Privacy Policy

Introduction

Portant PTY Ltd ("we", "us" or "our") respects your right to privacy and takes our responsibilities in relation to the processing of personal data seriously. We do not collect or process personal data unnecessarily. This privacy policy (the "Policy") together with our terms of service sets out important information about your rights in relation to the processing of your personal data, and the basis on which any personal data we collect from you, or that you provide to us, will be processed in connection with your use of the portant.co website ("our Site") and the provision of our Services.

GDPR Controller

Under this Policy, we will be what's known under the General Data Protection Regulation (EU) 2016/679 (the "GDPR") as the "controller" of the personal data you provide to us. This means that we determine the purposes and means of the processing of personal data we collect.

Scope

This privacy policy applies to information we collect:

• the information collected directly from you;
• when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this privacy policy;
• on the Websites and your email communications with the Websites.

Information you give us

Your Data is information about you which is consensually given by making a registration on our Site. The information you give us may include:

• Financial Data: your financial and credit card information, including bank account and payment card details, billing contact email address, and VAT number.
• Geolocation Data: your city, state, country and business address.
• Identity Data: first and last name, email, job position, location and company name.

The Data We Collect About You

With regard to each of your visits to our Site we automatically collect:

• Usage Data: information about your visit, including the full URLs, clickstream to, through, and from our site (including date and time), page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
• Technical Data: technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, how often you visit the Site and other performance data.

We do not require or collect any personal data that is your sensitive personal data or any special category of personal data under the GDPR or CCPA.

What we do with your information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal data: where we need to comply with a legal or regulatory obligation; where it is necessary for our legitimate interest (or those of a third party) and your interests and fundamental rights do not override those interests; and where we need to perform the contract we are about to enter into or have entered into with you.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you. We (or service providers on our behalf) may then send communications and marketing to these emails. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR at https://www.rb2b.com/rb2b-gdpr-opt-out.

How long we keep your information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Disclosure of your information

We do not share your personal information with third parties for marketing purposes without your explicit consent. To provide you with our services and to meet our regulatory requirements, we may need to share your information with our business partners, suppliers, sub-contractors, affiliated companies and other third party product and service providers. We may also disclose your information if we are under a duty to disclose or share your personal data in order to comply with any law, legal obligation, or court order and/or to protect our rights, property or safety, our customers, or others.

You agree that we have the right to share your personal information with: any department or authorised person within our company or any member company within our group; credit reference agencies (for assessing your credit score where relevant); analytics and search engine providers; email marketing service providers (where we have your consent); business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you in relation to the Services.

Security Measures

We take our security responsibilities seriously, using appropriate physical and technical measures, and require our partners to use the same standard of care. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Your personal data is stored on secure servers hosted on Google Cloud Platform (GCP) in the USA (Central, Ohio). Google applies Standard Contractual Clauses as a valid mechanism for transferring data outside the European Union. Data is encrypted using TLS when transmitted between our servers and your browser.

Your Personal Data and Your Rights

Accessing your Personal Data. You may request access at any time to a copy of the personal data we hold about you. Any such request should be submitted in writing to support@portant.co. We will need to verify your identity and may request more information if needed. There is usually no charge; however, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply.

Right of Restriction. You may restrict us from processing your personal data in certain circumstances (e.g. where you have contested the processing pending verification of our legitimate grounds; where we no longer require the data but you need it for legal claims; where processing is unlawful and you request restriction instead of erasure; or where you have contested the accuracy of the data).

Corrections or Erasure (Right to Rectification and Right to Be Forgotten). You can request the deletion of personal data that is no longer necessary or where you withdraw consent. This right will not apply where we are required to retain data by law. If the information we hold about you is inaccurate, you may request to have it updated and corrected.

Your Right to Object. You have the right to object to the processing of your personal data at any time in relation to legitimate interests, profiling for direct marketing, and direct marketing purposes.

Data Portability. Where we process your personal data by automated means and this is based on your consent or contract performance, you have the right to request a copy of your personal data in a structured, machine-readable format and, where technically feasible, to have it transmitted to another controller.

Profiling. We do not engage in profiling or automated processing for profiling purposes that would significantly affect you.

Privacy notice for California Residents (CCPA)

Portant PTY LTD has adopted this notice to comply with the California Consumer Privacy Act of 2018 ("CCPA"). We may disclose your personal information to a third party for a business purpose, subject to your right to opt-out of those sales. We share your personal information with services such as web hosting, data analysis, payment processing, customer service, email delivery, security, advertising or marketing, and similar services. We do not sell Google user data. Within the last 12 months, we have disclosed certain categories of non-Google user personal information in a manner that may be considered a "sale" under the CCPA: identifiers, geolocation data, and professional and employment-related information. These disclosures are in compliance with all relevant privacy regulations.

You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months, and the right to request deletion of your personal information subject to certain exceptions. To exercise the access, data portability, and deletion rights, please submit a verifiable consumer request to support@portant.co.

Changes to this policy

Any changes made to this Policy from time to time will be published at the Site. Any material change to the data processing operations which is relevant to or impacts on you or your personal data will be notified to you in advance by email, so you have an opportunity to consider the change and exercise your rights under the GDPR as you see fit.