Effective date: [Effective date]
This Privacy Policy explains how [Legal entity name] (“ProjexSCM”) processes personal data when you use our websites and platform. It applies to visitors, account users, and suppliers who interact with the Service.
We collect:
To provide, secure, and improve the Service; authenticate users; send transactional and (where permitted) product communications; and comply with legal obligations. We do not sell personal data.
Where GDPR or similar laws apply, we rely on contract performance, legitimate interests, consent (e.g. non-essential cookies), and legal obligation. [Confirm bases with counsel.]
We share data with vetted service providers who process it on our behalf (e.g. cloud hosting, email delivery, analytics, error monitoring), under contract. [Maintain a current sub-processor list.]
We retain personal data for as long as needed to provide the Service and meet legal requirements, then delete or anonymize it. Customer Data is retained per your subscription and export/deletion terms.
We use technical and organizational measures including encryption in transit, tenant isolation (row-level security), least-privilege access, and monitoring. No system is perfectly secure.
Data may be processed in countries other than yours. Where required, we use appropriate safeguards (e.g. standard contractual clauses). [Confirm transfer mechanism.]
Subject to applicable law, you may request access, correction, deletion, or portability of your personal data, and object to or restrict certain processing. Contact us to exercise these rights.
We use cookies and similar technologies as described in our Cookie Policy.
The Service is for business use and is not directed to children, and we do not knowingly collect their data.
We may update this Policy; material changes will be notified and the “Effective date” above updated.
Privacy questions or requests: privacy@projexscm.com. [Add data-controller details and, if required, an EU/UK representative.]