1. Introduction

At Idea Elan, your privacy is our priority. This Privacy Policy outlines how we collect, use, store, and protect your personal data across our website, Infinity and Infinity X web application, and mobile app. As an ISO/IEC 27001:2022 certified organization, we are committed to maintaining the highest standards of information security and data privacy. By using our services, you agree to the collection and use of information in accordance with this policy.

---

2. Scope

This policy applies to all users of:

• The Idea Elan corporate website
• The Infinity and Infinity X software platform (web and mobile)
• Any associated services or communications provided by Idea Elan

---

3. Information We Collect

We may collect the following types of personal and non-personal data:

a. Personal Information

• Full name
• Email address
• Phone number
• User credentials of External users (username, password)

b. Usage Data

• IP address
• Device type and browser
• Operating system
• App and web activity logs
• Access time and duration

---

4. How We Use Your Information

We use the collected data for purposes including:

• Providing and maintaining the Infinity and Infinity X software and services
• Managing user accounts and authentication
• Enhancing platform security and performance
• Personalizing user experience
• Communicating service updates or notifications
• Meeting legal and regulatory obligations

---

5. Legal Basis for Processing

Under applicable data protection laws (e.g., GDPR), we process your information on the following legal bases:

• Consent: For optional features or marketing
• Contractual necessity: To deliver our services
• Legal obligation: For regulatory compliance
• Legitimate interest: For improving services and ensuring security

---

6. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share your information with:

• Trusted third-party service providers under strict data processing agreements
• Legal or regulatory authorities when required by law
• Internal personnel strictly on a need-to-know basis

All third parties must comply with our ISO 27001:2022-based security policies.

---

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, regulatory, or contractual obligations.

---

8. Data Security

As an ISO/IEC 27001:2022 certified organization, Idea Elan maintains a robust Information Security Management System (ISMS) to:

• Protect data against unauthorized access, alteration, or destruction
• Conduct regular risk assessments and audits
• Implement encryption, access controls, and secure coding practices

---

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct or delete your personal data
• Object to or restrict data processing
• Withdraw consent at any time
• File a complaint with a supervisory authority

To exercise your rights, please contact us at [support@ideaelan.com].

---

10. International Data Transfers

If data is transferred outside your country or region, we ensure appropriate safeguards are in place, including standard contractual clauses or data processing agreements aligned with ISO 27001 requirements.

---

11. Cookies policy

We use cookies to enhance user experience. You may manage cookie preferences through browser settings.

---

12. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

---

13. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be communicated via our website or application. Continued use of our services after changes implies acceptance.

---

14. Contact Us

If you have any questions about this Privacy Policy or our data handling practices,
Contact Us:
Idea Elan, LLC
Email: support@ideaelan.com
Website: https://www.ideaelan.com