Roles & Responsibilities
The Company may act as a data controller. As a data controller, we determine the purposes and means of processing your personal data. This includes:
- Data collected directly from you (e.g., when creating an Account, registering for events, or otherwise interacting with the Service).
- Data collected automatically (e.g., through cookies and tracking technologies).
- Data received from third parties.
Our responsibilities include ensuring that processing is lawful, fair, and transparent, and safeguarding your rights as a data subject.
If you are a Client and want to understand how we process data as a data processor, please refer to our Data Processing Addendum (“DPA”).
If you are a data subject wishing to exercise your rights (e.g., access, rectification, deletion) in relation to data processed by one of our Clients, please contact that Client directly. The Client, as the data controller, is responsible for handling such requests under applicable data protection laws. The Company processes Client Data strictly on the Client’s instructions and does not access such data unless authorized or necessary to provide the Service.
Information We Collect
- Account Information – email address, password, and authentication credentials used to create and manage your account.
- Contact Information – name, phone number, email, company name, and similar details.
- Communications – any correspondence with us (feedback, queries, customer support interactions, call/chat/email history).
- Billing Information – details necessary to process your payments. We do not store your full card information; payment details are handled by third-party providers. For tax and reporting purposes, we may retain partial card data (first 6 digits, last 4 digits) together with transaction identifiers.
- Sensitive Data – we do not process sensitive data.
- Tax Documentation – in compliance with tax laws, we may collect personal data required for filing, such as full name, citizenship, residence address, date of birth, and tax identification numbers.
- Usage Data – automatically collected information such as IP address, browser type/version, visited pages, date/time of visits, time spent on pages, device identifiers, and diagnostic data.
Cookies and Similar Technologies – small files stored by your browser, as well as tracking technologies like web beacons or pixel tags, which help us measure usage and improve our Service.
If you'd like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser as specified below via hyperlinks:
Please note that if you delete cookies or refuse to accept them, you may not be able to store your preferences, and some of our pages might not display properly, since the Services will no longer be personalized to you.
Use of Your Personal Data
We may use your personal data for the following purposes:
- Operating and maintaining the Website – ensuring performance, functionality, and security.
- Responding to inquiries – using your contact details to reply to your messages (based on our legitimate interest to communicate with users).
- Provision of Services – processing data to provide access to the Services under the Terms and Conditions.
- Marketing communications – sending updates or promotional content (with the option to unsubscribe).
- Analytics and improvement – analyzing usage patterns to enhance user experience and optimize the Website.
Legal Bases for Data Processing
We process your personal data only when we have a lawful basis for doing so. Depending on the circumstances, this may include:
- Processing is based on the consent you have given;
- Processing is necessary to provide our Services to you according to our Terms and Conditions;
- Processing is necessary for the purposes of our legitimate interests.
Retention of Your Personal Data
We keep personal data only for as long as necessary to fulfill the purposes described above or as required by law. In some cases, retention may be extended based on legal obligations or your consent.
Your Rights As Data Subject
- Right to Confirmation. You have the right to request confirmation as to whether we are processing your personal data.
- Right of Access. You have the right to access the personal data we hold about you, including information about how and why it is being processed.
- Right to Rectification. You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure (Right to Be Forgotten). You may request the deletion of your personal data under certain conditions. We will comply with such requests unless we are legally required or permitted to retain the data. To request deletion, please contact us using the details provided in the “Contact Us” section.
- Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted directly to another data controller.
- Right to Object. You have the right to object to the processing of your personal data where such processing is based on our legitimate interests or performed in the public interest. We will cease such processing unless we have compelling legitimate grounds to continue.
To exercise your rights, please use the contact form available at https://processmyorder.com/
Methods of processing
We process personal data in a manner that ensures its security, confidentiality, and integrity. This includes:
- Using electronic systems and secure IT tools designed to limit unauthorized access and misuse;
- Applying internal policies and procedures aligned with the purpose for which the data was collected;
- Restricting access to personal data only to authorized personnel who need it to perform their tasks.
In certain cases, your data may be accessed by external service providers (e.g., hosting providers, IT support, analytics services) who are contractually bound to process data only on our instructions and in compliance with applicable data protection laws.
Place
The Personal Data is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. Depending on your location, your data may be transferred to and processed in a country different from your own. When we transfer personal data internationally, we take appropriate steps to ensure that your data is afforded a level of protection that complies with applicable legal standards.
Additional Information for California Residents
This section supplements the information provided in the rest of this Privacy Policy and applies specifically to users who reside in the State of California, United States, in accordance with the "California Consumer Privacy Act of 2018" (the "CCPA"), as updated by the "California Privacy Rights Act" (the "CPRA") and subsequent regulations. For such consumers, this section supersedes any other possibly divergent or conflicting information contained in the privacy policy.
This part of the document uses the term “personal information“ as defined in the California Consumer Privacy Act (CCPA/CPRA).
