Data
Regulation
The Data We Collect
Cookies
What are cookies?
This is, but not
limited to: –
Browser
history
User
preferences
Login
Status
Behavior
Patterns
Authentication
codes
And much
more.
This is, but not
limited to: –
Browser history
User preferences
Login Status
Behavior Patterns
Authentication codes
And much more.
These are the types of cookies
Session cookies
Temporary Cookies that expire once
you close the browser
Persistent cookies
These remain on your device even after the browser is closed.However, persistent cookies always have an expiration date.
Authentication cookies
For identification and authentication of users.
Tracking cookies
Collection of browsing habits to create personalized experiences and ads.
Zombie cookies
Re-created after deletion. These types of cookies are considered unethical.
Last but not least, third-party cookies
These are cookies not belonging to the domain you are visiting and are used for cross-site tracking and advertising.
We have divided the collection into five parts.
What does Ciente do with the cookies?
They are required for the basic functioning of the website experience. And they do not store any personally identifiable data.
Functional
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website, which helps in delivering a better user experience for the visitors.
Access To Your Personal Information
Ciente will collect your personal information, such as first and last name, age, email ID, company name, job title, and contact number.
- How you use our website and the device(s) (this is optional. You can deny permission to the cookies that collect this data.)
- Your IP address or unique ID of your device.
We collect and process the information you decide to provide to us to gauge and cater to customer demands & unmet needs and improve our website and services so we can show up for you better.
However, we do not collect sensitive information like your political beliefs, sexual preferences, health, ethnic background, etc. We respect and actively protect sensitive information that can be used for malicious intent.
Why?
Ciente aims to deliver a personalized experience to our users. And provide high-quality marketing services to our clients.
For this mission, it is necessary to acquire data that can help us provide a high-quality experience. But with this mission, it is also vital to take care of the privacy of our audience and clients, especially their private information.
However, as every digital interaction leaves a mark and has become the basis of conducting efficient business, data will be gathered. However, it should be gathered with utmost responsibility, and the power should be given to the data’s owner.
While we continue to deliver exceptional marketing campaigns, we will also collect, use, and distribute data only after we have the users’ consent. And to provide them with the experience they deserve.
For Children*
We do not actively or knowingly store, collect, or process personal data from children. For each policy, and jurisdiction, the definition of a child is different, but for our purposes, anyone under the age of 16 will be considered a child. Any data unknowingly collected from a child will be subject to immediate deletion.
Conditions for Disclosing of Private Information 
To create and deliver marketing campaigns, we will ask users for their data. And based on their consent, we will share the data with third-party advertisers to provide personalized marketing and ads for a better experience.
But, this data will only be shared if the user has consented. And will not be shared otherwise.
Enforcement Requests
We may disclose private information if required by the law. If presented with a legally valid request such as, court orders, subpoenas, or investigation from law enforcement agencies, etc.In this case, we will provide only the requested information and, where required, notify the user of this (unless prohibited by the law to do so). We will also share data to protect our rights and prevent fraudulent activity.
Security & Fraud Prevention
Speaking of fraud, for any malicious intent that goes against the public interest of the users or to protect the rights of the company—we will have to disclose private information.This also includes revealing data if someone’s life is at risk.
The responsibility of acquiring data also means using it as a tool to save, enrich, and protect people from harm and malicious intent.
& Acquisitions)
1. We will disclose to our users of any such events.
2. We will give them the choice of keeping or deleting data
3. We will be complying with the laws and regulations stipulated by the data laws.
For mergers and acquisitions, we will maintain complete transparency and provide options for the users to safeguard their data.
To create and deliver marketing campaigns, we will ask users for their data. And based on their consent, we will share the data with third-party advertisers to provide personalized marketing and ads for a better experience.
But, this data will only be shared if the user has consented. And will not be shared otherwise.
We may disclose private information if required by the law. If presented with a legally valid request such as, court orders, subpoenas, or investigation from law enforcement agencies, etc.
In this case, we will provide only the requested information and, where required, notify the user of this (unless prohibited by the law to do so). We will also share data to protect our rights and prevent fraudulent activity.
Speaking of fraud, for any malicious intent that goes against the public interest of the users or to protect the rights of the company—we will have to disclose private information.
This also includes revealing data if someone's life is at risk.
The responsibility of acquiring data also means using it as a tool to save, enrich, and protect people from harm and malicious intent.
In the case of M&A: -
1. We will disclose to our users of any such events.
2. We will give them the choice of keeping or deleting data.
3. We will be complying with the laws and regulations stipulated by the data laws.
For mergers and acquisitions, we will maintain complete transparency and provide options for the users to safeguard their data.
