Privacy Policy

1. Information We Collect

Business Information

When you submit a business listing, we collect:

• Business name, description, and contact details
• Location and industry information
• Cultural identity and language information
• Website and social media links
• Verification documents (when applicable)

Personal Information

When you create an account or contact us, we collect:

• Name and email address
• Phone number (when provided)
• Account preferences and settings
• Communication history

Technical Information

We automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referral source and location data

2. How We Use Your Information

We use your information to:

• Provide and maintain our registry service
• Process business listings and verification requests
• Communicate with you about your account
• Improve our services and user experience
• Comply with legal obligations

3. Lawful Basis for Processing

Under GDPR, we only process personal data when we have a lawful basis. Our lawful bases include:

• Consent: When you explicitly agree to our processing of your data
• Contract: When processing is necessary for our service agreement
• Legal Obligation: When required by law or regulatory requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests
• Public Interest: For maintaining the registry and supporting Pacific communities

4. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

• Public Listings: Business information is publicly displayed in the registry
• Service Providers: With trusted third parties who help us operate our service
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

5. Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right to be Informed: Clear information about how we use your data
• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ('Right to be forgotten')
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive data in a structured, machine-readable format
• Right to Object: Object to certain types of data processing
• Rights Related to Automated Decision Making: Protection from automated profiling

To exercise these rights, please contact us using the details provided at the end of this policy. We will respond to your request within one month of receipt.

6. Data Security

We implement appropriate security measures to protect your information:

• Secure servers and encryption protocols
• Regular security audits and updates
• Limited employee access to personal data
• Secure data transmission protocols

5. Your Rights

You have the right to:

• Access and update your personal information
• Request deletion of your account and data
• Opt out of marketing communications
• Request a copy of your data
• Object to certain data processing activities

7. Cookies and Tracking

We use cookies and similar technologies. Under GDPR, we require your consent for non-essential cookies:

• Essential Cookies: Required for basic functionality (no consent needed)
• Analytics Cookies: Help us understand how our site is used (consent required)
• Marketing Cookies: Used for personalized advertising (consent required)
• Functional Cookies: Remember your preferences (consent required)

You can manage cookie preferences through our cookie consent banner or browser settings.

8. Data Retention

We use cookies and similar technologies to:

• Account Data: Retained while your account is active
• Business Listings: Retained until you request deletion
• Analytics Data: Anonymized after 26 months
• Support Communications: Retained for 3 years
• Legal Requirements: Retained as required by law

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Under GDPR, we ensure appropriate safeguards are in place for such transfers:

• Data Processing Agreements with adequate protection clauses
• Use of EU Standard Contractual Clauses where applicable
• Compliance with GDPR adequacy decisions
• Regular review of international transfer mechanisms

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under this age.

11. Changes to This Policy

We may update this privacy policy from time to time. Under GDPR, we will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date. For substantial changes, we may also notify you by email or other direct communication.

12. Data Protection Officer

Under GDPR, we have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO directly for data protection concerns:

• Email: dpo@pacificmarket.com
• Response time: Within 30 days for GDPR requests
• Responsibilities: Overseeing compliance, handling requests, advising on data protection

13. Right to Lodge a Complaint

If you believe we have violated your data protection rights under GDPR, you have the right to lodge a complaint with a supervisory authority. In the EU, you can contact your local data protection authority or the Irish Data Protection Commission (our EU representative).

14. Contact Us

If you have questions about this privacy policy or want to exercise your rights, please contact us.