IMPORTANT

You may generate your own terms and conditions using a tool like this: https://termly.io/products/privacy-policy-generator/ or a tool like ChatGPT.

The below is just an EXAMPLE. You are responsible for creating your own Privacy Policy and Terms and Conditions agreements.

Privacy Policy

1. Who We Are

ChangeWorks is committed to protecting your personal data. For visitors in the EU and

UK, ChangeWorks serves as the “data controller” responsible for your information. You

may contact us at [email protected] or by mail at [address]. EU and UK

visitors may also reach our Data Protection Officer at [email protected].

2. Information We Collect

We collect personal details such as your name, email, phone number, mailing address,

job title, and communication preferences. If you make payments, we securely process

credit or debit card details and billing information. Technical data like your IP address,

browser type, operating system, and cookies may also be collected. If you log in via

social media, we may receive limited information from those platforms. Please note, we

do not knowingly collect data from children under 13 in the U.S. or under 16 in the EU

without parental consent.

3. How We Use Your Data

We use your information to provide and improve our services, process payments, and

complete transactions. It also allows us to send account updates and administrative

messages, deliver marketing communications with your consent, and offer personalized

content and advertising. In addition, we process data when required to meet legal

obligations.

4. Legal Bases (GDPR)

Under GDPR, we process data based on several legal grounds: fulfilling contracts to

deliver services you request; obtaining your consent for marketing and cookies;

pursuing our legitimate interests such as improving services and website security; and

complying with legal obligations.

5. Sharing of Data

We share data only with trusted third parties including hosting providers, analytics

services, and payment processors. These partners operate under strict data processing

agreements to safeguard your information. We do not sell personal data.

6. Cookies & Tracking

To improve your experience, we use essential, functional, analytics, and advertising

cookies. Visitors from the EU and UK are asked for explicit consent via a cookie banner.

You may adjust your preferences at any time. More details are available

at www.allaboutcookies.org.

7. Data Retention

We keep your data only as long as necessary. Payment and transaction records are

retained for seven years for legal and tax purposes. Marketing data is held until you

withdraw consent or unsubscribe, while account data is stored until your account is

closed plus 1 year or less.

8. Security

We apply technical, organizational, and administrative safeguards to protect personal

data against loss, misuse, or unauthorized access.

9. Your Rights

Depending on applicable laws, you may have rights over your personal data. These

include the right to access, correct, or delete your information; restrict or object to

processing; receive data in a portable format; withdraw consent; and file a complaint

with a supervisory authority. To exercise these rights, please contact us

at [email protected].

10. Marketing & Email Compliance (CAN-SPAM)

All marketing emails include a clear unsubscribe link, and we honor opt-out requests

within ten business days. Each email also includes our valid postal address.

11. International Data Transfers

When transferring data outside your home country, we ensure protections such as EU

Standard Contractual Clauses are in place.

12. Updates

We may revise this policy from time to time, and the most current version will always be

available here with the effective revision date.

13. Contact Us

If you have questions, please contact us at [email protected],