Privacy Policy

1. Introduction

Token Pathway Lab (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of every individual who interacts with our website, tokenpathwaylab.com. We take data protection seriously and operate with a privacy-first approach in line with the requirements of the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users of our website, whether as a visitor, customer, or inquiry submitter. By accessing tokenpathwaylab.com, you consent to the data practices described in this Policy. Token Pathway Lab is the data controller in relation to the processing of your personal data, meaning we determine the purposes and means of processing your personal information.

For any questions about this Policy or how we handle your data, you may contact us at [email protected].

3. Categories of Data Processed

We collect and process various categories of personal data, which may include:

– Usage Data: Information about how you use our website, including IP address, browser type, operating system, pages visited, time spent on site, and referring website addresses.

– Account Data: Details you provide when registering or managing an account, including your full name, email address, mailing address, and phone number.

– Profile Data: Preferences, behavioral insights, and transaction history, including purchase records and user settings.

– Communication Data: Records of your correspondence with us, including email interactions, support requests, and contact history submitted through forms or emails.

– Technical Data: Device identifiers, hardware information, software versions, browser plug-in types and versions, and other system configuration data.

– Transaction Data: Payment method details (processed securely through third-party providers), transactional history, and delivery information.

– Preference Data: Preferences stated by you regarding marketing messages, product interests, and other settings related to your interaction with tokenpathwaylab.com.

4. Legal Bases for Processing

We process your personal data lawfully, and only when one of the following conditions is met:

– Contractual Necessity: Data processing is necessary to perform a contract with you or to take pre-contractual steps.

– Consent: Where required, we obtain your explicit consent before processing your information (e.g. for email marketing).

– Legitimate Interest: Processing is necessary for our legitimate interests, provided such interests are not overridden by your data protection rights.

– Legal Obligation: Processing is required to fulfill legal duties, such as compliance with tax laws or regulatory reporting.

5. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

– Right of Access: To request access to your data and obtain a copy of the personal information we hold about you.

– Right to Rectification: To correct inaccurate or incomplete data.

– Right to Erasure (“Right to be Forgotten”): To request deletion of your data when it is no longer legally required or necessary.

– Right to Restriction of Processing: To suspend our processing of your personal data under certain circumstances.

– Right to Data Portability: To receive your data in a structured, commonly-used, and machine-readable format and to have it transmitted to another data controller where technically feasible.

– Right to Object: You may object at any time to the processing of your data based on our legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We implement industry-standard technical and organizational measures to maintain the security, confidentiality, integrity, and availability of your data, including:

– Data encryption in transit and at rest;
– Role-based access controls and authentication protocols;
– Regular data backups and system monitoring;
– Employee training on privacy and information security.

7. International Transfers

If we transfer your personal data beyond the European Economic Area (EEA), such transfers are made in full compliance with applicable legal requirements. We utilize tools such as Standard Contractual Clauses approved by the European Commission, and we align with regional data protection regulations to ensure an adequate level of protection.

8. Data Retention

We retain personal data only as long as is necessary for the purposes for which it was collected, including for the fulfillment of legal, accounting, or reporting requirements.

Retention periods by data category:

– Usage & Technical Data: up to 12 months
– Account & Profile Data: retained for the duration of the user relationship and up to 5 years post-termination for audit and compliance purposes
– Transaction Data: retained for 7 years to meet financial and tax obligations
– Communication Data: retained for 3 years after the last interaction
– Preference Data: retained until the user revokes or updates consent

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. These include:

– Essential Cookies: Necessary for the functioning of tokenpathwaylab.com, such as account login and session maintenance.

– Functional Cookies: Enable personalization by remembering your preferences, language, or region.

– Analytics Cookies: Help us understand user behavior and website performance through data collection tools (e.g. Google Analytics).

– Performance Cookies: Support site optimization and technical diagnostics.

10. Cookie Management and Compliance

You can manage your cookie preferences via your browser settings and through cookie consent banners provided on tokenpathwaylab.com. We honor user preferences in compliance with the GDPR and CCPA, including “Do Not Sell or Share My Personal Information” requests under CCPA.

For greater control, users can disable non-essential cookies or withdraw consent at any time.

11. Special Protections for Children Under 13

Our website and services are not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected such information, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data may contact us at [email protected].

12. Policy Updates and Notifications

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data processing practices. When substantive changes occur, we will notify users via prominent notice on tokenpathwaylab.com or via email, where appropriate.

You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to our Privacy Team at:

Email: [email protected]
Website: https://tokenpathwaylab.com

We are dedicated to maintaining full compliance with applicable data protection laws including the GDPR and CCPA. Should you have any privacy-related concerns, we encourage you to contact us directly.