Privacy Policy
Objective
The objective of this Privacy Policy is to establish the principles and practices for protecting personal information throughout the design, development, and delivery of PoolStack's products and services. Guided by the principles of Privacy by Design, PoolStack proactively safeguards individual privacy by collecting only the personal data necessary for legitimate business purposes, using that information solely for its intended purpose, and implementing robust security measures to prevent unauthorized access, disclosure, or misuse.
Scope
This policy applies to all PoolStack employees, contractors, consultants, and third-party service providers who collect, process, store, or otherwise handle personal information on behalf of PoolStack in the course of their work.
Policy Statement
At PoolStack, protecting the privacy and security of personal information is a fundamental part of how we operate. We are committed to embedding privacy considerations into every stage of our products, services, and business processes: from initial design and development through deployment and ongoing operations. By adopting a Privacy by Design approach, we ensure that privacy safeguards are integrated into our technologies, systems, and workflows rather than treated as an afterthought.
Our commitment to information security is further reinforced by our ISO 27001:2022 and SOC 2 certifications, demonstrating our adherence to internationally recognized security and compliance standards. As a GDPR-compliant organization, PoolStack maintains rigorous data protection practices and provides mandatory privacy and GDPR awareness training to employees, ensuring that the confidentiality, integrity, and security of our clients' personal information remain a top priority.
Information We Collect
PoolStack may collect personal information that users voluntarily provide when interacting with our website, products, or services. This information may include:
- Full name, email address, and phone number.
- Organization name and job title.
- Information submitted through contact forms, support requests, inquiries, or other communications.
Privacy by Design Principles
PoolStack is committed to incorporating privacy into every aspect of its operations by following these core Privacy by Design principles:
Proactive, Not Reactive
We consider privacy requirements from the earliest stages of planning and development, anticipating and addressing potential privacy risks before they arise.
Privacy as the Default
Our products and services are designed to collect and process only the personal information necessary for their intended purpose, ensuring that privacy is the default setting.
Privacy Embedded into Design
Privacy and data protection are integrated into the architecture, design, and functionality of our products, services, and internal processes, supported by appropriate technical and organizational safeguards.
End-to-End Data Security
We implement comprehensive security measures throughout the entire data lifecycle: from collection and storage to processing, sharing, and secure disposal; to protect personal information against unauthorized access, alteration, or disclosure.
Transparency and User Choice
We communicate our privacy practices in a clear and accessible manner, explaining how personal information is collected, used, stored, and shared while providing users with appropriate control over their data.
Respect for Individual Privacy
We use personal information only for legitimate, disclosed purposes and remain committed to protecting the privacy rights of every individual whose data we process.
Our Privacy Practices
To uphold these principles, PoolStack will:
- Conduct Privacy Impact Assessments (PIAs), where appropriate, to identify and mitigate privacy risks associated with our products, services, and business processes.
- Follow data minimization practices by collecting, processing, and retaining only the personal information necessary to deliver our products and services, in accordance with our Data Protection Policy.
- Provide clear and transparent privacy notices that explain how personal information is collected, used, stored, and disclosed.
- Obtain consent for the collection or processing of personal information whenever required by applicable laws and regulations.
- Implement appropriate technical, administrative, and organizational security controls to safeguard personal information against unauthorized access, misuse, loss, alteration, or disclosure.
- Periodically review and update this Privacy Policy and related privacy procedures to ensure continued compliance with evolving legal, regulatory, and industry requirements.
Training and Accountability
PoolStack is committed to fostering a culture of privacy and data protection across the organization. We provide regular training, guidance, and resources to employees, contractors, and authorized third-party service providers to ensure they understand their responsibilities under this Privacy Policy and applicable data protection laws.
All personnel are expected to comply with this policy and related procedures. Failure to do so may result in appropriate disciplinary or contractual action, depending on the nature and severity of the non-compliance.
Non-Compliance
Compliance with this Privacy Policy is monitored through various measures, including internal reviews, automated reporting, periodic audits, and feedback mechanisms. Any employee, contractor, or third-party service provider found to be in violation of this policy may be subject to disciplinary action, which may include termination of employment or contractual engagement. The action taken will depend on the severity, intent, and impact of the violation.
Responsibilities
The designated Privacy Officer is responsible for reviewing, maintaining, and approving this Privacy Policy and its associated procedures. Department heads, business units, and all employees are responsible for implementing and adhering to the applicable privacy and data protection requirements within their respective areas of operation.
Cookies and Tracking Technologies
PoolStack uses cookies, web beacons, pixels, and similar tracking technologies to enhance website functionality, improve user experience, strengthen website security, and analyze website performance and usage patterns.
For more information about how we use cookies and similar technologies, please refer to our Cookie Policy.
Your Privacy Rights
Subject to applicable data protection laws and regulations, you may have the following rights regarding your personal information:
- Access the personal information that PoolStack maintains about you.
- Request correction or updating of inaccurate, incomplete, or outdated information.
- Request deletion of your personal information where permitted by applicable law.
- Withdraw your consent for data processing where consent is the legal basis for processing.
To exercise any of these rights, you may contact us using the details provided below or submit a request through the designated contact channel on our website.
PoolStack will respond to all valid requests within the timeframes required by applicable data protection laws.
Policy Review
This Privacy Policy is reviewed at least annually and whenever significant changes occur in our business operations, technologies, legal obligations, or regulatory requirements to ensure it remains accurate, effective, and compliant.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way PoolStack processes your personal information, please contact us at:
Email: hello@getpoolstack.com