Privacy Policy

1. Overview

This Privacy Policy describes how ProEcommerce.com ("we," "our," or "us") collects, uses, and protects information about you when you visit our website, use our services, or communicate with us.

We are committed to maintaining the highest standards of data protection and privacy, in compliance with applicable laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy legislation.

By using our services, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Information You Provide Directly

• Contact Information: Name, email address, phone number, business address
• Business Information: Company name, industry, website URL, business requirements
• Account Information: Username, password, profile preferences
• Payment Information: Billing address, payment method details (processed securely through third-party providers)
• Project Information: Specifications, content, images, and other materials you provide for development projects
• Communication Records: Messages, emails, call recordings (with consent), support tickets

Information We Collect Automatically

Information from Third Parties

We may receive information about you from business partners, payment processors, marketing partners, and public databases, but only when you have consented to such sharing or when permitted by law.

3. How We Use Your Information

Primary Uses

• Service Delivery: Providing development, consultation, and support services
• Project Management: Managing your projects, timelines, and deliverables
• Communication: Responding to inquiries, providing updates, sending important notices
• Payment Processing: Processing payments and maintaining billing records
• Account Management: Creating and maintaining your account, preferences, and settings

Secondary Uses

• Analytics: Understanding how our services are used to improve performance
• Marketing: Sending promotional materials (with consent), newsletter updates
• Security: Protecting against fraud, unauthorized access, and security threats
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Business Development: Improving our services and developing new offerings

4. Information Sharing and Disclosure

We Do Not Sell Personal Information

ProEcommerce does not sell, rent, or trade your personal information to third parties for their marketing purposes.

Limited Sharing Circumstances

• Service Providers: Trusted third parties who assist with hosting, payment processing, analytics, and customer support
• Business Partners: When you explicitly request services that require partner involvement
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with notice to affected users)
• Consent: When you have given explicit consent for specific sharing purposes

Data Processing Agreements

All third-party service providers are bound by strict data processing agreements that require them to protect your information and use it only for specified purposes.

5. Cookies and Tracking Technologies

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality, security, and authentication
• Performance Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and provide enhanced features
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect site functionality. We provide a cookie consent banner for non-essential cookies.

Third-Party Analytics

We use Google Analytics and other analytics services to understand website usage. These services have their own privacy policies and opt-out mechanisms.

6. Data Security

Security Measures

• Encryption: All data transmission is protected by SSL/TLS encryption
• Access Controls: Limited access on a need-to-know basis with multi-factor authentication
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Enterprise-grade hosting with AWS security standards
• Employee Training: Regular privacy and security training for all staff
• Incident Response: Comprehensive plan for addressing potential security breaches

Data Breach Notification

In the unlikely event of a data breach affecting personal information, we will notify affected individuals and relevant authorities within 72 hours as required by applicable law.

7. Data Retention

Retention Periods

• Active Customers: Data retained for the duration of the business relationship
• Former Customers: Data retained for 7 years for business and tax purposes
• Marketing Data: Retained until you opt out or request deletion
• Website Analytics: Aggregated data retained for 26 months
• Support Records: Retained for 3 years for quality assurance

Secure Deletion

When data is no longer needed, it is securely deleted or anonymized to prevent unauthorized access or recovery.

9. International Data Transfers

Our services are primarily hosted in the United States. If you are located outside the US, your information may be transferred to and processed in the US, which may have different privacy laws than your country.

For EU residents, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other appropriate safeguards as recognized by applicable law

10. Third-Party Services

Key Third-Party Providers

• AWS: Cloud hosting and infrastructure services
• CloudFlare: Content delivery network and security
• Stripe/PayPal: Payment processing services
• Google Workspace: Email and productivity tools
• Analytics Providers: Website usage analytics

Each third-party service has its own privacy policy, and we encourage you to review them. We only work with providers that maintain appropriate privacy and security standards.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. California Privacy Rights (CCPA)

California residents have additional privacy rights under the California Consumer Privacy Act (CCPA):

CCPA Rights

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of exercising CCPA rights

Making CCPA Requests

California residents can make privacy requests by:

• Emailing: privacy@proecommerce.com
• Calling: 1 (307) 395-0300
• Using our online privacy request form

We will respond to verified requests within 45 days.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

• Contract Performance: To provide our services and fulfill our obligations
• Legitimate Interest: For analytics, security, and business development
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal information in accordance with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Providing prominent notice on our website

Your continued use of our services after the effective date of changes constitutes acceptance of the updated policy.