Data Retention Policy

PLEASE REVIEW OUR DATA RETENTION POLICY CARFULLY.

Overview of CCA’s - TheArtofBusinessCards.com (ABC) Data Retention Policy

This Data Retention Policy applies to TheArtofBusinessCards.com operated by Color Card Administrator, Corp. (CCA). The following detailed policy below is a legal document.

CCA is dedicated to managing and maintaining your “Data” as described in this document.

CCA Has several websites. Each website has its own rules pertaining to how your data is managed. The rules for ABC are outlined in this Data Retention Policy and other related documents.

This policy pertains to TheArtofBusinessCards.com only and outlines guidelines and procedures for retaining data, with a focus on ensuring compliance with legal, regulatory, and organizational requirements while safeguarding individuals' privacy rights.

PURPOSE

This policy (referred to as "the Policy") must be adhered to whenever Personal Data is processed on behalf of or for CCA.

The California Privacy Rights (CPRA) Act of 2020 outlines specific requirements regarding the retention of Personal Data. Specifically:

If the data records of CCA (referred to as "Data Records") contain Personal Data, CCA must adhere to relevant data protection laws, including, when applicable, the CCRA.

The CCRA mandates the deletion or anonymization of Personal Data when it is no longer necessary for the purposes for which it is held.

The objective of this Policy is to ensure the following:

Adequate protection and maintenance of Data Records.

Timely disposal of Data Records containing Personal Data that is no longer needed.

Utilization of CCA's data retention principles to uphold individuals' data protection rights.

DEFINITIONS AND KEY TERMS

Every time these terms are used in this Privacy Policy, they are defined as follows:

-COOKIE: Website-generated data saved by your browser. It identifies your browser, provides analytics, and remembers your language and login information.

-COMPANY: Color Card Administrator, Corp. i.e., in short “CCA”

-COUNTRY: United States, where Color Card Administrator, Corp. is based.

-USERS: The firm, organisation, or person that uses the Color Card Administrator, Corp. Service to manage consumer or service user interactions.

-DEVICE: Any internet-connected phone, tablet, computer, or other device that can access Color Card Administrator, Corp.

-IP ADDRESS: Every Internet-connected gadget has an IP address. Geographic blocks assign these numbers. An IP address can identify a device's Internet connection location.

-PERSONNEL: refers to Color Card Administrator, Corp. employees or contractors.

-PERSONAL DATA: any information that directly, indirectly, or in combination with other information identifies a natural person.

-SERVICE: Color Card Administrator, Corp. service as defined in its terms and on this platform.

-THIRD-PARTY SERVICE: Advertisers, contest sponsors, promotional and marketing partners, and others who offer our content or whose products or services may interest you.

-WEBSITE: Color Card Administrator, Corp.’s listed website is: https://www.theartofbusinesscards.com/ - i.e., in short “ABC”.

POLICY PRINCIPLES

These represent CCA's foundational principles for data retention:

Purpose Limitation: Personal information is collected and retained for specific, explicit, and legitimate purposes disclosed to Data Subjects at the time of collection.

Data Minimization: The Company only retains personal information that is necessary for the purposes for which it was collected.

Consent: Where applicable, the Company obtains explicit and informed consent from Data Subjects before collecting and retaining their personal information.

Data Integrity and Security: The Company maintains the confidentiality, integrity, and security of personal information in compliance with industry best practices and relevant regulations.

Data Subject Rights: The Company respects the data rights of Data Subjects, including their right to access, correct, delete, or transfer their personal information, as outlined in the CPRA.

POLICY SCOPE

The Data Retention Policy constitutes an integral part of the CCA's Security Policy and pertains specifically to:

All records generated, managed, stored, or processed by CCA, regardless of whether they exist in electronic (soft copy) or paper (hard copy) format.

RETENTION POLICY

Personal data should only be retained for as long as necessary to meet our processing goals and should be deleted when no longer needed, for example, in these cases:

The personal data is inaccurate.
The applicable contract has been fulfilled, and any potential claims are no longer viable due to time limitations.
An individual has revoked their consent for the processing (provided consent serves as the foundation for the processing).

DATA RETENTION PERIODS

The Company retains personal information for the following general periods, unless a longer retention period is required or permitted by law:

Customer Data: Personal information of customers is retained for as long as necessary to fulfil the purposes for which it was collected and for legal or regulatory compliance.

Employee Data: Employee personal information is retained in accordance with employment contracts and applicable employment laws.

Marketing Data: Personal information in NEVER collected for marketing purposes.

Legal and Regulatory Requirements: The Company may retain personal information as required to comply with legal and regulatory obligations.

DATA HANDLING PRINCIPLES DURING RETENTION PERIOD

CCA adheres to the following principles when handling personal information during its retention period:

Data Security: Personal information is stored and transmitted securely using encryption and access controls to prevent unauthorized access, disclosure, alteration, or destruction.

Data Access Controls: Access to personal information during its retention period is restricted to authorized personnel with a legitimate need for such access.

Data Retention Tracking: CCA maintains a record of the start and end dates of data retention periods for different types of data to ensure compliance with CPRA requirements.

Data Use Limitation: Personal information is used only for the purposes for which it was collected and within the constraints of the CPRA.

Data Monitoring and Auditing: Regular monitoring and auditing of data handling practices are conducted to detect and mitigate any security breaches or compliance violations.

Data Deletion and Anonymization: Data Subject requests, personal information is securely deleted or anonymized to prevent any further processing.

Data Subject Rights: CCA promptly responds to Data Subject requests related to accessing, correcting, or transferring their personal information during the retention period, as per CPRA requirements.

Incident Response and Reporting: In the event of a data breach or security incident during the retention period, CCA has established an incident response plan to promptly investigate, mitigate, and notify affected Data Subjects and relevant authorities in accordance with CPRA and other applicable laws.

Employee Training and Accountability: All employees are trained on data handling practices, privacy, and security measures, emphasizing their role in maintaining data confidentiality and compliance with CPRA.

Regular Review and Updates: This Policy is reviewed periodically to ensure alignment with evolving legal requirements and industry best practices. Any updates will be communicated to employees and Data Subjects through appropriate channels.

CONTACT:

Don't hesitate to contact CCA if you have any questions.

-Via website: Contact Us