Privacy Policy

Privacy Information Management Policy

1. Introduction:

Evamp & Saanga is committed to protecting the privacy and confidentiality of our
customers/clients’ personal information. This Privacy Management Policy outlines our
practices and principles for managing personal data in accordance with ISO 27701.

2. Scope:

This policy applies to all personal information collected, processed, stored, or disclosed
by Evamp & Saanga through our website.

3. Data Collection and Use:

• Purpose: We collect personal information from customers/clients solely for specified and legitimate purposes, such as providing services, responding to inquiries, and enhancing user experience.
• Lawfulness: We ensure that personal data is processed lawfully, fairly, and transparently.
• Consent: Personal information is used only for the purposes for which it was collected, and consent is obtained where necessary.

4. Types of Data Collected:

4.1 Personal Data:

While using our website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City

4.2 Cookies and Usage Data:

We may use cookies and similar tracking technologies to enhance your website experience. Cookies are small data files stored on your device that help us improve the functionality and user-friendliness of our website.

4.3 Automatically Collected Information:

We may also collect certain information automatically when you visit our website, such as:

• IP address
• Browser type
• Referring website
• Pages visited
• Time and date of visit
• Time spent on pages

4.4 Children’s Personal Data:

We do not collect or use children’s personal data without obtaining parental consent first.

5.  Data Minimization and Accuracy :

• We limit the collection and retention of personal data to what is necessary for the
intended purposes.
• Reasonable steps are taken to ensure that personal information is accurate,
complete, and up to date.

6. Security Measures :

We implement appropriate technical and organizational measures to protect
personal information from unauthorized access, disclosure, alteration, transfer or
destruction.
• Regular assessments and reviews are conducted to ensure the effectiveness of our
security controls.
• Evamp & Saanga take all steps reasonably necessary to ensure that your data is
treated securely and in accordance with this Privacy Policy and no transfer of your
Personal Data will take place to an organization or a country unless there are
adequate controls in place including the security of your data and other personal
information.

7. Data Subject Rights :

• We respect data subjects’ rights, including the right to access, rectify, erase, restrict
processing, and object to the processing of their personal data.
• Procedures are in place to address data subject requests and complaints promptly
and effectively.

8. Third-Party Disclosure :

• We do not disclose personal information to third parties except as required by law
or with the explicit consent of the data subject.
• When sharing personal data with third parties, we ensure appropriate contractual
agreements and safeguards are in place.

9. Data Breach Management :

• We have procedures in place to detect, assess, and respond to data breaches
promptly.
• Data breach incidents are reported to the relevant authorities and affected data
subjects in compliance with applicable laws and regulations

10. Compliance and Continual Improvement :

• We regularly review and update our privacy management practices to ensure
compliance with ISO 27701 and other relevant privacy regulations.
• Our privacy management system is subject to internal audits and continual
improvement initiatives