Privacy Policy

Infinite Sparks Enterprises Limited ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit our website at https://infinitesparks.net, use our services, or otherwise interact with us.

We operate globally and are committed to complying with the data protection laws of the jurisdictions in which we operate. This policy addresses our obligations under the California Consumer Privacy Act (CCPA/CPRA), the General Data Protection Regulation (GDPR), the UK GDPR, Canada's PIPEDA, and other applicable data protection frameworks.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Fill out contact forms, appointment requests, or quote requests
• Register for an account on our client portal
• Enter into a service agreement or Statement of Work
• Make a payment or provide billing information
• Subscribe to our newsletter or marketing communications
• Communicate with us via email, phone, or online chat
• Apply for employment through our careers page

This information may include:

• Identity Data: Full name, job title, company name
• Contact Data: Email address, phone number, physical address
• Financial Data: Payment card details, bank account information, billing address (processed securely via third-party payment processors)
• Professional Data: Resume/CV, employment history, qualifications (for job applicants)
• Communication Data: Content of messages, inquiries, and feedback

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• Device Data: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, navigation paths, referring URLs
• Location Data: Approximate geographic location derived from IP address
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 7)

1.3 Information from Third Parties

We may receive personal information from:

• Payment processors (PayPal, Stripe) regarding transaction status
• Business partners and referral sources
• Publicly available sources such as company registries and professional networking platforms
• Analytics providers

2. How We Use Your Information

We process your personal data for the following purposes and legal bases:

3. How We Share Your Information

We do not sell your personal data. We may share your information with the following categories of recipients:

• Service Providers: Trusted third parties who perform services on our behalf, such as cloud hosting providers, payment processors, email delivery services, and analytics providers. These providers are contractually obligated to protect your data.
• Payment Processors: PayPal, Stripe, or other payment processors handle financial transactions. We do not store full credit card numbers on our servers.
• Legal Authorities: When required by law, regulation, court order, or government request, we may disclose your information to law enforcement or regulatory authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections described herein.
• With Your Consent: We may share your information with other parties when we have your explicit consent.

4. International Data Transfers

As a company serving clients globally, your personal data may be transferred to, stored in, or processed in jurisdictions other than your country of residence, including the United States. When transferring data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with adequate security provisions
• Transfer to countries recognized as providing adequate protection
• Obtaining your explicit consent where required by law

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Client Account Data: Retained for the duration of the business relationship and seven (7) years thereafter for tax and legal compliance.
• Invoice and Payment Records: Retained for seven (7) years in accordance with tax and accounting regulations.
• Contact Form Submissions: Retained for two (2) years unless a business relationship is established.
• Marketing Preferences: Retained until you withdraw consent or unsubscribe.
• Website Analytics Data: Retained for twenty-six (26) months in aggregated/anonymized form.
• Job Applications: Retained for twelve (12) months after the conclusion of the hiring process, unless consent is given for longer retention.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 Rights Under GDPR (EU/EEA/UK Residents)

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interest or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time.
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority.

6.2 Rights Under CCPA/CPRA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt out of the sale or sharing of personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: Where applicable, request limitations on processing of sensitive personal data.

6.3 Rights Under PIPEDA (Canadian Residents)

• Right to access your personal information held by us.
• Right to challenge the accuracy and completeness of your data.
• Right to withdraw consent for the collection, use, or disclosure of your information.

6.4 Exercising Your Rights

To exercise any of your rights, please contact us at info@infinitesparks.net. We will respond to verified requests within the timeframes required by applicable law (generally within 30 days for GDPR and 45 days for CCPA). We may request additional information to verify your identity before processing your request.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for website functionality, such as session management and security features. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website, which pages are most popular, and how we can improve the user experience.
• Functional Cookies: Remember your preferences and settings to provide a more personalized experience.
• Marketing Cookies: Used to track visitors across websites to deliver relevant advertisements. We only set these with your explicit consent.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, blocking certain cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Employee training on data protection and security awareness
• Incident response and breach notification procedures
• Regular backups with encrypted storage

While we take reasonable steps to secure your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected individuals and relevant authorities in the event of a data breach as required by applicable law.

9. Children's Privacy

Our services are not directed to individuals under the age of sixteen (16). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

10. Third-Party Links and Services

Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services before providing personal data to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a revised "Effective Date." For significant changes, we may also provide additional notice, such as an email notification. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

For EU/EEA residents, you also have the right to lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs can be found at edpb.europa.eu.