Privacy Policy
This Privacy Policy explains how ISAM COMMERCE LLC ("we", "us") collects and uses personal data when you visit isamcommerce.com, contact us or use our business services. We are the data controller for this processing.
Our online stores: each consumer store operated by ISAM COMMERCE LLC has its own privacy notice covering customer and order data. That notice, not this policy, applies to purchases made on the store.
Controller: ISAM COMMERCE LLC, 30 N. Gould St. #60150, Sheridan, Wyoming 82801, United States · [email protected]
1. Data we collect
| When | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You visit the website | IP address, browser type, pages viewed, referring site, cookie identifiers | Running and securing the site; aggregated usage statistics (only with consent for analytics cookies) | Legitimate interest (Art. 6(1)(f)); consent for analytics (Art. 6(1)(a)) |
| You contact us | Name, company, email, phone, message content | Answering your enquiry and preparing proposals | Pre-contractual steps (Art. 6(1)(b)); legitimate interest |
| You become a client | Business contact details, billing details, access credentials to platforms you grant us, project communications | Performing the contract, invoicing, support | Contract (Art. 6(1)(b)); legal obligation for accounting records (Art. 6(1)(c)) |
2. Payment data
Client invoices are settled through our payment service provider (Stripe) or by bank transfer. Card details are entered on the provider's secure form and never stored on our systems.
3. Who receives your data
We share personal data only with service providers that help us operate: web hosting, email, payment processing, accounting, and (with your consent) analytics. Providers act on our instructions under data-processing agreements. We do not sell personal data. We may disclose data where required by law.
4. International transfers
ISAM COMMERCE LLC is established in the United States. Data of EU residents may therefore be transferred outside the European Economic Area. Where we transfer such data we rely on the EU–US Data Privacy Framework (for certified providers) or the European Commission's Standard Contractual Clauses, together with additional safeguards.
5. Retention
- Enquiries: 12 months after the last contact.
- Client and invoicing records: 7 years, as required for accounting and tax purposes.
- Website logs: 90 days.
- Analytics data (if consented): 14 months.
6. Your rights
Under the GDPR and similar laws you may request access to, correction or deletion of your data, restriction of or objection to processing, and data portability, and you may withdraw consent at any time. To exercise these rights email [email protected]. We respond within one month. You may also lodge a complaint with your local supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens; in Belgium: Gegevensbeschermingsautoriteit / Autorité de protection des données).
If you are a California resident, you have the rights provided by the CCPA/CPRA, including the right to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising.
7. Cookies
See our Cookie Policy for details of the cookies we use and how to manage them.
8. Security
We use TLS encryption, access controls and reputable hosting and payment providers to protect personal data. No method of transmission is completely secure; we will notify you and the relevant authority of a data breach where legally required.
9. Children
Our website and services are not directed at children under 16, and we do not knowingly collect their data.
10. Changes
We may update this policy; the effective date at the top shows the latest version.