Last updated on May 8, 2023
- You may likewise decide not to give us “discretionary” Personal Data; however, please remember that without it, we will most likely be unable to provide you with the full scope of our administrations or the best client experience when utilizing our Services.
What personal information do we collect from the people who visit our website?
The personal information that we collect depends on the context of your interactions with us and the services, the choices you make, and the features you use.
When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:
- Account Data: To use certain features (like Invest to plan), you need to create a user account. When you create or update your account, we collect and store the data you provide, like your username and password, and assign you a unique identifying number (“Account Data”).
- Contact information. An Authorized User is required to provide some contact information (e.g., an email address) when making an account on the Services.
Automatically collected information about your use of our Services or tools,
This information is registered automatically with the visit by the own configuration or manual of each tool on the platform.
- When you visit, connect with, or utilize our service, we may gather, record, or create specific specialized data about you. We do so either autonomously or with the assistance of third-gathering Service Providers, including using “cookies” and other following innovations.
- We automatically collect certain information when you visit, use, or navigate the Platform. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Platform and other technical information. This information is primarily needed to maintain the security and operation of our Platform and for our internal analytics and reporting purposes.
How do we use your details?
We process personal data to operate, improve, understand, and personalize our services. We use personal data for the following purposes:
- To fulfill or meet the reason you provided the information (e.g., to help provide our Site services to you).
- To send you catalogs, information, newsletters, promotional materials, and other offerings from the Company or on behalf of our partners and affiliates.
- To communicate with you about the Services, including Service announcements, updates, or offers.
- To engage and retain users.
- To improve your user experience.
- Analyze trends to improve our platform and offerings.
- To personalize and develop our site and the services we provide you and improve our offerings.
- To provide certain features or functionality of the services on the site.
- For marketing and promotions.
- To create, maintain, customize, and secure your account with us.
- Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- To prevent illegal activity, fraud, and abuse.
- To help our site, we will be ready to serve you better.
We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.
As noted in the list above, we may communicate with you if you’ve provided us with the means to do so. For example, if you’ve given us your email address, we may send you promotional email offers or email you about your use of the Services. Also, we may receive a confirmation when you open an email from us, which helps us improve our services. If you do not want to receive communications from us, please indicate your preference by emailing us at email@example.com.
How to opt-out
When you engage us for the Services or make inquiries about our Services, you will be requested to provide your consent to us to send promotional material to you. You may stop the delivery or “opt-out” of future promotional emails by following the specific instructions in the email you receive.
Do Not Track
Currently, various browsers — such as Microsoft Edge, Firefox, and Safari — offer a “do not track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to Web sites visited by the user about the user’s browser DNT preference setting. Destinewood does not currently commit to responding to browsers’ DNT signals concerning the Company’s Web sites, in part because industry groups have adopted no common industry standard for DNT, technology companies, or regulators, including no consistent standard of interpreting user intent. Destinewood takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.
- Recognize you if you sign in to use our offerings. This allows us to provide you with recommendations, display personalized content, and provide other customized features and services.
- We are keeping track of your specified preferences. This allows us to honor your likes and dislikes, such as your language and configuration preferences.
- Detecting and preventing fraudulent activity and improving security.
- We are conducting research and diagnostics to improve our offerings.
- Reporting allows us to measure and analyze the performance of our offerings.
- Strictly Necessary Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are often set in response to actions made by you, which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.
- Functional cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by third-party providers whose services we have added to our pages or by us.
- Performance cookies: These cookies allow us to count visits and traffic sources to measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.
- Targeting cookies: These cookies may be set through our site and used to build a profile of your interests and show you relevant adverts on other sites.
GDPR-Customer data processing appendix:
- “Customer Data” means any personal data that Destinewood processes on Customer’s behalf via the Services, as more particularly described in this DPA.
- “Data Protection Laws” means all data protection laws and regulations applicable to a party’s processing of Customer Data under the Agreement, including, where applicable, EU Data Protection Laws and Non-EU Data Protection Laws.
GDPR-EU data protection law
“EU Data Protection Law” means all data protection laws and regulations applicable to Europe, including (i) Regulation 2016/679 of the European Parliament and the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data (General Data Protection Regulation) (“GDPR“); (ii) Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector; (iii) applicable national implementations of (i) and (ii); and (iv) in respect of the United Kingdom (“UK“) any applicable national legislation that replaces or converts in domestic law the GDPR or any other law relating to data and privacy as a consequence of the UK leaving the European Union.
“Europe” means, for this DPA, the European Union, the European Economic Area and/or their member states, Switzerland, and the United Kingdom.
“Non-EU Data Protection Laws” means the California Consumer Privacy Act (“CCPA”); the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”); and the Brazilian General Data Protection Law (“LGPD“), Federal Law no. 13,709/2018.
“SCCs” means the standard contractual clauses for processors as approved by the European Commission or Swiss Federal Data Protection Authority (as applicable), which shall be applied only to transfers of Customer Data from the European Union.
- Parties’ roles: If EU Data Protection Law or the LGPD applies to either party’s processing of Customer Data, the parties acknowledge and agree that concerning the processing of Customer Data, the Customer is the controller and is a processor acting on behalf of Customer, as further described in Annex A (Details of Data Processing) of this DPA.
