Privacy Policy of Celestial Tech
Effective Date: 02-01-2025
Last Updated: 04-02-2025
Celestial Tech is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, process, use, and protect your personal data when you interact with our websites, services, and products. We comply with all applicable laws, including the General Data Protection Regulation (GDPR), and aim to maintain the highest standards of data privacy.
1. Data Controller Information
Celestial Tech is the data controller for all personal data collected through our platforms and services. If you have any questions about this Privacy Policy or your data, you can contact our Data Protection Officer (DPO):
Data Protection Officer Email:info@celestialtech.com
2. Data Collection:
We collect personal data to provide and improve our services, comply with legal obligations, and enhance user experiences.
2.1 Types of Data Collected:
Personal Information: Name, email address, phone number, job title, organization, and mailing address.
Account and Authentication Data: Login credentials, passwords (encrypted), and account preferences.
Technical Data: IP address, browser type, device information, operating system, and connection data.
Usage Data: Pages visited, time spent on our platform, interaction data, and analytics.
Marketing Data: Preferences, interests, and communication history.
Cookies and Similar Technologies: Tracking data, session cookies, and persistent cookies for analytics and personalization.
Special Categories of Data: Only processed when explicitly required and with user consent (e.g., for regulatory or employment purposes).
2.2 Data Sources:
Data provided directly by users.
Data collected through automated technologies (e.g., cookies, web beacons).
Third-party sources, including public databases, partners, and social media platforms.
3. Purpose of Data Processing:
We process personal data for the following purposes:
Service Delivery: To provide, maintain, and improve our products and services.
Account Management: User registration, authentication, and support.
Marketing and Communication: Sending newsletters, promotional offers, and updates (based on consent).
Analytics and Optimization: Conducting research and analysis to enhance user experiences.
Legal and Compliance: Meeting legal obligations, resolving disputes, and enforcing agreements.
Security: Monitoring, detecting, and preventing unauthorized access or malicious activities.
4. Legal Basis for Processing:
We process personal data under the following legal bases:
Consent: For marketing activities and non-essential cookies.
Contractual Obligations: To deliver services and fulfill user agreements.
Legal Compliance: To meet regulatory and legal obligations.
Legitimate Interests: For business improvement, security, and fraud prevention.
5. Data Retention Policy:
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.
Service-Related Data: Retained for the duration of the user’s active account and up to 24 months after account closure.
Marketing Data: Retained for up to 36 months unless consent is withdrawn.
Logfiles and Web Analysis Data: Retained for 12 months.
After the retention period, data is securely deleted or anonymized.
6. Data Sharing and Transfers:
We ensure that data sharing is transparent and secure. Personal data may be shared with:
Internal Teams: Employees authorized to process data under confidentiality agreements.
Service Providers: Cloud providers, analytics platforms, and payment processors, bound by data processing agreements.
Legal and Regulatory Authorities: When required by law or to protect our legal rights.
International Transfers: Cross-border data transfers are safeguarded by Standard Contractual Clauses or equivalent measures in compliance with GDPR.
7. Security Measures:
We implement advanced technical and organizational measures to protect personal data from unauthorized access, loss, or misuse, including:
Data encryption (in transit and at rest).
Multi-factor authentication for system access.
Regular security audits and penetration testing.
Staff training on data privacy and security.
8. User Rights:
As a user, you have the following rights under applicable privacy laws:
Access: Request a copy of your personal data.
Correction: Rectify inaccurate or incomplete data.
Erasure: Request deletion of personal data under specific conditions.
Portability: Receive your data in a structured, machine-readable format.
Restriction: Restrict processing of your data under certain circumstances.
Objection: Object to processing for direct marketing or legitimate interests.
Withdraw Consent: Withdraw consent for data processing at any time.
Complaint: Lodge a complaint with a supervisory authority if you believe your rights have been violated.
9. Cookies and Tracking Technologies:
We use cookies and similar technologies to enhance functionality, analyze usage, and personalize content. You can manage cookie preferences through your browser settings or our cookie management tool.
10. Policy Updates:
We may update this Privacy Policy periodically. The latest version will always be available on our website, with significant changes notified to users.
11. Contact Us:
For any privacy-related inquiries or concerns, please contact us:
Email: info@celestialtech.com
Phone:+92 310 7926128
