Compliance and Privacy Policy for Pretectum CMDM
1. Introduction
Pretectum CMDM is a SaaS-based Customer Master Data Management (CMDM) platform that centralizes, standardizes, and synchronizes customer data across your organization, providing a Single Customer View (SCV) to enhance decision-making, customer engagement, and operational efficiency. We are committed to maintaining the highest standards of data privacy, security, and regulatory compliance.
2. Data Collection and Use
- Types of Data Collected: Pretectum CMDM manages various forms of customer master data, including zero-party and first-party data that customers have freely and consensually provided. This may include names, contact details, transaction histories, preferences, and other relevant information required for business operations.
- Purpose of Data Collection: Data is collected to unify and curate customer information, enabling personalized experiences, improved customer service, and enhanced business intelligence. All data is processed in accordance with applicable data protection laws and for legitimate business purposes only.
3. Data Security
- Access Controls: Stringent access controls are implemented to ensure only authorized personnel can access sensitive customer data.
- Encryption: All customer data is encrypted both at rest and in transit to protect against unauthorized access and data breaches.
- Continuous Monitoring: The platform employs continuous monitoring to detect and respond to potential security threats or vulnerabilities in real time.
- Change History: Pretectum CMDM maintains a full change history for all customer records, supporting auditability and transparency in data management.
4. Data Privacy
- Consent Management: Pretectum CMDM emphasizes the use of zero-party data, ensuring that all customer data is collected with clear and explicit consent. Consent management features allow customers to control their data preferences at any time.
- Self-Service Data Curation: Customers can update or correct their data through self-service forms, ensuring accuracy and up-to-date information while maintaining privacy.
- Data Minimization: Only data necessary for the stated business purposes is collected and retained, in line with data minimization principles.
5. Data Governance and Compliance
- Regulatory Compliance: Pretectum CMDM is designed to help organizations meet global data protection and privacy regulations and standards, by providing robust data governance, audit trails, and consent management.
- Data Stewardship: The platform supports active data governance, outlining clear policies for data collection, storage, processing, and disposal. This ensures compliance with internal standards and external legal requirements.
- Right to Access and Erasure: Customers have the right to access, correct, or request deletion of their personal data, subject to applicable legal requirements and business needs.
6. Data Sharing and Third Parties
- No Unauthorized Sharing: Customer data is not sold or shared with unauthorized third parties. Any data sharing is strictly limited to trusted service providers under contractual obligations to maintain confidentiality and security.
- Integration with Other Systems: Data integration with third-party systems is performed securely, with customer consent and in accordance with privacy policies and legal requirements.
7. Retention and Disposal
- Data Retention: Customer data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
- Secure Disposal: When data is no longer needed, it is securely deleted or anonymized to prevent unauthorized access or misuse.
8. Contact and Support
For questions regarding this Compliance and Privacy Policy or to exercise your data rights, please contact Pretectum’s Data Protection Officer via the official website.
This policy is subject to regular review and may be updated to reflect changes in regulatory requirements or business practices.
Last updated: January 4, 2024