1. Introduction Tuatara ("we," "us," or "our") respects and is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, products, and services. Please read this Privacy Policy to understand our policies and practices regarding your Personal Information and how we will handle it. If you do not agree with our policies and practices, do not use our services. By accessing or using our services, you agree and consent to this Privacy Policy. Tuatara may change this Privacy Policy at any time, at its discretion. Your continued use of our services after we make changes is deemed to be acceptance of and consent to those changes, so please check the Privacy Policy periodically for updates. This Privacy Policy is subject to and governed by the Tuatara Terms of Service. 2. Data Controller and Contact Information Tuatara Email: privacy@gotuatara.com 3. Personal Data We Collect We collect the following types of personal data: - Contact information (name, email address, phone number) - Account details (username, password) - Payment information (credit card details, billing address) - Usage data (IP address, browser type, pages visited) - Communication data (emails, chat messages) - Marketing preferences 4. How We Collect Personal Data We collect personal data through: - Direct interactions (when you create an account or contact us) - Automated technologies (cookies, server logs) - Third parties (payment processors, analytics providers) 5. Legal Basis for Processing We process your personal data on the following legal bases: - Consent: For marketing communications and non-essential cookies - Contract: To provide our services and process payments - Legitimate interests: To improve our services, prevent fraud, and ensure network security - Legal obligation: To comply with applicable laws and regulations 6. How We Use Your Personal Data We use your personal data to: - Provide and maintain our services - Process transactions and send transaction-related communications - Respond to inquiries and provide customer support - Send marketing communications (with your consent) - Improve our website and services - Comply with legal obligations 7. Data Retention We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods are as follows: - Account information: Until account deletion or 2 years after last activity - Transaction data: 7 years for tax and accounting purposes - Marketing preferences: Until consent is withdrawn 8. Data Sharing and International Transfers We may share your personal data with: - Service providers (e.g., hosting, payment processing) - Affiliated companies within our corporate group - Law enforcement or regulatory bodies when legally required When transferring data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions. 9. Your Rights Under GDPR As a data subject in the EU, you have the following rights: - Right to access your personal data - Right to rectification of inaccurate data - Right to erasure ("right to be forgotten") - Right to restrict processing - Right to data portability - Right to object to processing - Right to withdraw consent - Right to lodge a complaint with a supervisory authority To exercise these rights, please contact us using the information provided in Section 2. 10. Data Security We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. 11. Cookies and Similar Technologies We use cookies and similar technologies to enhance your browsing experience and analyze website traffic. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy www.gotuatara.com/cookiepolicy. 12. Children's Privacy Our services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately. 13. Changes to This Privacy Policy We may update this Privacy Policy from time to time. The latest version will always be available on our website, and we will notify you of any significant changes. 14. Complaints If you have concerns about our data processing activities, please contact us first. You also have the right to lodge a complaint with your local data protection authority. By using our services, you acknowledge that you have read and understood this Privacy Policy.