Latest Revision: November 12, 2024
This Data Protection Statement is relevant to all personal details of users obtained by TABACRIS LIMITED via the web portal [email protected]. This statement outlines the types of personal details we gather when you interact with our Product, along with its purposes and methods of use.
Whenever the term “we”, “us”, or “our” is used within this Data Protection Statement, it refers to TABACRIS LIMITED, located at ROOM 511, 5/F, MING SANG IND BLDG, 19-21 HING YIP STREET, KWUN TONG, HONG KONG
Business registration number 77166318, with the contact email – [email protected]. If you disagree with any part of this Data Protection Statement, kindly refrain from using our Product.
We retain the authority to modify this Data Protection Statement whenever necessary. We will inform you of any revisions by highlighting the most recent revision date every time amendments are made. Such amendments will become effective as soon as they’re displayed on our Product. By continuing to use the Product post the modification date, you’re agreeing to the revised Data Protection Statement. In situations where significant modifications are made that require your explicit permission regarding the handling of your personal details, we will seek either a fresh consent or a reaffirmation of previous consent.
Our handling of your personal details.
Your personal details are handled by us under the following scenarios:
A. INFORMATION YOU SHARE WITH US
1.1. During the establishment of an Account at [email protected], we gather data such as:
• First name – This helps us address you personally when offering technical assistance or addressing other concerns;
• Email address – Required for your registration within our Product;
• Contact number – Utilized to reach out to you. Be informed that we might call via the given number to seek feedback regarding our Product or address any other concerns.
Based on a legitimate interest founded on a balance of interests, we might employ the aforementioned details to make recommendations related to our Product, through messages or emails.
1.2. Upon completing your Account profile, there’s an option to include:
• Surname;
• Personal photograph.
It’s worth noting that while these details enhance your profile, they aren’t mandatory.
1.3. Engaging with us through various channels like email or phone means we’ll gather and utilize the information shared to address the specific concern you raised.
1.4. Any other means by which you share personal details with us (like feedback, customer service inquiries, etc.) will see the data being used specifically to address your concerns.
B. AUTOMATICALLY GATHERED DATA
1.5. When you engage with our Product, certain information may be collected automatically, including through the utilization of cookies. This might encompass data such as IP addresses, browser specifications, preferred language settings, general location-related information, and metrics on how you navigate and interact within our Product. For a deeper understanding of our cookie usage, please refer to the section titled “Cookies” within this document.
C. TRANSACTION-RELATED DETAILS
1.6. Making a payment within our Product might necessitate you to input your payment credentials. However, we don’t directly handle this payment-related information. Third-party payment facilitators are responsible for this aspect of the process.
D. USER RESPONSE INFORMATION
1.7. If you decide to provide insights or feedback about our Product on any web-based platform, you’re giving us consent to utilize your full name (or chosen username), display picture, and the content of your feedback, which might include featuring your feedback within our Product.
E. DATA FROM LINKED EXTERNAL SOURCES
1.8. We offer the provision for users to sign in or gain authorization using accounts they’ve set up on external platforms, such as Facebook among others (referred to as “External Sources”). In instances where you connect to our Product through these External Sources, we gather personal details that you’ve permitted these platforms to share. This could include attributes like your name, email address, profile details, and user preferences. It’s essential to note that this data is first collated by the operator of the External Source and then shared with us, based on their own data handling protocols. Typically, you can manage and dictate the extent of personal details shared through these platforms by adjusting the privacy configurations on your External Source account.
Sharing of your personal details.
2.1. Your personal information might be disclosed to certain entities as enumerated below:
• Analytical partners such as Facebook Pixel and Amplitude;
• Communication tool for disseminating messages: smtp.bz;
• Various payment mechanisms integrated within our Product;
• The entity providing our web hosting services.
To grasp how the mentioned entities handle your personal details, it’s recommended to review the documentation provided by each service, accessible either directly on their websites or upon specific requests.
2.2. We might also share your personal information under circumstances where: (1) we genuinely believe we’re mandated by law to do so, or (2) it’s essential to identify, deter, and tackle fraud or other illicit activities.
Sharing your personal details.
3.1. Your personal details might be shared with specific third-party entities as mentioned below: • Analytical partners: Facebook Pixel and Amplitude;
• Messaging tool: smtp.bz;
• Payment options integrated within our Product;
• Our web hosting service.
For more information on how these services manage your personal details, consider referring to the specific documents provided by each respective service, accessible via their official websites or upon inquiry.
3.2. We might also share your personal details under circumstances where: (1) we genuinely believe we’re mandated by law to do so, or (2) it’s vital to identify, counteract, and tackle fraudulent or other unauthorized activities.
Regarding Cookies.
