1. Introduction
Welcome to XR Portal ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xr-portals.com and use our augmented reality services.
By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.
2. Information We Collect
We may collect the following categories of personal information:
- Identity Data: Name, username, or similar identifier provided when you contact us or create an account on our platform.
- Contact Data: Email address, phone number, and messaging platform identifiers (e.g., WhatsApp).
- Technical Data: IP address, browser type and version, device information, operating system, time zone setting, and other technology identifiers on the devices you use to access our website.
- Usage Data: Information about how you interact with our website, including pages visited, time spent, navigation paths, and features used.
- Content Data: 3D models, textures, images, and related assets you upload to or interact with through our AR services.
- Communication Data: Records of correspondence when you contact us via email, phone, WhatsApp, or other channels.
3. How We Collect Your Data
We collect your personal data through:
- Direct Interactions: When you contact us via email, WhatsApp, or other communication channels; when you request a consultation or custom solution; or when you create an account on our platforms.
- Automated Technologies: As you navigate our website, we may automatically collect Technical Data using cookies, server logs, and similar technologies. See our Cookie Policy for more details.
- Third-Party Sources: We may receive data from analytics providers, social media platforms, and business partners.
4. How We Use Your Data
We use your personal data only when the law allows us to. The most common legal bases for processing are:
- Contract Performance: To provide our AR services, fulfill project agreements, and deliver custom solutions you have requested.
- Legitimate Interests: To improve our website, services, and marketing; to analyze usage patterns; and to ensure network and information security.
- Consent: Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications or enabling non-essential cookies.
- Legal Obligation: To comply with applicable laws, regulations, and legal processes.
5. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files placed on your device that help us analyze web traffic, remember your preferences, and improve site functionality.
We categorize cookies as follows:
- Essential Cookies: Required for the website to function properly (e.g., theme preferences, session management).
- Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. These are only activated with your consent.
- Functional Cookies: Remember your preferences and settings to provide a personalized experience.
For full details about the cookies we use and how to manage them, please see our Cookie Policy.
6. Third-Party Services
We work with the following third-party service providers who may process your data on our behalf:
- Hosting & Infrastructure: Our website is hosted on cloud infrastructure that may process Technical Data (such as IP addresses) to deliver content to you.
- Communication Platforms: WhatsApp, email providers, and social media platforms through which you may contact us.
- Analytics: We may use analytics tools to understand website usage patterns. These tools collect anonymized data only with your consent.
Each third-party provider is bound by their own privacy policies and data processing agreements.
7. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:
- Service Providers: With trusted third parties who assist us in operating our website and delivering our services, subject to confidentiality obligations.
- Legal Requirements: When required by law, subpoena, or other legal process, or to protect our rights, safety, or property.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction.
- With Your Consent: When you have given us explicit permission to share your data for a specific purpose.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including countries where our hosting providers and third-party services operate. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws, including the use of standard contractual clauses where required.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
- Account Data: Retained for the duration of your account and for a reasonable period thereafter.
- Communication Records: Retained for up to 3 years after the last interaction.
- Technical/Usage Data: Aggregated or anonymized data may be retained indefinitely for analytical purposes.
When personal data is no longer needed, we securely delete or anonymize it.
10. Your Rights Under GDPR (European Economic Area)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure:Request deletion of your personal data ("right to be forgotten").
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at xr.portal.official@gmail.com. We will respond within 30 days.
11. Your Rights Under CCPA/CPRA (California)
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you additional rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out:Opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
12. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols.
- Access controls limiting data access to authorized personnel only.
- Regular security assessments and monitoring of our systems.
While we strive to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
13. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly. If you believe we have inadvertently collected data from a child, please contact us immediately.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
15. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us: