Privacy Policy for StreamTech Lab

1. Introduction

At StreamTech Lab (“we”, “us”, or “our”), accessible via streamtechlab.com, we are strongly committed to safeguarding your personal information and protecting your privacy. We understand the importance of confidentiality and transparency in the digital ecosystem. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal data when you interact with our website and services, in full compliance with applicable data protection laws including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

2. Scope and Data Controller

This Privacy Policy applies to all visitors, users, and others who access the services through streamtechlab.com. StreamTech Lab, as the data controller for GDPR purposes and “business” under the CCPA definition, determines the purposes and means of processing your personal data.

For any inquiries, please contact us at: [email protected].

3. Categories of Data Processed

We may collect, use, store, and process the following categories of personal data:

a. Usage Data
This includes data regarding how you use our website, such as your IP address, browser type, domain names, access times, viewed pages, referring website addresses, geographic location, session duration, and other diagnostic data for analytical and security purposes.

b. Account Data
When you create an account, we collect your full name, email address, phone number, billing/shipping address, and other identifiers to manage your account and provide services.

c. Profile Data
This comprises information such as saved preferences, purchase history, browsing behavior, product and service interests, and user-generated content submitted through our platform.

d. Communication Data
Data you provide when contacting customer support, submitting requests, participating in surveys, or interacting via email, including transcripts and history of communications.

e. Technical Data
Details about the devices and systems used to access our website, such as device model, operating system, system settings, mobile carrier, screen resolution, and other device-specific details.

f. Transaction Data
Includes payment details (e.g., masked credit/debit card numbers), delivery addresses, transaction history, and other data necessary to complete financial operations and fulfill orders.

g. Preference Data
This includes your preferences regarding communication, marketing consents, product customizations, language, opt-ins/opt-outs, and other personalization settings.

4. Legal Bases for Processing Personal Data

In accordance with the GDPR, we rely on the following lawful bases to process your personal data:

– Contractual Necessity: For performance of a contract with you or to take pre-contractual steps at your request (e.g., account creation, order fulfillment).
– Legitimate Interests: For improving our services, securing our platform, preventing fraud, and enhancing customer experience, provided such interests are not overridden by your privacy rights.
– Consent: We will request your explicit consent before processing your data for certain marketing purposes or when legally required.
– Legal Obligation: When processing is necessary to comply with a legal requirement, such as tax laws or regulatory obligations.

Under CCPA, we do not sell your personal data. We may share it only as allowed under “business purpose” disclosures.

5. Your Rights

If you are subject to the GDPR or CCPA, you are entitled to certain rights regarding your personal information:

– Right of Access: You have the right to request access to the personal data we hold about you.
– Right to Rectification: You may request correction of inaccurate or incomplete personal data.
– Right to Erasure: You may request deletion of your personal data, subject to certain limitations.
– Right to Restrict Processing: You can ask us to restrict the processing of your personal data under certain conditions.
– Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
– Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
– Right to Object: You may object to processing conducted under legitimate interests or direct marketing.

CCPA Rights (for California Residents):

– Right to Know: You can request disclosure of the categories and specific pieces of personal data collected about you.
– Right to Delete: You can request deletion of your personal information, with exceptions as permitted by law.
– Right to Opt-Out: California residents have the right to opt out of any “sale” of personal information—although we do not sell data in any form.
– Right to Non-Discrimination: We will not discriminate against you for exercising your rights under CCPA.

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before fulfilling your request.

6. Security Measures

We implement administrative, technical, and physical safeguards to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

– SSL/TLS encryption for data in transit
– Regular data backups and recovery mechanisms
– Role-based access controls and multifactor authentication
– Firewalls and intrusion detection systems
– Regular employee training on data handling best practices

Despite our efforts, no method of internet-based transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. International Transfers

Your information may be transferred to, and maintained on, servers located outside your state, province, country, or other governmental jurisdiction. Where your data is processed outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses and comply with regional privacy frameworks. By using streamtechlab.com, you consent to such transfers.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, and to comply with legal, tax, accounting, or reporting requirements. Retention periods vary by data category:

– Usage Data: Up to 2 years
– Account Data: Retained until account deletion plus a grace period of 180 days
– Profile Data: Retained with account lifecycle or until request for deletion
– Communication Data: Retained for up to 3 years from last interaction
– Technical Data: Retained for no more than 13 months
– Transaction Data: Retained for legally mandated periods (typically 7 years)
– Preference Data: Retained until consent withdrawal or account termination

9. Cookie Policy

Our website employs cookies and other similar tracking technologies to enhance user experience, analyze site usage, and personalize content and advertisements. Types of cookies include:

– Essential Cookies: Required for basic functionality such as authentication or user session maintenance.
– Functional Cookies: Support enhanced features, such as remembering preferences or account settings.
– Analytics Cookies: Facilitate the collection of aggregate non-identifiable data for performance metrics and insights.
– Performance Cookies: Help us understand how users engage with the site to optimize performance.

10. Cookie Management and Regulatory Compliance

You have control over your cookie settings. Upon your first visit to streamtechlab.com, you will be presented with a consent banner allowing you to:

– Accept all cookies
– Customize your preferences per cookie category
– Reject non-essential cookies

You may also manage or delete cookies through your browser settings at any time. We honor Do Not Track (“DNT”) signals where applicable.

Our cookie practices are compliant with GDPR requirements regarding consent and transparency, and with CCPA opt-out and notice provisions.

11. Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that personal information has been collected from a child without verified parental consent, we will take steps to delete such information. If you believe that we have collected data from a child under 13, please contact us immediately at [email protected].

12. Policy Updates

We reserve the right to make changes to this Privacy Policy. In the event of any material alterations, notice will be provided via prominent placement on streamtechlab.com or through direct communication, where feasible. Users are advised to review this policy periodically to stay informed of how we protect their data.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or the processing of your personal information, please reach out to our Data Protection Administrator at:

Email: [email protected]

We are committed to upholding your data privacy rights and ensuring that your information is handled lawfully and transparently.

StreamTech Lab complies with data privacy laws and maintains practices aligned with international standards. If you have questions or concerns about how your personal information is used, please do not hesitate to contact us.