Privacy Policy

Welcome to Innovation Network Design. Protecting your privacy and ensuring the security of your personal information is our top priority. This Privacy Policy outlines our practices regarding the collection, use, and protection of your information. Our data handling practices are designed to comply with the Payment Card Industry Data Security Standard (PCI DSS) and ISO/IEC 27001 on information security management. We are committed to maintaining the confidentiality, integrity, and availability of all personal data we collect, use, and process.

1. Information We Collect

Innovation Network Design collects various types of information to enhance our services and manage our operations securely, in line with PCI DSS and ISO/IEC 27001 standards. Information collection occurs as follows:

• Information you provide: This includes data entered during account creation and service usage, such as your name, email address, phone number, and payment information. This data is protected using encryption during transmission and at rest, adhering to PCI DSS requirements for secure data handling.
• Information from service use: We collect data about how you interact with our services. This encompasses:
  • Device information: Details about the devices used to access our services, including hardware models, operating system versions, unique device identifiers, and network information, are securely logged in accordance with ISO/IEC 27001 controls.
  • Log information: Our servers automatically record information sent by your device when you use our services, including web requests, IP addresses, browser types, and language preferences. Log data is analyzed within the framework of ISO/IEC 27001 to ensure system security and reliability.
  • Location information: With your permission, we may collect information about your actual location to provide location-based services. This data is treated with the highest level of confidentiality and is secured following PCI DSS and ISO/IEC 27001 standards.
  • Cookies and similar technologies: We use cookies and similar technologies to provide, enhance, and personalize our services. Usage is in strict adherence to privacy and security standards outlined by PCI DSS and ISO/IEC 27001.

Our commitment to PCI DSS and ISO/IEC 27001 standards ensures that all personal information is processed securely, safeguarding against unauthorized access, disclosure, alteration, and destruction.

2. How We Use Information We Collect

At Innovation Network Design, the information we collect serves as a cornerstone for delivering and enhancing our services, all within the strict guidelines of PCI DSS and ISO/IEC 27001 compliance standards. Here's how we utilize this data:

• Service Provisioning and Enhancement: We use your information to deliver our services effectively and to identify areas for improvement. This includes deploying resources for optimal performance, troubleshooting issues, and integrating new functionalities. All operational processes are designed to ensure data integrity and security, in line with PCI DSS's secure data handling practices and ISO/IEC 27001's systematic approach to managing sensitive company and customer information.
• Development of New Services: Insights gained from your data help us innovate and create services that meet emerging needs and preferences. This development process adheres to stringent security and privacy controls, ensuring that new services are built with data protection by design and default, reflecting the core principles of PCI DSS and ISO/IEC 27001.
• User and Network Protection: Your safety and the security of our network are paramount. We leverage collected data to detect, prevent, and respond to security risks, fraud, and other malicious activities. Our security practices are in strict compliance with PCI DSS requirements for safeguarding cardholder data and ISO/IEC 27001's information security management systems, ensuring robust protection against unauthorized access or data breaches.
• Personalized User Experience: By analyzing your interactions with our services, we can offer personalized content, including more relevant search results and advertisements. This customization is conducted with full respect for your privacy, under the guidelines of PCI DSS and ISO/IEC 27001 to prevent unauthorized use or disclosure of your information. Consent is always sought when adjustments to data use policies affect how your personal information is processed.

Transparency and consent are pillars of our data use policy. Before we use your information for any purpose not covered by this Privacy Policy, we will request your explicit consent. Our commitment to PCI DSS and ISO/IEC 27001 standards ensures that all data processing activities uphold the highest levels of security and privacy.

3. Information We Share

At Innovation Network Design, safeguarding your personal information is our top priority. However, there are specific scenarios under which we might share your information with third parties:

• With Your Consent: We believe in transparency and the power of choice. Therefore, we will only share your personal information with external entities after receiving your explicit consent. This approach ensures that you are in full control of your personal data. Before sharing your information, we provide you with the details of what will be shared and with whom, ensuring you make an informed decision.
• For Legal Reasons: Upholding the law is a responsibility we take seriously. We may share your personal information with external parties if we are convinced that doing so is necessary for legal compliance, enforcement of terms, security, or protection purposes. Specifically, this includes:
  • Compliance with Laws: When faced with a legal obligation, such as a court order or government demand, we may disclose your information to comply with the law or regulatory requirement. This process is conducted with the utmost respect for your privacy rights, ensuring disclosures are narrowly tailored to meet the legal necessity.
  • Terms of Service Enforcement: To maintain a safe and fair environment, we may share information to investigate or address violations of our Terms of Service. This includes combating fraud, addressing security threats, and protecting our rights and property as well as those of our users.
  • Security and Fraud Prevention: In cases where we detect activities that may compromise the security of our services or users, or involve fraudulent actions, we may share information as part of our efforts to address these issues. Our goal is to protect the integrity of our services and the safety of our users.
  • Protection of Rights and Safety: Your safety and the protection of your rights are paramount. In situations where sharing information is necessary to protect against harm or to defend the rights, property, or safety of Innovation Network Design, our users, or the public, we will take appropriate measures to ensure that sharing is justified and in accordance with the law.

