Legal

Privacy Policy

This Privacy Policy explains how Cerfina collects, uses, and safeguards information when you visit our website or use our services. This is a general draft provided for informational purposes and should be reviewed against applicable law before publication.

Last updated: This document is a template and does not reference a specific effective date. Please insert the correct date upon publication.

Cerfina ("we", "us", or "our") is committed to protecting the privacy of visitors to our website and users of our platform. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.

At a glance

We collect information you provide directly, data generated through your use of the platform, and limited technical data such as device and browser details.

We do not sell personal information to third parties. Data is used to operate, secure, and improve our services.

1. Information We Collect

  • Account DataInformation provided when registering, such as name, email address, and contact details.
  • Usage DataDetails about how you interact with our platform, including pages visited, features used, and session duration.
  • Technical DataIP address, browser type, device identifiers, and operating system, collected automatically for security and diagnostic purposes.
  • CommunicationsRecords of correspondence when you contact us through forms, email, or support channels.
  • Cookies & Similar TechnologiesSmall data files used to remember preferences, maintain sessions, and analyse aggregate usage patterns.

2. How We Use Information

We use collected information for purposes that include, but are not limited to:

  • Service DeliveryOperating, maintaining, and providing the features described on our website.
  • CommunicationResponding to inquiries, sending administrative notices, and providing support.
  • SecurityDetecting, investigating, and preventing fraudulent or unauthorised activity.
  • ImprovementAnalysing usage trends to refine functionality, performance, and user experience.
  • Legal ComplianceMeeting obligations under applicable laws, regulations, or lawful requests from authorities.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal information, we rely on one or more of the following: your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interests in operating and securing our services, balanced against your rights.

4. Sharing of Information

We do not sell personal information. We may share information in limited circumstances, including:

  • Service ProvidersThird parties who perform functions on our behalf, such as hosting, analytics, or customer support, under confidentiality obligations.
  • Legal RequirementsWhen disclosure is required by law, regulation, legal process, or governmental request.
  • Business TransfersIn connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.
  • With ConsentWhere you have explicitly agreed to a specific instance of sharing.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, including satisfying legal, accounting, or reporting requirements. When information is no longer needed, we take reasonable steps to delete or anonymise it.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data minimisationApplied
Access controlsRole-based
Third-party saleNone
RetentionPurpose-limited

7. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance functionality and analyse usage. You can control cookie preferences through your browser settings; disabling cookies may affect certain features of the site. We do not currently respond to browser "Do Not Track" signals.

8. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, which can include the ability to:

  • AccessRequest confirmation of whether we process your data and obtain a copy of it.
  • CorrectionRequest that inaccurate or incomplete information be corrected.
  • DeletionRequest erasure of personal information, subject to legal exceptions.
  • ObjectionObject to certain processing activities, including for direct marketing.
  • PortabilityRequest a transferable copy of information you have provided to us.

To exercise any of these rights, please contact us using the details provided on our Contact page. We may need to verify your identity before responding to a request.

9. International Data Transfers

If information is transferred across borders, we aim to ensure appropriate safeguards are in place consistent with applicable data protection requirements. The specific mechanisms used depend on the jurisdictions involved and should be confirmed against current legal requirements.

10. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

11. Third-Party Links

Our website may contain links to third-party sites not operated by Cerfina. We are not responsible for the privacy practices or content of these external sites, and we encourage you to review their respective privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any updates will be posted on this page, and continued use of our services after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out via our Contact page. This policy is a general template and does not constitute legal advice; it should be reviewed and adapted to reflect actual practices and applicable legal obligations.