- Purpose limitation: Destinewood shall process Customer Data only following Customer’s documented lawful instructions as outlined in this DPA, as necessary to comply with applicable law, or as otherwise agreed in writing (“Permitted Purposes”). The parties agree that the agreement sets out the Customer’s complete and final instructions to Destinewood concerning the processing of Customer Data. Processing outside the scope of these instructions (if any) shall require a prior written agreement between the parties.
- Prohibited data: The customer will not provide (or cause to be provided) any Sensitive Data to Destinewood for processing under the Agreement, and Destinewood will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise. To avoid doubt, this DPA will not apply to Sensitive Data.
- Customer compliance: Customer represents and warrants that (i) it has complied, and will continue to comply, with all applicable laws, including Data Protection Laws, in respect of its processing of Customer Data and any processing instructions it issues to Destinewood; and (ii) it has provided, and will continue to provide, all notice and has obtained, and will continue to obtain, all consents and rights necessary under Data Protection Laws for Destinewood to process Customer Data for the purposes described in the agreement. Customer shall have sole responsibility for the accuracy, quality, and legality of Customer Data and how Customer acquired Customer data. Without prejudice to the generality of the preceding, Customer agrees that it shall be responsible for complying with all laws (including Data Protection Laws) applicable to any emails or other content created, sent, or managed through the service, including those relating to obtaining consents (where required) to send emails, the content of the emails and its email deployment practices.
- The lawfulness of Customer’s instructions: The customer will ensure that United Kingdom processing of the Customer Data by Customer’s instructions will not cause Destinewood to violate any applicable law, regulation, or rule, including, without limitation, Data Protection Laws. Destinewood shall promptly notify Customer in writing unless prohibited from doing so under EU Data Protection Laws if it becomes aware or believes that any data processing instruction from Customer violates the GDPR or any UK implementation of the GDPR
You can exercise any of the rights described above in the “What are your choices and how can you exercise them?” section above directly by sending an email to firstname.lastname@example.org.
DESTINEWOOD PVT. LTD
If you are submitting a request on behalf of another person, you must provide proof that you have been authorized by the individual to act on his or her behalf. In certain circumstances, we may ask the individual to verify his or her own identity directly with us. Please note that we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
How long do we keep your information?
When we have an ongoing legitimate business need to process your personal information, we will either delete or anonymize such information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Your Legal Rights
Under certain circumstances, you have rights under data protection laws to your data.
You may have the following rights: –
- Request access to your data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide.
- Request deletion of your data. This enables you to ask us to delete or remove personal data where there is no good reason to continue processing it. You also have the right to ask us to delete or remove your data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully, or where we are required to erase your data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
- Object to processing your data where we are relying on a legitimate interest (or those of a third party). Something about your situation makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You also have the right to object to processing your data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information, overriding your rights and freedoms.
- Request restriction of processing of your data. This enables you to ask us to suspend the processing of your data in the following scenarios:
- If you want us to establish the data’s accuracy.
- Our use of the data is unlawful, but you do not want us to erase it.
- You need us to hold the data even if we no longer require it, as you need it to establish, exercise, or defend legal claims.
- You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your data to you or a third party. We will provide your data in a structured, commonly used, machine-readable format to you or a chosen third party. Note that this right only applies to automated information; you initially provided consent for us to use or use the information to perform a contract with you.
- Withdraw consent at any time when we are relying on consent to process your data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not provide certain services to you.
How do we protect your details?
- We have implemented industry-accepted administrative, physical, and technology-based security measures to protect against the loss, misuse, unauthorized access, and alteration of personal information in our systems. We ensure that any employee, contractor, corporation, organization, or vendor who has access to personal information in our systems is subject to legal and professional obligations to safeguard that personal information.
- We do not use vulnerability scanning and/or scanning to PCI specifications.
- We use regular Malware Scanning.
- Your personal information is only accessible by a limited number of individuals who have special access privileges to such systems and are required to treat the information with strict confidentiality.
- We implement several security measures whenever a user gets into, submits, or accesses their information to protect your individual information.
- While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or form of electronic storage is 100 percent secure. Therefore, we cannot guarantee its absolute security.
- Destinewood prohibits unauthorized access or use of personal information stored on our servers. Such access is a violation of law, and we will fully investigate and press charges against any party that has illegally accessed the information within our systems.
Limitation of liability
Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so some of the above limitations may not apply to you.
We make no legal representation that the Platform or products are appropriate or available in locations outside the United Kingdom. You may access the platform from outside the United Kingdom.at your own risk and initiative and must bear all responsibility for compliance with applicable foreign laws.
Governing Law and Jurisdiction
This Platform originates from the United Kingdom. The laws of the United Kingdom. Without regard to its conflict of law, principles will govern these terms to the contrary. You hereby agree that all disputes arising out of or in connection with these terms shall be submitted to the exclusive jurisdiction of the United Kingdom. Using this platform, you consent to the jurisdiction and venue of such courts in connection with any action, suit, proceeding, or claim to arise under or because of these terms. You hereby waive any right to trial by jury arising out of these terms.
Changes to this privacy notice
If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may do so via contact us or email us at email@example.com.