4.1. Cookies are tiny text snippets transmitted to your desktop or mobile device that allow our Product and its functionalities to work optimally.
4.2. We employ both session and persistent cookies. Session cookies are ephemeral and don’t persist on your device post-session. Their primary function is for security and authentication, as well as to ensure our Product’s features are delivered effectively. They can also recall your preferences during Product use. These session cookies are eliminated once you exit our Product. Conversely, a persistent cookie remains on your device for a predetermined duration after you’ve interacted with our Product.
4.3. Essential cookies are vital for certain Product functionalities. They facilitate basic operations such as navigating pages and accessing the Product’s secure segments. Without these cookies, the Product’s functionality could be compromised.
4.4. Additionally, we use third-party cookies aimed at analysis and marketing. These cookies gather insights on user engagement with our Product and the impact of our third-party promotions. Our Product relies on third-party cookies as furnished by our service providers, as elaborated in the “Sharing your personal details” section above.
4.5. You have the option to deactivate cookies by adjusting your browser or device configurations or by reaching out to us at [email protected]. Please note that our Product isn’t intended for those below 18 years of age. We don’t intentionally collect details from minors. If we discern that such data has been provided by someone below 18, we’ll initiate steps for its deletion. If you’re aware of such an occurrence, kindly contact our support team at [email protected]. We store your personal details only as long as it’s necessary to fulfill its intended purpose. While we might retain some details longer based on legitimate grounds (e.g., for tax or accounting needs), if there’s no valid reason to continue processing your data, we’ll either delete or anonymize it.
Minors and Our Product. Our Product is not intended for use by individuals below the age of 18. We do not deliberately gather personal information from those under this age threshold. If we discover that such information has been provided by a child below 18, we’ll ensure that the information is promptly deleted. If you come to know of any such instances where a minor has shared personal data with us, we urge you to inform our support team at [email protected].
Duration of Data Storage. We store your personal information only for the duration required to serve its processing objectives. You should be aware that certain scenarios might necessitate us to retain some of your personal details for extended periods, especially when there are legal grounds to do so. For example, fulfilling legal obligations, like those related to taxation or accounting, might require longer retention of your data. In cases where there’s no justified reason to persist with data processing, we’ll either expunge or make your personal details anonymous.
Absence of Automated Evaluations. We refrain from utilizing any form of automated decision-making processes, and automated profiling is not a practice we engage in.
Rights Afforded to You & How to Invoke Them. For our users residing in regions governed by GDPR, they possess specific rights concerning their personal data. These rights are elaborated further in the subsequent table. (Note: At this point, you may want to provide a table that details these rights. However, since no table was provided in the original text, I haven’t included one. Ensure that any table you include clearly articulates each right and how users can exercise it.)
Rights of EU Residents & How They Work
Access to Personal Data:
You can inquire about the personal data we hold about you, receive a duplicate of it, and also obtain additional details regarding its use.
Rectification of Data:
Should you identify any inaccuracies or outdated details in your personal data, you can prompt us for corrections at any moment.
Right of Erasure (“Right to be Forgotten”):
You have the authority to request the removal of your personal data.
Be aware, however, that we might retain your data if we’re legally bound to do so or if it’s required to resolve conflicts. If we lack valid grounds for data retention, we’ll erase or anonymize it and update you about such actions.
Restriction or Suspension of Data Processing:
You can demand limitations on processing under certain circumstances: if you challenge the data’s accuracy; if the processing is deemed unlawful but you don’t want data deletion; if we no longer require the data but you need it for legal claims; or if you’ve objected to our data processing methods.
Data Portability:
You might have the right to receive your data in a standard, accessible, machine-readable format to facilitate its transfer to a different data handler. Remember, this applies primarily to data processed via your consent or as per our Terms of Use.
Right to be Informed:
You are entitled to receive straightforward and comprehensible details about our data processing activities.
Objecting to Data Processing:
If we process data based on a legitimate interest, you can object, especially if you believe your specific circumstances warrant such objection. We will halt the processing unless we present a compelling legitimate reason that supersedes your concerns or if it’s essential for legal claims.
Withdrawing Consent:
Where consent forms the basis of our data processing, you can withdraw this consent at any time. If we lack an alternative justification for the processing, upon your request, we’ll cease any data activities initially rooted in your consent.
Information on Data Transfers:
You’re entitled to copies of safeguards pertaining to data transfers beyond the EU.
Lodging Complaints with Authorities:
You can approach your national data protection body with complaints about our privacy methods.
We strive to respond promptly, ideally within one month. For intricate requests, the response time might extend by another 2 months. Should this happen, we’ll inform you within a month of receiving your query and provide reasons for the delay.
Reach Out to Us: For inquiries about your data or any aspect of this Privacy Policy, contact us at [email protected].