Policy Statement

Kin Analytics Inc. is committed to protecting the privacy of personal information and complying with data protection legislation. We incorporate data protection principles into the way we collect and store personal data. We ensure that the data we collect is processed lawfully, fairly, and transparently, collected for specific, explicit, legitimate, and limited purposes, and retained only for as long as strictly necessary.

Data Protection Officer

‍

United States
Kin Analytics Inc
251 Little Falls Drive
Wilmington, DE 19808

‍

Mexico
Kin Analytics

Avenida Paseo de la Reforma No. 369,

Torre B Piso 5 Interior 503, Colonia Cuauhtémoc, Alcaldía Cuauhtémoc,

C.P. 06500, Ciudad de México, México.

‍

If you have any questions, concerns, or would like to exercise your rights regarding the processing of your personal data in accordance with applicable data protection standards, you may contact our Data Protection Officer at: data.protection@kinanalytics.com

‍

Compliance and Security

Kin Analytics Inc. maintains a strong commitment to data protection and information privacy, rigorously complying with applicable laws and regulations, as well as specific contractual clauses. The company holds SOC 2 and GDPR certifications, ensuring the highest level of compliance regarding information security and privacy.

‍

To uphold this standard, Kin Analytics enforces strict internal policies regulating the data lifecycle, carries out a periodic audit program designed to assess the effectiveness of security controls, verify compliance with policies and regulations, identify emerging risks, and detect opportunities for continuous improvement. This comprehensive information security approach strengthens the trust of clients, partners, and stakeholders in the responsible management of their data.

‍

Data Retention

‍

Data retention is based on valid grounds, and clients may request the deletion of their information. Requests must be authenticated and assessed for legitimacy. Deletion may be denied if it disrupts services. Anonymization of personal data may be considered before deletion, except when prohibited.

‍

  • All data is stored in our systems only when there is a valid and ongoing reason to retain and process it.

  • Clients and users have the right to request the deletion of their information by submitting a request.

  • This request must be submitted by the client or user to any manager/director of Kin Analytics Inc.

  • If a deletion request is received, its authenticity must be verified, and its legitimacy determined. However, a deletion request from a client under an active contract with Kin Analytics Inc. is likely to be invalid, as the deletion of such data may result in service interruption.

  • For the deletion of personal data, anonymization should be considered prior to deletion, provided this does not conflict with local laws or client contracts.

  • If you have any questions regarding a data deletion request or any other inquiry related to this policy, please contact the Information Security Officer before taking action.

‍

  • Previous versions of the company’s policy documentation are retained for at least six years.

Data Subject Rights

To adequately protect the personal data collected and processed by Kin Analytics Inc., it is important to understand the rights you are entitled to. Below are the data subject rights we respect:

‍

  • Right to Information: The right to know how personal data is used, in a clear and transparent manner.

  • Right of Access: The right to know and access the personal data held about an individual.

  • Right to Data Portability: The right to receive and transfer data in a common, machine-readable electronic format.

  • Right to be Forgotten: The right to have personal data deleted.

  • Right to Rectification: The right to have data corrected when inaccurate or incomplete.

  • Right to Object: The right to lodge a complaint and object to processing.

  • Right to Restrict Processing: The right to limit the scope of personal data processing as determined by the individual.

  • Rights related to Automated Decision-Making and Profiling: The right not to be subject to decisions made without human intervention.

  • Right to Non-Discrimination: The right not to be discriminated against for exercising one’s rights.

What Data Protection Rights Do I Have?

In compliance with the General Data Protection Regulation (GDPR) and under our SOC 2 control framework, every individual has the right to access, rectify, erase, restrict processing, object to processing, and request the portability of their personal data, in accordance with Articles 15, 16, 17, 18, 21, and 20 of the GDPR, respectively.

‍

These rights are exercised in line with applicable data protection laws and through our documented and audited procedures. Data subjects may also file complaints with the competent supervisory authorities (Art. 77 GDPR). Our SOC 2 internal controls ensure the effective implementation of these processes, guaranteeing comprehensive protection and secure management of personal information across all jurisdictions where we operate.

‍

Changes to this Privacy Policy

We may update this Privacy Policy as our Services evolve continuously. Please make sure to review this Privacy Policy on our website.us