GDPR & CCPA Compliance

/

Your Data. Your Control.

We fully comply with the EU’s General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). Here’s how we safeguard your rights. 

Last updated: 20th July 2025 

1. Your Data Rights 

We believe that data privacy is a fundamental right. As a data subject, you are entitled to: 

Under GDPR: 

  • Right to Access – Request a copy of the personal data we store about you. 
  • Right to Rectification – Ask us to correct inaccurate or incomplete data. 
  • Right to Erasure – Request permanent deletion of your data (“Right to be Forgotten”). 
  • Right to Restrict Processing – Limit how we use your personal data under specific conditions. 
  • Right to Data Portability – Export your data in a machine-readable format. 
  • Right to Object – Opt out of marketing communications or automated profiling. 

Under CCPA (for California Residents): 

  • Right to Know – Learn what categories of personal data we collect and why. 
  • Right to Delete – Request removal of personal data we’ve collected. 
  • Right to Opt Out – Say no to the sale or sharing of personal information (Note: We do not sell your data). 
  • Right to Non-Discrimination – We will never deny services or charge different prices based on your privacy choices. 

To exercise your rights, please contact: privacy@mkng360.com 

2. How We Process and Store Your Data 

  • All customer data is securely stored on Amazon Web Services (AWS) servers in GDPR-compliant regions. 
  • We collect and process only what is necessary to deliver our services (e.g., email campaigns, contact management, analytics). 
  • All access to your data is logged, monitored, and limited to authorized personnel only. 
  • Data retention is defined by your subscription status or as required by law. 

3. Our Role: Controller vs Processor 

We operate in two capacities: 

As Data Controller: 

  • For platform users who sign up directly (e.g., CRM admins, team members). 
  • We determine the purpose and method of processing their personal data (login, usage logs, preferences). 

As Data Processor: 

  • For contacts and end users uploaded into your CRM workspace. 
  • We process this data on your behalf and follow your instructions strictly under a Data Processing Agreement (DPA). 

4. Subprocessors & DPA Access 

We engage trusted subprocessors to help us deliver the CRM functionality. All subprocessors are bound by data protection obligations. 

Current Subprocessors Include: 

Service 

Purpose 

Region 

AWS (Amazon Web Services) 

Cloud hosting & storage 

India, EU 

Ideas2Goal Technologies Pvt Ltd  

Email delivery 

US, India, EU, SGP 

Twilio / DIDWW / Skyetel 

SMS delivery 

India, US 

Google Analytics 

Performance & usage analytics 

Global 

Razorpay / Stripe / Paypal 

Payment processing 

India, US 

Need a signed Data Processing Agreement (DPA)? 
Request it via: legal@mkng360.com 

5. Cookie Preferences & Consent 

We honor your preferences through: 

  • A cookie banner (for opt-in/opt-out where legally required) 
  • Fine-grained cookie controls in your browser 
  • Respecting Do Not Track (DNT) browser signals (where applicable) 

See our full Cookie Policy for details. 

Contact Us 

If you have questions about data privacy, compliance, or want to report an issue: 

Ideas2Goal Technologies Pvt Ltd 
3740 E. Larson Lane Gilbert Arizona, US 85295. 

📧 privacy@mkng360.com 
📞 +18586830148