Retention Periods of Your Data
Your data is retained as long as needed, not a minute more. If we do retain your data, under GDPR laws, we must disclose and give you a reason for retaining it.
In Ciente’s case,
01
Data collected through cookies will have an expiration date. Based on the type of cookies, it can range from 6 to 12 months. You will be able to delete these records if you wish to. After the period, we will anonymize the data for research and collation.
02
If you have registered for any of our events, downloaded content, or registered in any manner with us, we will retain data for no more than 5 years.
03
In some special cases like contractual obligation, user consent, legal claims, anonymization, and expiration of data may be more than the mentioned timelines.
Usage of Your Data
After you have opted in, signed up, or agreed to share your data with us, we will use it responsibly.
We collect, process, and store data in compliance with applicable laws and regulations, including but not limited to: –
But what would we use it for exactly?
- Your data is used to personalize marketing
campaigns and tailor content that would provide value to you. - With consent, we will share it with third parties for precision advertising.
- We use collected data to improve marketing efficiency and shorten sales cycles, including processing data for demand and lead generation activities.
- We monitor user interactions and business interests to connect potential clients to their market-fit solutions.
Data and Law Compliance
Ciente protects your data by complying with all applicable protection and privacy laws. This is directly linked to our mission of safely and responsibly handling data and ensuring the transparency of the entire process.
CAN SPAM, calOPPA, CASL Acts, and Your Choices and Access Rights
- Ciente follows the guidelines of the CAN-SPAM Act. The act applies to all transactional and commercial messages. The law requires businesses to provide an opt-out feature for all their communications. If, for any reason, you wish to discontinue Ciente’s email lists or marketing messages, we will comply with the CAN-SPAM law and make sure you stop receiving communication.
- Similarly, we comply with calOPPA laws, requiring us to disclose how we collect and process data and our tracking practices. This piece is an embodiment of adhering to this law.
- We also follow CASL law, which requires explicit consent from users for any electronic messages.
- Right to opt out of emails.
- Right to know how their data is collected and used.
- Right to request changes or deletion of data in some cases.
The GDPR and Your Choices and Access Rights Concerning Personal Data
The GDPR is the most comprehensive data protection policy ever created.
As Ciente processes data from the EU, we strictly adhere to this law. In compliance with the regulations,
01 We provide a copy of your data.
02 We rectify any inaccuracies that may be present in your data.
03 We will erase any data if you request us to do so.
04 You can limit how your data is used.
05 You will get your data in a usable format.
06 You can refuse the usage of your data for marketing purposes.
According to GDPR, we will only use data we have acquired consent for, for contractual obligations with the user, and for business purposes as long as it doesn’t override your rights.
california privacy rights
California residents have significant control over their data. Under California’s privacy rights, businesses must outline the data they collect, how it’s used and sold, and the categories of third parties receiving it.
There are two types of the law. The first is the CCPA, or California Consumer Privacy Act, and its amended version, the CPRA, or California Privacy Rights Act.
These Laws Give California Residents Control Over Their Data. This Includes: –
- The right to know about the personal information a business collects about them and how it is used and shared;
- The right to delete personal information collected from them (with some exceptions);
- The right to opt out of the sale or sharing of your personal information, including via the GPC.
- The right to non-discrimination for exercising their CCPA rights.
- The right to correct inaccurate personal information that a business has about them; and
- The right to limit the use and disclosure of sensitive personal information collected about them.
NOTICE TO CALIFORNIA RESIDENTS [CONSUMERS] –CALIFORNIA CONSUMER
- Deny you goods or services.
- Charge different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties.
- Provide you with a different level or quality of goods or services.
- Suggests that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Individuals and Businesses are considered consumers under the right of these laws and share equal rights.
NOTICE TO CALIFORNIA RESIDENTS [CONSUMERS] – CALIFORNIA CONSUMER
- Deny you goods or services.
- Charge different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties.
- Provide you with a different level or quality of goods or services.
- Suggests that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Individuals and Businesses are considered consumers under the right of these laws and share equal rights.
Specific Practices of Data Collection
Cookies and personal data are collected with strict compliance with the GDPR. We only use data that you consent to. All collection is consent-based, except for cookies necessary to run our website.
Complying with the GDPR, our servers are based in Europe, and the data does not leave the premises of the European Union.