We handle all information sharing with a commitment to transparency, security, and adherence to your privacy rights. Our processes for sharing information are designed to ensure that your personal data is protected, even when we are required to share it under these specific conditions.

4. Security

At Innovation Network Design, the security and integrity of our data, alongside the privacy of our users' information, stand as our utmost priority. We have instituted a comprehensive suite of security measures designed to thwart unauthorized access, alteration, disclosure, or destruction of information. Our approach to achieving robust security is multifaceted:

• Universal Encryption: We leverage encryption across all data stored and transmitted within our systems. Beyond employing Secure Socket Layer (SSL) encryption to create secure channels for data transmission, we ensure that all stored data, regardless of its nature, is encrypted using advanced encryption standards. This blanket encryption strategy ensures that even in the unlikely event of data access by unauthorized parties, the information remains unintelligible and secure.
• No Storage of Sensitive Personal and Financial Information: Adhering to the highest standards of privacy and security, we have adopted a stringent policy against the storage of sensitive Personally Identifiable Information (PII) and Payment Card Industry (PCI) data. This approach significantly reduces the risk of sensitive information exposure and aligns with our commitment to maintaining user trust and ensuring data protection.
• Comprehensive Information Handling Practices: Our commitment to security encompasses every phase of the data lifecycle. We rigorously review our information collection, storage, and processing practices to incorporate robust physical and digital security measures. These practices protect our data centers and infrastructure against unauthorized access and ensure a holistic defense against emerging threats.
• Restricted Access and Strict Confidentiality: Access to personal information within Innovation Network Design is meticulously controlled, reserved solely for employees, contractors, and agents with a defined need to interact with the data. Binding confidentiality agreements reinforce their commitment to privacy, with severe consequences for any breach, up to and including termination. This framework ensures that every team member is an active participant in our culture of security and confidentiality.

In our relentless pursuit of cybersecurity excellence, we continuously monitor, review, and enhance our security measures in response to the dynamic landscape of cyber threats and technological advancements. Our proactive approach to security, coupled with our policy against storing sensitive data, underscores our unwavering dedication to protecting our users and their information. At Innovation Network Design, your trust and security are our highest priorities, and we are committed to upholding the strictest standards of data protection for all our stakeholders.

5. Changes to This Privacy Policy

At Innovation Network Design, we recognize the importance of privacy and are committed to ensuring the highest standards of data protection. As regulatory environments evolve and our services expand, our Privacy Policy may undergo modifications to reflect these changes and improvements. Our commitment to transparency and your privacy means that we will never diminish your rights under this Privacy Policy without seeking your explicit consent.

Here’s our approach to keeping you informed about changes to this policy:

• Regular Review and Updates: Our team regularly reviews our Privacy Policy to ensure it accurately reflects our practices and complies with applicable laws and regulations. When updates are necessary, we promptly revise this document to include these changes.
• Transparent Communication: Should there be any modifications to our Privacy Policy, we ensure these changes are communicated to you in a clear and timely manner. This includes posting the updated policy on our website, along with a summary of the changes and their potential impact on your rights and privacy.
• Significant Changes Notification: For significant alterations that might affect your privacy rights or the way we handle your information, we go beyond website notifications. This may involve sending you direct communications, such as emails or in-service alerts, to ensure you are fully aware of these changes.
• Archiving Previous Versions: Understanding the importance of historical records, we archive all previous versions of our Privacy Policy. This allows you to review them at any time and understand the evolution of our privacy practices.
• Effective Date: Each update to our Privacy Policy includes the effective date at the document's start. We encourage you to review the Privacy Policy periodically to stay informed about how we protect your information and your rights.

Your continued use of our services after any changes to this Privacy Policy implies your acceptance of the revised terms. If you do not agree with the modifications, you are free to discontinue using our services. We value your trust and are dedicated to protecting your privacy through clear, responsible, and secure information handling practices.