US Privacy Notice (CCPA/CPRA)

Version 2026-08 · Last updated: 5 August 2026
Responsible business. DEFFINTECH PCC — Anoixeos 23 & Grigoriou E’, 13451 Kamatero, Attica, Greece · security@deffintech.com. This notice supplements our Privacy Policy for residents of US states with comprehensive privacy laws, including California (CCPA as amended by the CPRA).

1. Scope

This notice applies to personal information we handle about residents of applicable US states. Where terms such as “personal information”, “sell” and “share” are defined by those laws, they carry their statutory meaning here.

2. Categories of personal information we collect

Statutory categoryExamples we may collect
IdentifiersName, email address, account identifiers, IP address
Customer recordsAccount and organization details you provide
Commercial informationRecords of purchases (e.g. paid assessments), processed via our payment provider
Internet/network activityPages viewed, access timestamps, device/browser data (server logs)
Other information you submitQuestionnaire and coaching content you choose to store

We collect this information from you directly, automatically as you use the Platform, and from our payment processor in relation to transactions.

3. Purposes

We use personal information to provide and secure the Platform, deliver the coaching and evaluation services you request, process payments, communicate with you, and meet legal obligations — as described in our Privacy Policy.

4. Sale and sharing of personal information

We do not sell your personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA. We also do not use or disclose sensitive personal information for purposes that would require a right to limit under the CPRA.

5. Your US privacy rights

Subject to the applicable law and verification, you may have the right to:

  • Know / access the categories and specific pieces of personal information we hold about you.
  • Delete personal information we have collected, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information (note: we do not sell or share).
  • Non-discrimination — we will not treat you differently for exercising your rights.

6. How to exercise your rights

Submit a request by emailing security@deffintech.com. To protect your data, we will verify your request using information associated with your account. You may use an authorised agent to submit a request on your behalf, in which case we may require proof of authorisation. We will respond within the timeframes required by applicable law.

7. Contact

DEFFINTECH PCC — Anoixeos 23 & Grigoriou E’, 13451 Kamatero, Attica, Greece · security@deffintech.com.

This notice is provided for transparency and general information and is not a substitute for individual legal advice.