BranDiligence™

PRIVACY POLICY

26.2.2025

This Privacy Policy explains how BranDiligence™ (“we”, “us”, “our”) collects, uses, shares, and protects your personal data as a user of our platform (“Platform”) in accordance with the EU General Data Protection Regulation (“GDPR”) and other applicable laws.

1. Information We Collect and Legal Basis

1.1. Personal Data Collected

We collect personal information you provide directly, such as your name, email address, contact details, professional information, and payment data when you register or use our services.

1.2. Usage Data

We automatically collect certain information about your use of the Platform (IP, browser type, device, visited pages, timestamps, etc.).

1.3. Cookies & Tracking

We use cookies and similar technologies for Platform functionality, analytics, and personalization. You can control non-essential cookies via your browser settings or our cookie consent tool.

1.4. Legal Basis for Processing

We process your personal data where:

Necessary to perform a contract (including Platform provision and validation services)
You have given explicit consent (such as for marketing or direct contact by validators)
Necessary for legitimate interests (security, service improvement), provided such interests are not overridden by your rights

2. How We Use Your Data

To provide, maintain, secure, and improve our Platform
To communicate with you (service updates, support, marketing if consented)
To personalize your experience
To enable validation services with Validators
To comply with legal obligations

3. Sharing and Transfer of Your Information

3.1. Service Providers & Processors

We share data with trusted service providers (e.g., hosting/payment/communication), each under a data processing agreement requiring GDPR-level data protection.

3.2. Validators

When you request validation (“VALIDATE THIS CASE”), you expressly consent to us providing your name and email to the Validator for direct contact. Validators are contractually bound to use your data only for the validation you request and must safeguard confidentiality.

3.3. International Transfers

Some service providers or validators may be outside the EEA. Where this occurs, we implement appropriate safeguards (such as EU Standard Contractual Clauses or adequacy decisions) to protect your data.

3.4. Legal/Business Transfers

We may share personal data in response to lawful requests or in the context of business transactions (e.g., mergers).

4. Data Security and Breach Response

We employ appropriate technical and organizational measures (encryption, firewalls, access control) to protect your data. In the event of a data breach affecting your rights, we follow GDPR notification procedures.

5. Data Retention

We only retain your data as long as required to fulfill the purposes for which it was collected, or as necessary to comply with legal obligations. Retention periods are available on request.

6. Your Rights

Subject to applicable law, you have the right to:

Access your personal data
Rectify incorrect/outdated data
Erasure (“right to be forgotten”)
Restrict or object to processing
Data portability (machine-readable export)
Withdraw consent at any time (without affecting prior processing)
Lodge complaints with your local data protection regulator

7. Data Protection Officer

For data protection questions, contact our appointed Data Protection Officer (DPO) at [DPO contact email if you have one, else keep above address].

8. Children’s Privacy

The Platform is not intended for use by children under 16. We do not knowingly collect data from children.

9. Updates to This Policy

We may update this Privacy Policy from time to time and will notify you of material changes here and by updating the effective date.

10. Contact Us

For questions or concerns, contact:
info@brandiligence.ai