Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, protect, and share your personal information.
Welcome to Xata Technologies
Xata Technologies ("we", "us", "our", or "Xata") is committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.
This policy applies to all users of our website, software products, and services, regardless of location. We comply with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other regional privacy regulations.
Our Commitment to You
At Xata Technologies, we are committed to providing you with reliable, high-quality services while respecting your privacy rights. Our goal is to help you achieve your business objectives with confidence, knowing that your data is handled with the utmost care and security.
We value transparency and are here to answer any questions you may have about how we handle your information. Please feel free to reach out to our privacy team with any concerns or suggestions on how we can better protect your privacy.
Information You Provide Directly
We collect information that you voluntarily provide when you:
- Contact us for inquiries or consultation requests
- Create an account or sign up for our services
- Subscribe to our newsletter or marketing communications
- Engage with our customer support
- Participate in surveys, webinars, or events
This information may include:
- Contact Information: Name, email address, phone number, business address
- Business Information: Company name, job title, industry, company size
- Account Information: Username, password, profile information
- Billing Information: Payment details, billing address, tax identification numbers
- Project Information: Technical requirements, project specifications, communication history
Information Collected Automatically
When you visit our website or use our services, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Information: Pages visited, time spent, links clicked, referring URLs
- Location Data: General geographic location based on IP address
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience
Information from Third Parties
We may receive information about you from:
- Business partners and referral sources
- Social media platforms (if you connect your accounts)
- Public databases and data enrichment services
- Marketing and analytics providers
Service Delivery
- Provide, maintain, and improve our software development and IT services
- Process transactions and fulfill contracts
- Deliver customer support and respond to inquiries
- Manage user accounts and authentication
Communication
- Send project updates and technical notifications
- Respond to your questions and requests
- Provide customer support and technical assistance
- Send administrative information about our services
Marketing and Business Development
- Send promotional communications about our services (with your consent)
- Personalize your experience with our content
- Conduct market research and analyze industry trends
- Organize events, webinars, and educational content
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and UK, we process your data based on:
- Contract Performance: Processing necessary to fulfill our contractual obligations
- Legitimate Interests: Our legitimate business interests, such as improving services and preventing fraud
- Consent: Your explicit consent for marketing communications and certain data processing activities
- Legal Compliance: Processing required to comply with legal obligations
How We Share Your Information
We do not sell your personal information. We may share your data with:
- Service Providers: Cloud hosting providers (AWS, Google Cloud, Azure), payment processors, email platforms, analytics services, and CRM systems
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity
- Legal Requirements: When required to comply with legal obligations, court orders, government requests, or to protect our rights and safety
- With Your Consent: When you explicitly consent to sharing with third parties
International Data Transfers
Xata Technologies operates globally. Your information may be transferred to and processed in countries outside your country of residence, including the Philippines, United States, and other countries where our service providers operate.
When transferring data internationally, we implement appropriate safeguards such as:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with service providers
- Ensuring adequate levels of data protection in destination countries
Third-Party Services
Our website may include links to third-party websites or services that are not owned or controlled by us. We do not endorse or assume any responsibility for such third-party sites. Accessing and using these services is at your own risk, and we encourage you to review their privacy policies.
Data Retention
We retain your personal information for as long as necessary to:
- Provide our services and fulfill contractual obligations
- Comply with legal, tax, and accounting requirements
- Resolve disputes and enforce agreements
- Support business operations and analytics
Typical retention periods:
- Active customer data: Duration of business relationship plus 7 years
- Marketing data: Until you unsubscribe or request deletion
- Website analytics: 26 months
- Support tickets: 3 years after resolution
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Types of cookies we use:
- Essential Cookies: Required for website functionality and security
- Performance Cookies: Help us understand how visitors interact with our website
- Functionality Cookies: Remember your preferences and settings
- Marketing Cookies: Track your browsing to deliver relevant advertisements
You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.
Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection and security
- Incident response and breach notification procedures
- Regular backups and disaster recovery planning
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Rights for All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Opt-Out: Unsubscribe from marketing communications at any time
Additional Rights (GDPR - EEA/UK)
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for consent-based processing
- Lodge a Complaint: File a complaint with your local data protection authority
Additional Rights (CCPA/CPRA - California)
- Know: Know what personal information is collected and how it's used
- Delete: Request deletion of personal information
- Opt-Out: Opt-out of the "sale" or "sharing" of personal information
- Non-Discrimination: Not be discriminated against for exercising privacy rights
- Correct: Request correction of inaccurate personal information
- Limit: Limit use and disclosure of sensitive personal information
Exercising Your Rights
To exercise your rights, please contact us at privacy@xatatech.com. We will respond to your request within 30 days. We may require verification of your identity before processing your request to ensure the security of your personal information.
Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date, sending an email notification to registered users, or displaying a prominent notice on our website.
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
Regional Specific Information
For EEA/UK Users: Our data controller is Xata Technologies OPC. You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with GDPR requirements.
For California Residents: Under the CCPA/CPRA, California residents have specific rights regarding their personal information. We do not sell personal information in the traditional sense, but we may share information with third parties for advertising purposes. You can opt-out by contacting us.
For Philippine Residents: We comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and National Privacy Commission regulations. You may file complaints with the National Privacy Commission at www.privacy.gov.ph.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: privacy@xatatech.com
- Data Protection Officer: dpo@xatatech.com
- Address: Unit 2116-17 Level 21 North Tower Park Triangle Corporate Plaza, BGC, Taguig City, Metro Manila, Philippines, 1635
We are committed to addressing your privacy concerns promptly and transparently. Our team will work with you to resolve any issues and ensure your rights are protected.