Introduction
Roasthero ("we", "our", "us") operates the roasthero.io website, which provides a digital audit service. This Privacy Policy explains how we collect, use, and disclose personal data when you use our Service, and your rights concerning that data under the General Data Protection Regulation (GDPR).
1. Data Controller and Contact Information
Roasthero is the data controller for your personal data. If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at: support@roasthero.io
2. Legal Basis for Processing
We process your personal data based on one or more of the following legal bases:
Performance of a Contract: We process your personal data to provide the services you have requested.
Legitimate Interests: We may process your data for our legitimate interests, such as improving our services, provided that these are not overridden by your rights and interests.
Consent: Where we rely on your consent for processing, you have the right to withdraw it at any time.
Compliance with Legal Obligations: We may process your data to comply with legal obligations.
3. Data Collection and Use
We collect and use the following types of personal data:
Contact Information: This includes your name, email address, and phone number when you communicate with us.
Payment Information: Payment details are processed by Stripe. We do not store this information.
Usage Data: We use Google Analytics to collect anonymous data such as IP addresses, browser type, and pages visited, to monitor and analyze the use of our Service.
4. How We Share Your Data
We do not share your personal data with third parties except in the following circumstances:
Service Providers: We share your data with our web service provider (Framer), payment processor (Stripe), and analytics provider (Google Analytics), only as necessary to provide our services.
Legal Requirements: We may disclose your personal data if required by law or in response to valid requests by public authorities.
Business Transfers: If Roasthero is involved in a merger, acquisition, or asset sale, your personal data may be transferred.
5. International Data Transfers
If your personal data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy, or as required by law. For example, we retain payment information only for the duration of the transaction and any applicable legal retention period.
7. Your Rights
Under GDPR, you have the following rights:
Right to Access: You can request access to your personal data.
Right to Rectification: You can request corrections to inaccurate or incomplete personal data.
Right to Erasure: You can request the deletion of your personal data.
Right to Restrict Processing: You can request the restriction of processing your personal data.
Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format.
Right to Object: You can object to the processing of your personal data under certain circumstances.
To exercise any of these rights, please contact us using the information provided above.
8. Cookies
Roasthero uses cookies to ensure the proper functioning of our website. These cookies are necessary for the website to function correctly. We also use Google Analytics cookies to collect anonymous data about website usage.
Cookie Management: You can manage your cookie preferences through your browser settings. However, disabling cookies may affect the functionality of our website.
Consent for Cookies: Where required by law, we will obtain your consent before using cookies that are not strictly necessary for the website's operation.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, access controls, and regular security assessments.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Changes will be effective immediately upon posting.
11. Complaints
If you believe that we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU country where you live, work, or where the alleged infringement occurred.
12. Third-Party Links
Our website contains links to third-party websites (e.g., Framer, Google, Stripe). Please review their privacy policies to understand how they handle your data.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at_ support@roasthero.io