Effective Date: February 21, 2026
Infinite Sparks Enterprises Limited ("Company," "we," "us," or "our") is committed to protecting
the privacy and security of your personal data. This Privacy Policy explains how we collect, use,
disclose, retain, and protect information when you visit our website at
https://infinitesparks.net, use our services, or otherwise interact with us.
We operate globally and are committed to complying with the data protection laws of the jurisdictions
in which we operate. This policy addresses our obligations under the California Consumer Privacy Act
(CCPA/CPRA), the General Data Protection Regulation (GDPR), the UK GDPR, Canada's PIPEDA, and other
applicable data protection frameworks.
1. Information We Collect
1.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you:
- Fill out contact forms, appointment requests, or quote requests
- Register for an account on our client portal
- Enter into a service agreement or Statement of Work
- Make a payment or provide billing information
- Subscribe to our newsletter or marketing communications
- Communicate with us via email, phone, or online chat
- Apply for employment through our careers page
This information may include:
- Identity Data: Full name, job title, company name
- Contact Data: Email address, phone number, physical address
- Financial Data: Payment card details, bank account information, billing address
(processed securely via third-party payment processors)
- Professional Data: Resume/CV, employment history, qualifications (for job
applicants)
- Communication Data: Content of messages, inquiries, and feedback
1.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical information, including:
- Device Data: IP address, browser type and version, operating system, device
identifiers
- Usage Data: Pages visited, time spent on pages, navigation paths, referring URLs
- Location Data: Approximate geographic location derived from IP address
- Cookie Data: Information collected through cookies and similar tracking
technologies (see Section 7)
1.3 Information from Third Parties
We may receive personal information from:
- Payment processors (PayPal, Stripe) regarding transaction status
- Business partners and referral sources
- Publicly available sources such as company registries and professional networking platforms
- Analytics providers
2. How We Use Your Information
We process your personal data for the following purposes and legal bases:
| Purpose |
Legal Basis (GDPR) |
| Providing and managing our services |
Performance of contract |
| Processing payments and invoicing |
Performance of contract |
| Responding to inquiries and support requests |
Legitimate interest |
| Sending service-related communications |
Performance of contract |
| Marketing and promotional communications |
Consent |
| Improving our website and services |
Legitimate interest |
| Ensuring security and preventing fraud |
Legitimate interest |
| Complying with legal obligations |
Legal obligation |
| Processing job applications |
Consent / Pre-contractual steps |
3. How We Share Your Information
We do not sell your personal data. We may share your information with the following categories of
recipients:
- Service Providers: Trusted third parties who perform services on our behalf, such
as cloud hosting providers, payment processors, email delivery services, and analytics providers.
These providers are contractually obligated to protect your data.
- Payment Processors: PayPal, Stripe, or other payment processors handle financial
transactions. We do not store full credit card numbers on our servers.
- Legal Authorities: When required by law, regulation, court order, or government
request, we may disclose your information to law enforcement or regulatory authorities.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your
data may be transferred to the successor entity, subject to the same privacy protections described
herein.
- With Your Consent: We may share your information with other parties when we have
your explicit consent.
4. International Data Transfers
As a company serving clients globally, your personal data may be transferred to, stored in, or processed
in jurisdictions other than your country of residence, including the United States. When transferring
data
internationally, we implement appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with adequate security provisions
- Transfer to countries recognized as providing adequate protection
- Obtaining your explicit consent where required by law
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was
collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific
retention periods include:
- Client Account Data: Retained for the duration of the business relationship and
seven (7) years thereafter for tax and legal compliance.
- Invoice and Payment Records: Retained for seven (7) years in accordance with tax
and accounting regulations.
- Contact Form Submissions: Retained for two (2) years unless a business relationship
is established.
- Marketing Preferences: Retained until you withdraw consent or unsubscribe.
- Website Analytics Data: Retained for twenty-six (26) months in
aggregated/anonymized form.
- Job Applications: Retained for twelve (12) months after the conclusion of the
hiring process, unless consent is given for longer retention.
6. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
6.1 Rights Under GDPR (EU/EEA/UK Residents)
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten"),
subject to legal retention requirements.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, commonly used,
machine-readable format.
- Right to Object: Object to processing based on legitimate interest or for direct
marketing purposes.
- Right to Withdraw Consent: Withdraw previously given consent at any time.
- Right to Lodge a Complaint: File a complaint with your local Data Protection
Authority.
6.2 Rights Under CCPA/CPRA (California Residents)
- Right to Know: Request disclosure of the categories and specific pieces of personal
information we have collected.
- Right to Delete: Request deletion of your personal information, subject to legal
exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out: Opt out of the sale or sharing of personal information. We do
not sell personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising
your privacy rights.
- Right to Limit Use of Sensitive Personal Information: Where applicable, request
limitations on processing of sensitive personal data.
6.3 Rights Under PIPEDA (Canadian Residents)
- Right to access your personal information held by us.
- Right to challenge the accuracy and completeness of your data.
- Right to withdraw consent for the collection, use, or disclosure of your information.
6.4 Exercising Your Rights
To exercise any of your rights, please contact us at
info@infinitesparks.net.
We will respond to verified requests within the timeframes required by applicable law (generally within
30 days for GDPR and 45 days for CCPA). We may request additional information to verify your identity
before processing your request.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience. The types of cookies we use
include:
- Strictly Necessary Cookies: Essential for website functionality, such as session
management and security features. These cannot be disabled.
- Performance and Analytics Cookies: Help us understand how visitors interact with
our website, which pages are most popular, and how we can improve the user experience.
- Functional Cookies: Remember your preferences and settings to provide a more
personalized experience.
- Marketing Cookies: Used to track visitors across websites to deliver relevant
advertisements. We only set these with your explicit consent.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse
or delete cookies. However, blocking certain cookies may affect website functionality.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data from
unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure access controls and authentication mechanisms
- Regular security assessments and vulnerability testing
- Employee training on data protection and security awareness
- Incident response and breach notification procedures
- Regular backups with encrypted storage
While we take reasonable steps to secure your data, no method of transmission over the internet or
electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to
promptly notifying affected individuals and relevant authorities in the event of a data breach as
required by applicable law.
9. Children's Privacy
Our services are not directed to individuals under the age of sixteen (16). We do not knowingly
collect personal data from children. If we become aware that we have collected personal data from
a child without appropriate parental consent, we will take steps to delete that information promptly.
If you believe a child has provided us with personal data, please contact us immediately.
10. Third-Party Links and Services
Our website may contain links to third-party websites, services, or applications that are not operated
by us. We are not responsible for the privacy practices of these third parties. We encourage you to
review the privacy policies of any third-party services before providing personal data to them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology,
legal requirements, or other factors. We will notify you of material changes by posting the updated
policy
on our website with a revised "Effective Date." For significant changes, we may also provide additional
notice, such as an email notification. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices,
please contact our Data Protection team:
For EU/EEA residents, you also have the right to lodge a complaint with your local Data Protection
Authority (DPA). A list of EU DPAs can be found at
edpb.europa.eu.