Customer Data Protection Policy

1. Purpose and Scope

TRANSTECH MARKETING NETWORK LLC is committed to responsible handling of information entrusted to us by clients and their customers. This policy sets requirements for collection, access, use, sharing and retention during marketing, technology and related services.

It complements the Privacy Policy. Service-specific roles, processing instructions and security requirements should be documented in the relevant agreement. It is not a claim of certification or verified compliance with every legal regime.

2. Roles and Authorized Purposes

An engagement should identify who determines the purposes of processing and who acts on instructions. Customer information must be used only for authorized service purposes, contractual obligations or applicable legal requirements.

Data provided for one client must not be reused for another client’s campaign without lawful authorization. Unauthorized access, use or disclosure is prohibited.

3. Minimization and Accuracy

• Collect only information reasonably needed for the defined service.
• Keep records relevant and correct identified inaccuracies.
• Avoid sensitive information unless necessary and suitable arrangements are agreed.
• Use sample or de-identified information for development and demonstrations where practical.

4. Access and Confidentiality

Access should be limited to authorized personnel and providers with a service-related need, and reviewed when roles change or an engagement ends.

• Use individual accounts rather than shared credentials where supported.
• Apply suitable authentication and access restrictions.
• Keep customer records out of public repositories, public links and unauthorized personal accounts.
• Require personnel to follow confidentiality and data-handling requirements.

5. Security Requirements

Administrative, technical and physical safeguards must be proportionate to the information and risks. Requirements include suitable access control, secure transfer and storage, system maintenance, disposal procedures and incident preparation.

Specific controls such as encryption, multi-factor authentication, backups and access logging should be agreed and verified for the systems involved. This general policy does not establish that every control is implemented in every system. No electronic transmission or storage method guarantees absolute security.

6. Marketing and Customer Acquisition

Clients must have the required authority, notices and permissions for customer information they provide. Campaigns must respect applicable communication preferences, opt-outs and platform rules.

Audience uploads, tracking and CRM integrations should be reviewed before activation. Customer lists must not be used for unauthorized campaigns. Rules for targeted advertising or legally defined data sharing may apply separately from the prohibition on selling personal information.

7. Providers, AI Tools and International Access

Only authorized providers should receive customer information, limited to what is needed for their task. Appropriate confidentiality, security and processing terms must be considered.

Customer information must not be submitted to public AI tools or used for model training without appropriate authorization and safeguards. International access, storage and transfers must be assessed against contractual requirements and applicable law before they occur.

8. Retention, Return and Deletion

Keep information only as long as needed for the service, legitimate recordkeeping or legal requirements. Retention periods and return or deletion procedures should be agreed for each engagement.

When services end, review access and arrange return or deletion as appropriate. Legal retention and backup limitations may apply; retained information remains subject to confidentiality and access restrictions.

9. Security Incidents

Report suspected unauthorized access, loss or disclosure promptly to info@transtechmarketing.com. Identify the affected service and describe the issue without including compromised passwords or sensitive records in the first message.

We will assess reported incidents, take appropriate containment and investigation steps and coordinate with affected clients. Notifications will follow applicable law and contractual requirements; no single deadline is represented as applying to every incident.

10. Requests and Cooperation

Access, correction and deletion requests can be sent to info@transtechmarketing.com. Identity and authority may require verification. When acting for a client, we may refer the request to that client or assist under the agreed instructions.

Clients should keep instructions and permissions current, report suspected issues promptly and cooperate with reasonable protective measures.

11. Policy Review

This policy may be updated as services, risks and requirements change. Revisions will be published here. Changes to existing contractual arrangements are governed by the agreement and applicable law.

Contact Us

For questions, concerns or requests regarding this policy, contact TRANSTECH MARKETING NETWORK LLC at info@transtechmarketing.com. Our registered and corporate office addresses appear below.