Privacy Policy
Last Updated: August 16, 2024
At Deck.co, safeguarding your privacy is a top priority. This Privacy Policy outlines how we collect, use, protect, and share your personal information when you interact with our website and services. Whether you're located in Canada, the United States, Mexico, France, Brazil, the United Kingdom, Colombia, Spain, Germany, or any other region where we operate, we are committed to complying with all applicable privacy laws.
1. Our Commitment to Your Privacy
Deck.co values the trust you place in us. We take responsible measures to ensure that your personal information is treated with care. This Privacy Policy is intended to help you understand what data we collect, why we collect it, and how you can control your personal information.
2. Types of Information We Collect
Deck.co collects several types of information to provide and improve our services. The information we collect may include:
a. Personal Information
- Identification Information: Such as your name, email address, phone number, company name, and other contact details.
- Authentication Data: Information used to verify your identity, such as passwords, security questions, and similar credentials.
- Financial Information: If you use our payment services, we may collect payment card details, transaction information, and related billing data.
b. Data from Utility Accounts and Service Providers
- Utility and Service Data: Deck.co may collect data from your utility accounts, including electricity, gas, water, and other service providers. This data may include account information, usage details, and billing history.
- Government Sources: We may collect relevant data from government databases and records that are necessary for providing our services.
- Supply Chain Data: Deck.co may collect and analyze data from your supply chain, including logistics, inventory, and vendor information.
- Gig & Freelancer Platforms: We may also connect to gig and freelancer platforms, collecting data related to work history, earnings, and other relevant details to provide you with our service.
c. Automatically Collected Information
- Usage Data: Information about your interaction with our website and services, such as IP addresses, browser types, device identifiers, and pages visited.
- Cookies and Tracking Technologies: We use cookies and similar technologies to collect and store information about your visit to our website. This helps us improve our services and provide a better user experience.
3. Legal Basis for Processing (GDPR)
Depending on the purpose, we may process your personal data based on one or more of the following legal bases:
- Consent: Where you have given explicit consent to the processing of your personal data for specific purposes.
- Contractual Necessity: Where processing is necessary to fulfill a contract or pre-contractual steps you have requested.
- Legitimate Interests: Where we process your personal data for our legitimate business interests, provided that your rights do not override these interests.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation.
4. How We Use Your InformationThe information we collect serves several essential purposes, including:
- Service Delivery: To provide and maintain our services, including processing transactions, managing your account, and facilitating connections with utility and service providers.
- Analytics and Improvements: To analyze usage patterns and improve our website, services, and customer experience.
- Communication: To keep you informed about updates, new features, and relevant news.
- Customization: To tailor our services to your preferences and ensure a more personalized experience.
- Security Measures: To detect and prevent fraud, unauthorized access, or other security threats.
- Legal Compliance: To meet our legal obligations in various jurisdictions, including Canada, the U.S., Mexico, France, Brazil, the UK, Colombia, Spain, and Germany.
5. How We Share Your Information
Deck.co uses robust security practices to protect your personal information. However, in certain circumstances, we may need to share your data with trusted third parties:
- Service Providers: We work with external partners who assist in providing our services, such as hosting providers, payment processors, and data analytics services.
- Utility and Service Providers: We may share data with utility companies and service providers to enable them to deliver services to you effectively.
- Business Transactions: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- Legal Requirements: If required by law, we may disclose your information to comply with legal processes or protect the rights and safety of our users.
6. International Compliance and Data Transfers
Given the global nature of our business, your data may be transferred and processed in countries other than your own, including countries where we operate or where our service providers are located. These transfers will only occur if accepted by applicable law.Deck.co adheres to data protection regulations in the following regions:
- Canada: Compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
- United States: Adherence to federal and state privacy laws, including the California Consumer Privacy Act (CCPA).
- Mexico: Compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
- France, Spain, Germany: Compliance with the General Data Protection Regulation (GDPR).
- Brazil: Compliance with the General Data Protection Law (LGPD).
- United Kingdom: Compliance with the UK GDPR and the Data Protection Act 2018.
- Colombia: Compliance with Law 1581 of 2012.
We ensure that any data transfers meet the necessary legal standards to safeguard your information.
7. Your Rights and Choices
Depending on your location, you may have the following rights under applicable data protection laws:
- Access: Request access to the personal data we hold about you.
- Correction (Rectification): Request corrections to inaccurate or incomplete information.
- Deletion (Right to be Forgotten): Request deletion of your personal data.
- Data Portability: Request your data in a structured format.
- Restriction of Processing: Request that we limit how your data is used.
- Objection to Processing: Object to data processing based on legitimate interests.
- Opt-Out of Sale (CCPA): If applicable, opt out of data sales.
To exercise any of these rights, contact us at privacy@deck.co.
8. Data Retention
We retain your personal information only as long as necessary to fulfill legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on local regulations.
9. Children’s Privacy
Our services are intended for adult users. We do not knowingly collect personal information from children under applicable age restrictions in different regions. If you believe we have collected information from a minor, please contact us.
10. Security of Your Data
Deck.co implements industry-standard encryption, security protocols, and SOC2 audit processes to protect your data. However, no security method is entirely risk-free. If you have concerns, contact us.
11. Data Breach Notification
In case of a data breach, we will notify affected users and regulatory authorities as required by law.
12. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on our website with the "Last Updated" date.
13. Contact Information
For questions or concerns about this Privacy Policy or your personal data, please contact us:
Deck.co
📧 privacy@deck.co
📍 180, Peel St., Montréal, QC, H3C 2E9