Notice at collection
Categories of personal information collected, used, sold, or shared. In this section we summarize the categories of personal information that we've collected, used, sold, or shared and the purposes thereof. You can read about these activities in detail in the section titled “Use of Your Personal Data” within this document.
Categories of Personal Information Collected. We may collect the following categories of personal information, as further described in the “Information We Collect” section of this Privacy Policy.
We do not collect sensitive personal information. We will not collect additional categories of personal information without notifying you.
Purpose of Collection and Use. We collect and use personal information for the following business purposes, in accordance with the “Use of Your Personal Data”, as well as for complying with the law and defending our rights before the competent authorities where our rights and interests are threatened or we suffer an actual damage.
We do not use your information for unexpected purposes or any purpose incompatible with those disclosed here, unless we obtain your consent.
Data Retention. Unless stated otherwise inside the “Use of Your Personal Data” section, we will not retain your personal information for longer than is reasonably necessary for the purpose(s) they have been collected.
How we collect information: what are the sources of the personal information we collect? We collect the above-mentioned categories of personal information, either directly or indirectly, from you when you use this Website.
For example, you directly provide your personal information when you submit requests via any forms on this Website. You also provide personal information indirectly when you navigate this Website, as personal information about you is automatically observed and collected.
Sale or Sharing of Personal Information. We do not sell or share your personal information. In case we should decide to, we will inform you beforehand and will grant your right to opt out of such sale.
Your privacy rights under the California Consumer Privacy Act and how to exercise them
The right to access personal information: the right to know and to portability
You have the right to request that we disclose to you:
- the categories of personal information that we collect about you;
- the sources from which the personal information is collected;
- the purposes for which we use your information;
- to whom we disclose such information;
- the specific pieces of personal information we have collected about you.
You also have the right to know what personal information is sold or shared and to whom. In particular, you have the right to request two separate lists from us where we disclose:
- the categories of personal information that we sold or shared about you and the categories of third parties to whom the personal information was sold or shared;
- the categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
The disclosure described above will be limited to the personal information collected or used over the past 12 months.
If we deliver our response electronically, the information enclosed will be "portable", i.e. delivered in an easily usable format to enable you to transmit the information to another entity without hindrance — provided that this is technically feasible.
The right to request the deletion of your personal information. You have the right to request that we delete any of your personal information, subject to exceptions set forth by the law (such as, including but not limited to, where the information is used to identify and repair errors on this Website, to detect security incidents and protect against fraudulent or illegal activities, to exercise certain rights etc.).
If no legal exception applies, as a result of exercising your right, we will delete your personal information and notify any of our service providers and all third parties to whom we have sold or shared the personal information to do so — provided that this is technically feasible and doesn’t involve disproportionate effort.
The right to correct inaccurate personal information. You have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
The right to opt out of sale or sharing of personal information and to limit the use of your sensitive personal information. You have the right to opt out of the sale or sharing of your personal information. You also have the right to request that we limit our use or disclosure of your sensitive personal information.
The right of no retaliation following opt-out or exercise of other rights (the right to non-discrimination). We will not discriminate against you for exercising your rights under the CCPA. This means that we will not discriminate against you, including, but not limited to, by denying goods or services, charging you a different price, or providing a different level or quality of goods or services just because you exercised your consumer privacy rights.
However, if you refuse to provide your personal information to us or ask us to delete or stop selling your personal information, and that personal information or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction.
To the extent permitted by the law, we may offer you promotions, discounts, and other deals in exchange for collecting, keeping, or selling your personal information, provided that the financial incentive offered is reasonably related to the value of your personal information.
How to exercise your rights
To exercise any of the rights described above under the CCPA/CPRA, you must submit a verifiable consumer request to us using the contact method provided in the “Contact Us” section of this Privacy Policy.
To be considered verifiable, your request must:
- Provide sufficient information that allows us to reasonably confirm you are the individual about whom we collected personal information, or that you are an authorized representative;
- Clearly describe your request in enough detail to enable us to understand, evaluate, and respond appropriately.
We are unable to fulfill your request if we cannot verify your identity or authority to make the request. You are not required to create an account to submit a request. You can submit a maximum number of 2 requests over a period of 12 months.
How and when we are expected to handle your request
Once we receive your verifiable consumer request, we will:
- Acknowledge receipt within 10 business days, and explain how we will process your request.
- Respond within 45 calendar days of receiving the request.
If we require more time (up to a maximum of 90 days), we will notify you of the extension and explain the reason for the delay.
Our response will cover the preceding 12 months.
If we are unable to fulfill your request, we will provide a clear explanation of the reasons for the denial.
We do not charge any fees for processing valid requests. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee to cover administrative costs or choose not to act on the request. In either case, we will communicate our decision and justification.
Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal obligations. Updates will be posted on this page with the revised “Updated” date.
Contact Us
If you have any questions about this Policy, please contact us by visiting https://processmyorder.com/ and submitting your message through the contact form.
Updated: Sep 1, 2025