Data Protection & Confidentiality Policy
At Mayday Internet, safeguarding the privacy and confidentiality of our clients’ information is a core responsibility we take very seriously. This Data Protection & Confidentiality Policy outlines how we collect, store, process, and protect all data shared by our clients in the course of providing website development, e-commerce solutions, Shopify integration, and related digital services.
By engaging with Mayday Internet, you agree to the practices described in this policy.
1. Scope of the Policy
- All client data, both personal and business-related, shared with Mayday Internet for the purpose of website development, Shopify store creation, digital marketing, and other services.
- All data relating to clients’ customers, sales records, and transactional information handled by Mayday Internet while providing services.
- All employees, consultants, and subcontractors of Mayday Internet who may have access to confidential information.
2. Types of Data We Collect
In the course of our operations, we may collect and handle the following types of data:
- Personal information: Client names, contact details, email addresses, billing details.
- Business data: Website content, product details, pricing structures, customer data, transaction history, sales analytics.
- Access credentials: Server login details, admin panel credentials, third-party API keys (if provided for service purposes).
- Technical data: Hosting details, domain management information, and other infrastructure-related data.
3. Data Usage & Purpose
- To develop, maintain, and manage client websites and online stores.
- To provide customer support and technical assistance.
- To communicate important service-related updates.
- To implement requested customizations, integrations, and optimizations.
- To analyze performance and enhance service quality (with prior consent where applicable).
4. Data Protection Measures
- Secure servers and encrypted storage.
- Access controls with role-based permissions for internal team members.
- Secure password management protocols.
- Encrypted communication channels for all sensitive data transfers.
- Regular data security audits and vulnerability assessments.
- Non-disclosure agreements (NDAs) with all employees and subcontractors.
5. Confidentiality Assurance
Mayday Internet commits to maintaining strict confidentiality of all client information. We assure that:
- Client data and project details will never be disclosed to unauthorized third parties.
- All sales data, customer information, and transaction records handled as part of our services will be protected and treated as strictly confidential.
- Sensitive data will only be accessed by authorized personnel on a need-to-know basis, solely for fulfilling service obligations.
6. Data Retention
- Client data will either be securely deleted or returned to the client as per agreement.
- Any backup copies will be erased within a reasonable period unless otherwise agreed.
7. Client Rights
- Request access to the personal or business data we hold.
- Request correction of any inaccurate or incomplete data.
- Request deletion of data no longer necessary for service provision.
- Withdraw consent for certain data usages (where applicable).
8. Data Breach Protocol
- Promptly investigate and identify the cause.
- Contain the breach and prevent further unauthorized access.
- Notify affected clients within 48 hours, detailing the nature of the breach, data potentially affected, and remedial actions taken.
- Cooperate fully with any legal or regulatory obligations.
9. Third-Party Services
If third-party services (such as payment gateways, analytics tools, or APIs) are integrated into client websites, their respective data protection policies will apply. While Mayday Internet ensures secure integration, clients are encouraged to review third-party privacy policies as well.
10. Policy Updates
Mayday Internet reserves the right to update this policy periodically to reflect changes in legal requirements, industry practices, or company procedures. Clients will be notified of significant updates via email or website notification.