction. This may include implementing specific safeguards or adhering to local requirements regarding data storage, transfer, and security. We will provide specific information about our data processing practices as they relate to your jurisdiction if required by local law.

6. Data Security

We have implemented reasonable technical and organizational measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These measures include encryption, firewalls, secure server facilities, and access controls. However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.  

7. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period will depend on the nature of the personal information and the purposes for which it is processed. Generally, we will retain your data for the duration of your relationship with us and for a reasonable period thereafter, taking into account applicable legal and regulatory obligations.  

8. Your Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information. These rights may include the right to:

Access: Request information about the personal data we hold about you.  
Correction: Request that we correct any inaccurate or incomplete personal data.
Deletion: Request that we delete your personal data under certain circumstances.  
Objection to Processing: Object to the processing of your personal data for certain purposes, such as direct marketing.
Restriction of Processing: Request that we restrict the processing of your personal data under certain circumstances.
Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.  
Withdraw Consent: Withdraw your consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the contact details provided below. We may need to verify your identity before fulfilling your request.  

9. Third-Party Links

Our Website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.  

10. Children's Privacy

Our Website is not intended for children under the age of [Insert Relevant Age, e.g., 16]. We do not knowingly collect personal information from children without verifiable parental consent. If we become aware that we have collected personal information from a child without such consent, we will take steps to delete the information as soon as possible. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us.  

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the "Last Updated" date at the top of the policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Where required by law, we will obtain your consent to these changes.  

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:  

AITHENTIC
be@aithentic.ai
101 Pakenham Street West, Auckland Central
1010 New Zealand