We also ensure our users have the following rights –
1. To access
2. To rectification
3. To erasure
4. To restrict processing
5. To data portability
6. To object
7. To withdraw your consent
To comply with your rights, Ciente will have 30 days to comply.
1. Consensual powers over electronic marketing messages (SMS, Email, social media, etc.)
2. An easy and accessible way for you to unsubscribe from any marketing messages
3. No false or misleading promotions with your digital interactions
4. The knowledge of how your data is used and stored
5. Power over access and deletion of your data – though under circumstances and for research, data will be anonymized. (This process is irreversible, and the data cannot be traced back to you)
6. The option to withdraw consent at any time.
And according to Quebec’s Law 25, we will: –
1. Notify Quebec users of any breach in our systems
2. Conduct a privacy impact assessment when acquiring, developing, and transferring personal information.
1. Access their data
2. Modify their data
3. Control their data
4. Withdraw consent from sale or sharing their personal information via the GPC.
5. Limit their data usage.
In addition, we comply with state laws wherever applicable, which helps us maintain our integrity in handling data responsibly.
1. The right to access
2. The right to rectification and erasure (which could mean anonymization)
3. Right to object processing and restrict usage
4. Right to data portability
5. Right to withdraw consent
We also have a Data Protection Officer that you can contact for any queries at dpo@ciente.io
How we protect your data
Ciente believes it to be our duty to protect the data of our audience, potential clients, and clients.
As data goes, no organization can guarantee 100% protection, but we can and will protect your data as fiercely as we can. But what does this mean?
We use the latest technology to protect our servers (across all regions).
This means: –
- 01 Using TLS 1.2 or higher for exchange and transfer of data.
- 02 Stored data is encrypted using AES-256 (It is currently one of the strongest encryption techs available)
- 03 Access to these servers is given to only authorized personnel based on the principle of least privilege.
- 04 The data centers are ISO 27001 and SOC 2 Certified and monitored 24/7.
- 05 We frequently audit our data and security system to comply with the laws.
- 06 We only collect data that is consented to and anonymize it after specific periods to reduce risk.
- 07 We have a firewall and real-time intrusion detection to protect your data from malicious intent.
- 08 Breaches or any incidents, per the laws, will be notified to impacted individuals and authorities.
These practices have helped and will help us protect your data as effectively as possible. For us, these protection systems go beyond best practices- they are a symbol of our mission to use data responsibly and with complete transparency.
1. Your rights to access your data.
2. Your rights to consent.
3. Your rights to withdraw consent.
4. Your rights to modify or delete personal data.
5. Your rights to limit your sensitive information.
6. Your rights to acquire data in a portable format.
7. Your rights to understand how your data is handled.
8. Your rights to file complaints.
9. Your rights to non-discrimination.
10. Your rights to stop data processing.
For more information, you can contact us at: dpo@ciente.io
Your Rights
Ciente, irrespective of the region, respects the rights of our consumers.
Including: –
Opt-ins and Opt-outs
- We define an opt-in as the explicit consent the user gives us to obtain their data. This could be by accepting our cookies or sharing personal data through our forms.
- For marketing communications, again, we require your explicit consent to opt-in for emails, newsletters, or SMS marketing.
- You can unsubscribe to our communications via this link: https://ciente.io/unsubscribe/
- You can exercise your right to “Do Not Sell My Data.”
- Opt-out of behavioral tracking (through our cookies consent form)
- Opt-out of automated decision-making and profiling
Miscellaneous
01
Do Not Track (“DNT”) is a privacy preference that users can set in web browsers. We do not recognize or respond to browser-related DNT signals, as the industry is working toward a common approach to responding to DNT. To learn more about Do Not Track, please click here.
02
We provide links to other websites or resources not part of Ciente’s program or services. We do not control these websites or their privacy practices, and any information you provide to these sites is subject to the privacy policies of those sites, not ours.
03
There will be changes to our policy as per the regulations, and to ensure better transparency. We will update the page if there are any changes. You can check this page for any future updates.
For additional queries, please contact us at: dpo@ciente.io
Miscellaneous
Do Not Track (“DNT”) is a privacy preference that users can set in web browsers. We do not recognize or respond to browser-related DNT signals, as the industry is working toward a common approach to responding to DNT. To learn more about Do Not Track, please click here.
02
We provide links to other websites or resources not part of Ciente’s program or services. We do not control these websites or their privacy practices, and any information you provide to these sites is subject to the privacy policies of those sites, not ours.
03
There will be changes to our policy as per the regulations, and to ensure better transparency. We will update the page if there are any changes. You can check this page for any future updates.