SITE299 GDPR Compliance & Privacy Policy

1. Introduction

SITE299 is committed to protecting user privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This document explains how SITE299 collects, uses, stores, and protects user data while using our microsite platform and related services.

2. Information We Collect

SITE299 may collect personal information including business name, email address, phone number, payment details, website content, analytics data, and customer enquiry information submitted through the platform.

3. Purpose of Data Collection

The collected data is used to provide microsite services, customer support, payment processing, analytics, platform improvements, marketing communication, and business enquiry management.

4. Legal Basis for Processing

SITE299 processes personal data based on user consent, contractual necessity, legitimate business interests, and compliance with legal obligations.

5. User Rights Under GDPR

Users have the right to access, correct, update, export, or delete their personal data. Users may also withdraw consent for data processing and request restriction of processing where applicable.

• Right to Access - Know what data we hold about you
• Right to Rectification - Correct inaccurate data
• Right to Erasure - Request deletion of your data
• Right to Restrict Processing - Limit how we use your data
• Right to Data Portability - Receive your data in a portable format
• Right to Object - Object to certain data processing

6. Data Retention

SITE299 retains user data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

7. Data Security

SITE299 implements technical and organizational measures including secure hosting, encryption, restricted access controls, and secure authentication systems to protect personal data.

• 256-bit SSL/TLS encryption for all data transmission
• Secure cloud hosting with ISO 27001 certification
• Regular security audits and penetration testing
• Role-based access controls and authentication
• Automated backup and disaster recovery systems

8. Third-Party Services

SITE299 may use third-party providers including payment gateways, analytics providers, cloud hosting services, and communication tools. These providers process data according to their own privacy policies and GDPR standards.

• Payment processors (Razorpay, Stripe)
• Analytics services (Google Analytics)
• Cloud hosting (AWS, DigitalOcean)
• Email and communication services
• Customer support platforms

9. Cookies and Tracking

SITE299 may use cookies and analytics tools to improve user experience, understand visitor behavior, and optimize platform performance.

10. International Data Transfers

If data is transferred outside the European Economic Area (EEA), SITE299 ensures appropriate safeguards are implemented in accordance with GDPR requirements.

11. Contact Information

For GDPR-related requests, privacy concerns, or data access inquiries, users may contact SITE299 support through the official website or registered support channels.

Email: privacy@site299.in

Contact Form: /contact

12. Updates to This Policy

SITE299 reserves the right to update this GDPR policy periodically. Updated versions will be published on the official platform with revised effective dates.