1. Introduction

Iginity Corporation (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the United Kingdom Data Protection Act 2018 (DPA 2018), the General Data Protection Regulation (GDPR), and other applicable UK privacy laws.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using our website and services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Company Address: Iginity Corporation, Exeter, United Kingdom

2. What Personal Data We Collect

We collect information that you provide directly and information that is collected automatically when you interact with our website and services.

2.1 Information You Provide Directly

When you contact us, submit forms, or use our services, we may collect:

• Contact Information: Full name, email address, phone number, postal address
• Account Information: Username, password, profile picture (if applicable)
• Communication Data: Messages, inquiries, feedback, comments, and any correspondence with us
• Transaction Information: Payment details, order history, invoices (processed securely through third-party providers)
• Service-Related Information: Preferences, interests, and information about how you use our services

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Device Information: Device type, operating system, browser type, IP address, mobile device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referral source, browsing patterns
• Location Data: General location information based on IP address (not precise GPS tracking)
• Cookie Data: Information collected through cookies and similar tracking technologies

2.3 Data from Third Parties

We may receive information from:

• Payment processors and financial institutions
• Email service providers
• Analytics platforms
• Business partners and service providers

3. Legal Basis for Processing Your Personal Data

Under the GDPR and DPA 2018, we process your personal data only when we have a lawful basis to do so. Our legal bases include:

• Consent: You have explicitly consented to the processing for specific purposes
• Contract: Processing is necessary to perform a contract with you or take pre-contractual steps
• Legal Obligation: Processing is necessary to comply with UK or EU law
• Legitimate Interests: Processing is necessary for our legitimate business interests that do not override your rights and freedoms
• Vital Interests: Processing is necessary to protect your vital interests or those of another person

4. How We Use Your Personal Data

We use the information we collect for various purposes, including:

• Service Delivery: Processing orders, providing customer support, and managing your account
• Communication: Responding to your inquiries, sending transactional emails, and keeping you informed about services
• Marketing: Sending promotional materials and newsletters (only with your consent)
• Improvement: Analyzing usage patterns to improve our website, services, and user experience
• Security: Preventing fraud, detecting abuse, and protecting against malicious activity
• Compliance: Meeting legal, regulatory, and contractual obligations
• Analytics: Understanding how users interact with our services to optimize performance
• Personalization: Customizing content and recommendations based on your preferences

5. Who We Share Your Data With

We do not sell, trade, or rent your personal data to third parties. However, we may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (payment processors, email providers, analytics services) under strict confidentiality agreements
• Business Partners: Organizations we partner with to provide integrated services (only when necessary and with appropriate safeguards)
• Legal Authorities: Government agencies or law enforcement when required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
• Consent-Based Sharing: Third parties with your explicit consent for specific purposes

All third-party recipients are required to maintain the confidentiality and security of your personal data and use it only for the purposes we specify.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention periods include:

• Contact Information: Retained for the duration of our business relationship and 3 years after
• Transaction Data: Retained for 7 years to comply with UK tax and accounting regulations
• Marketing Communications: Retained until you unsubscribe or withdraw consent
• Website Usage Data: Typically retained for 12 months
• Support/Communication Records: Retained for 3 years or as required by law

When data is no longer needed, we securely delete or anonymize it. However, we may retain data when required by law or for legitimate business purposes.

7. Your Rights Under GDPR and UK Data Protection Law

You have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete information
• Right to Erasure: You may request deletion of your personal data (the “right to be forgotten”), subject to certain conditions
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format
• Right to Object: You can object to processing of your data for marketing or legitimate interests
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time
• Rights Related to Automated Decision Making: You have rights relating to automated processing and profiling

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within 30 days as required by law.

8. Data Security

We take data security very seriously and implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: SSL/TLS encryption for data in transit
• Secure Storage: Encrypted storage of sensitive data at rest
• Access Controls: Restricted access to personal data, limited to authorized personnel
• Firewalls: Network firewalls and intrusion detection systems
• Regular Audits: Periodic security assessments and penetration testing
• Staff Training: Data protection training for all employees handling personal data
• Incident Response: Procedures for identifying and responding to data breaches

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the highest standard.

9. Cookies and Similar Tracking Technologies

We use cookies and similar technologies to enhance your experience and gather usage information.

9.1 Types of Cookies

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Collect information about how you use our website
• Marketing Cookies: Used to deliver personalized advertisements (with consent)
• Social Media Cookies: Allow integration with social media platforms

9.2 Your Cookie Choices

You can control cookies through your browser settings and opt-out of certain tracking. However, disabling some cookies may affect website functionality. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

10. Third-Party Links and Services

Our website may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing personal information.

11. International Data Transfers

Your personal data is primarily stored and processed in the United Kingdom. However, in limited circumstances, we may transfer data to countries outside the UK/EEA only when:

• The country has been deemed to have adequate data protection by the UK ICO
• Appropriate safeguards are in place (such as Standard Contractual Clauses)
• You have explicitly consented to the transfer

By using our services, you consent to any necessary transfers subject to these conditions.

12. How to Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or report a data breach, please contact us:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of our services following the posting of changes constitutes your acceptance of the revised Privacy Policy.

14. Key Definitions

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data (collection, storage, use, sharing, etc.)
• Data Controller: The organization determining the purposes and means of processing (Iginity Corporation)
• Data Processor: Any organization processing personal data on behalf of the controller
• Consent: Any freely given, specific, informed, and unambiguous affirmation of a data subject’s wishes
• Data Subject: The individual to whom personal data relates

15. GDPR Compliance Statement

Iginity Corporation fully complies with the General Data Protection Regulation (EU) 2016/679 and the United Kingdom Data Protection Act 2018. We are committed to:

• Processing personal data lawfully, fairly, and transparently
• Collecting only necessary data for specified, explicit, and legitimate purposes
• Maintaining data accuracy and keeping records up to date
• Keeping personal data secure and confidential
• Respecting the rights of data subjects and responding to requests promptly
• Implementing data protection by design and by default
• Conducting Data Protection Impact Assessments where necessary
• Reporting data breaches to authorities and individuals as required by law