GDPR
GDPR (General Data Protection Regulation) Policy for ReachSmart.ai
Last updated: Dec. 14, 2023
Welcome to ReachSmart.ai. This GDPR Policy outlines how we collect, process, and protect personal data in compliance with the General Data Protection Regulation (GDPR).
​
1. Data Controller and Data Protection Officer
The data controller for ReachSmart.ai is ReachSmart Inc., and the designated Data Protection Officer can be contacted at support@reachsmart.ai.
​
2. Lawful Basis for Processing
We will only process personal data when we have a lawful basis to do so. This includes:
-
Consent: We will obtain your explicit consent before processing personal data.
-
Contractual Necessity: Processing is necessary for the performance of a contract.
-
Legal Obligation: Processing is necessary to comply with legal obligations.
-
Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party.
​
3. Types of Personal Data Collected
We collect and process the following types of personal data:
-
Contact Information: Name, email address, phone number.
-
Usage Data: Information about how you use our website.
​
4. Purpose of Processing
We process personal data for the following purposes:
-
To provide and maintain the Site.
-
To notify you about changes to our services.
-
To provide customer support.
-
To gather analysis or valuable information to improve our services.
​
5. Data Subject Rights
Under GDPR, data subjects have the following rights:
-
Right to Access: You have the right to request a copy of your personal data.
-
Right to Rectification: You have the right to request correction of your personal data.
-
Right to Erasure: You have the right to request the deletion of your personal data.
-
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data.
-
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at support@reachsmart.ai.
​
6. Data Security
We take appropriate technical and organizational measures to ensure the security of personal data. We regularly review and update our security policies and procedures.
​
7. Data Breach Notification
In the event of a data breach, we will notify affected individuals and the relevant supervisory authority within 72 hours, as required by GDPR.
​
8. Data Transfer
We may transfer and process your data outside the European Economic Area (EEA). In such cases, we will ensure that appropriate safeguards are in place.
​
9. Data Retention
We will retain personal data for as long as necessary to fulfill the purposes outlined in this GDPR Policy, unless a longer retention period is required or permitted by law.
​
10. Changes to GDPR Policy
We may update this GDPR Policy from time to time. We will notify you of any changes by posting the updated policy on our website.
​
By using the Site, you acknowledge and agree to the terms outlined in this GDPR Policy.
​