Privacy Policy
1. Introduction
This Privacy Policy explains how Tabsinc (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you visit our website [website URL] or use our services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
2. Data controller
The data controller responsible for processing your personal data is:
Tabsinc
New York Office
228 East 45th Street, Suite 9E
New York, NY 10017
Email: [privacy@tabsinc.com]
Phone:
If we have appointed a Data Protection Officer (DPO), you can contact them at: [dpo@tabsinc.com].
3. Personal data we collect
We may collect the following categories of personal data when you use our website or services:
-
Identification and contact details (name, company name, job title, email address, phone number, address).
-
Account data (login details, user preferences, communication settings).
-
Transaction and billing data (billing address, payment-related information handled via our payment provider).
-
Usage data (pages visited, clicks, access times, referring URLs, IP address, browser type, device information).
-
Communication data (content of messages you send via contact forms, email, or chat).
We do not intentionally collect special categories of data (such as health data, political opinions) through our website.
4. How we collect personal data
We collect personal data in the following ways:
-
Directly from you when you fill in forms, create an account, subscribe to newsletters, or communicate with us.
-
Automatically when you use our website, via cookies and similar technologies that record usage data.
-
From third parties, such as analytics or marketing partners, if permitted by law and subject to your privacy settings.
5. Purposes and legal bases
We process your personal data for the purposes and on the legal bases listed below:
-
To provide and operate our services, manage your account, and respond to your requests (performance of a contract or pre-contractual steps).
-
To send administrative information, such as changes to our terms and policies (legitimate interest and/or legal obligation).
-
To send marketing communications about our services, if you have consented or where we have a legitimate interest permitted by law.
-
To analyze and improve our website, services, and user experience (legitimate interest in improving and securing our services).
-
To comply with legal obligations, such as tax and accounting rules or requests from authorities.
-
To protect our rights, property, and safety and to prevent fraud or misuse (legitimate interest).
Where we rely on consent, you can withdraw your consent at any time by contacting us or using the opt-out options in our messages.
6. Cookies and similar technologies
We use cookies and similar technologies to:
-
Enable core website functionality.
-
Remember your preferences.
-
Perform analytics on website usage.
-
Support marketing and advertising activities, where allowed.
When you visit our website for the first time, we display a cookie banner explaining the types of cookies we use and giving you the option to accept or manage your preferences. You can change your cookie settings at any time through your browser settings or our cookie preference tool.
7. Data sharing and recipients
We do not sell your personal data. We may share your personal data with:
-
Service providers who perform services on our behalf (e.g., hosting, IT support, analytics, email services, payment processing).
-
Professional advisers such as lawyers, accountants, or auditors when necessary.
-
Public authorities, regulators, or law enforcement when required by law or to protect our rights.
-
Other parties in connection with a merger, acquisition, or reorganisation of our business.
These parties may only process personal data according to our instructions and must protect it appropriately.
8. International transfers
If we transfer personal data outside the European Economic Area (EEA), we ensure an adequate level of protection by using legal safeguards such as:
-
An adequacy decision by the European Commission.
-
Standard Contractual Clauses approved by the European Commission.
You can contact us for more information about these safeguards.
9. Data retention
We keep personal data only as long as necessary for the purposes described in this Privacy Policy or to comply with legal obligations. Retention periods depend on the type of data and the purpose of processing, for example:
-
Account, contract, and billing data: retained for the duration of the relationship and for the statutory limitation periods and recordkeeping requirements.
-
Marketing data: retained until you unsubscribe or request deletion, plus a short period to document your request.
-
Technical logs and analytics data: retained for a period necessary to analyze and secure our systems.
After the applicable retention periods, we delete or anonymise personal data.
10. Your rights
Under the GDPR and other applicable laws, you have the following rights, subject to conditions and exceptions:
-
Right of access: to obtain confirmation and information on whether we process your personal data and to receive a copy.
-
Right to rectification: to have inaccurate or incomplete personal data corrected.
-
Right to erasure: to request deletion of your personal data in certain circumstances.
-
Right to restriction: to request restriction of processing in certain situations.
-
Right to data portability: to receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller, where technically feasible.
-
Right to object: to object to processing based on legitimate interests or for direct marketing.
-
Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.
You can exercise these rights by contacting us via the contact details provided above. We may need to verify your identity before responding to your request.
11. Automated decision-making
We do not use your personal data for decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you, unless this is necessary for entering into or performing a contract, authorised by law, or based on your explicit consent.
12. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include access controls, encryption, secure networks, and staff training.
13. Third-party websites
Our website may contain links to third-party websites, plug-ins, or services. We are not responsible for the privacy practices of these third parties and encourage you to read their privacy policies.
14. Children’s data
Our website and services are not intended for children under 16 years of age, and we do not knowingly collect personal data from children under that age. If you believe that a child has provided us with personal data, please contact us so we can delete it.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “last updated” date and, where appropriate, notify you by email or website notice.
Last updated: [date].
16. Contact
If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:
Tabsinc
New York Office
228 East 45th Street, Suite 9E
New York, NY 10017
Email: [privacy@tabsinc.com]
Phone:
You also have the right to lodge a complaint with your local supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you are based in the Netherlands.