Privacy Policy, How we collect and protect your data

1. Who we are and who is responsible for your data

The data protection officer for this Site is TECHMIM LLC (TECHMIM), a company registered in the state of New Mexico, United States of America, business file number 0008065268. This document is a binding reference for everyone who visits techmim.com/ar or contact us through the contact page, phone, or the WhatsApp app, and is read together with Terms of use.

2. The data we collect

• What you share with us voluntarily: your name, business or company name, phone or WhatsApp number, and the content of your message and project details when you contact us.
• Technical data collected automatically: your Internet Protocol address, browser type and language, visit time and requested pages, through hosting server logs, to ensure security and performance and detect intrusion attempts.
• Preferences stored only in your browser: your dark or light mode choice is stored locally on your device and is not sent to us.
• Billing details when contracting with us: name, address, and invoice details, collected through a secure billing provider, your card data never passes through our servers.

The Site has no login or user accounts, we never collect passwords, and no payment transaction takes place inside the Site's pages.

3. How we use your data

• Answering your inquiry and preparing the quote you requested.
• Performing the contract signed with you and providing the technical support that follows it.
• Improving the site, its performance, and its security, and understanding visitor needs in aggregate and anonymously.
• Complying with applicable legal, accounting, and tax requirements.
• Preventing and refusing attempts at fraud, forgery, impersonating our identity, or using our brand without permission.

We do not use your data for any purpose other than those stated above, and we do not send any marketing message without your explicit consent; if we do send a commercial message, it includes our full identity and an unsubscribe method under The U.S. CAN-SPAM Act (15 U.S.C. §7704).

4. Legal bases for processing your data

If you are in the European Union or the United Kingdom, we process your data under one of the following bases:

• Contract execution or the steps it requires before entering into it (such as responding to a quote request), Article 6(1)(b).
• Legitimate interest for site security, fraud prevention, and service improvement, Article 6(1)(c).
• Your consent when it is requested from you, Article 6(1)(a), and you may withdraw it at any time without adverse effect.
• Legal obligation Falls on us, Article 6(1)(d).

Reference: the EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, Article 6: data may be processed only if one of the four legal bases is provided.

5. Who we share your data with

• Hosting provider who operates the Site and captures its security logs.
• Billing provider when contracting with us and issuing invoices.
• Official authorities, only upon a valid legal or regulatory order, and to the extent the law requires.

We never sell, rent, or share your data for advertising purposes, ever. And if you are a California resident: we declare that we have not been and will not sell or share your personal data for monetary consideration, and your rights under the California Consumer Privacy Act (CCPA as amended by the CPRA, Cal. Civ. Code §1798.100 et seq.) a prompt list.

6. International data transfers

We are a U.S. company, and your data may be processed inside the United States. If you are in the European Economic Area, we transfer your data under the GDPR Chapter V safeguards, namely via Standard contract clauses or an adequacy decision in force, applying your country's data-protection legislation additionally.

Reference: GDPR, Articles 44 to 49 (Chapter V: transfers of personal data to countries outside the European Economic Area).

7. Data retention periods

• Contact messages: as long as needed to complete following up on your request, and as required to retain reasonable professional records within their legal periods.
• Contracts and invoices: the applicable legal, accounting, and tax retention periods.
• Security server logs: according to the short customary hosting cycle for detecting intrusions.

When the period ends, we delete the data or destroy it securely, unless the law requires keeping it longer.

8. Your rights over your data

Under GDPR (Articles 15 to 22) you have the right:

• to request Access of your data and a copy of it.
• Request Rectification any inaccurate or incomplete data.
• Request Deletion (the "right to be forgotten").
• Request Restriction processing your data in specific circumstances.
• Request Portability your data in a commonly used structured format.
• Objection to processing based on legitimate interest, and Withdraw your consent at any time.
• File a complaint to the supervisory authority in your country (Article 77).

And if you are in California: the right to know the categories and purposes, to request deletion, and to opt out of "sharing" of data, all exercised free of charge.

Reference: GDPR Articles 15 to 22 and 77; the California Consumer Privacy Act (CCPA/CPRA), Cal. Civ. Code §1798.100 et seq.

Responding to your request: Within a month of receiving it, and extendable for one more month with notice to you of the reason. The extension is via Contact page exclusively, and with no fees in the first place.

9. Information security and impersonation warning

• We apply data-in transit encryption (TLS), internal access controls, periodic backups, and security reviews of our systems.
• There is no absolute 100% guarantee in the digital world, but we commit to an appropriate level of risk under GDPR Article 32 and the dictates of professional diligence in the industry.

Important warning: We never ask you, ever, via WhatsApp, phone, or any message for a password, a card number, or a verification code. Anyone claiming to be from TECHMIM and asking for those A scammer impersonating us; do not reply, save the message and report it immediately via Contact page. We bear no responsibility for communication that takes place outside the official channels announced on this Site.

10. Cookies and local storage

• The Site uses tools to measure and improve user experience, and we may enable third-party tracking services for advertising and analytics purposes, including Google Analytics and Google Ads and Facebook Pixel and TikTok Pixel, alongside analytics services that help improve site performance and your browsing speed.
• Those tools collect aggregated information, such as your browser type, the pages you visit, and your traffic source, without carrying your direct personal identity, and you can disable them from your browser settings or from the ad settings of each platform.
• Local storage is also used for your preferences (dark/light mode); you can delete it from your browser settings at any time, and this section is updated automatically when a new tool is added.

11. Children's privacy

The Site and Services are intended for businesses and adults, are not directed to anyone under 13, and we do not knowingly collect any data related to them, in compliance with The Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§6501 to 6502). If a child's data reaches us by mistake, we delete it immediately upon being informed.

12. Links to other sites

The Site may contain links to third-party sites for our services or our partners; those sites set their own policies and we recommend reviewing them. We are not responsible for their practices or content.

13. Changes to this Policy

We post any amendment to this Policy on this page and update the "Last updated" date below. Material changes may also be announced on the Site. Continuing to use the Site after an amendment is posted means you accept it; if you disagree, you may stop using the Site and exercise your deletion rights.

14. Contact and exercising your rights

All questions and rights requests are sent via Contact page on the Site, and we accommodate them as fast as possible. We display no email address on the Site's pages to prevent address harvesting, impersonation, and fraud; the contact page is the only official approved channel.