RIGCOMMEND LLC PRIVACY POLICY

This Privacy Policy explains how RIGCOMMEND LLC (“RIGCOMMEND,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information in connection with the RIGCOMMEND LLC website, platform, tools, features, content, and related services made available through https://pcadvisor.RIGCOMMEND.io and any related interfaces or functionality that we make available from time to time.

RIGCOMMEND LLC is a technology recommendation and comparison platform designed to assist users in evaluating PCs, laptops, hardware components, peripherals, and related technology products based on factors such as budget, preferences, intended use, compatibility considerations, and other relevant criteria.

For purposes of this Privacy Policy, “Platform,” “Services,” “Account,” and “Recommendations” have the meanings given to them in our Terms of Service, unless this Privacy Policy states otherwise.

Where applicable, RIGCOMMEND acts as the data controller for the personal data processed under this Privacy Policy because we determine the purposes and means of such processing.

Please read this Privacy Policy carefully before using the Services. By accessing or using the Services, creating an Account, submitting a contact form, submitting a hardware configuration request, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Services.

1. Information We Collect

We collect only the categories of personal data that are reasonably necessary to operate the Platform, provide the Services, generate or support Recommendations, manage user Accounts, communicate with users, maintain security, and comply with applicable legal obligations.

i. Account and Contact Information

When you create an Account, log in to the Platform, submit a contact form, or otherwise communicate with us, we may collect personal data that identifies you or relates to an identifiable person, including:

first name; last name; email address; address; zip code; country; and other information you choose to provide when contacting us or submitting a request through the Platform.

This information is used to create and manage your Account, authenticate access, respond to your inquiries, communicate with you, and provide the Services.

ii. Configuration and Recommendation Information

When you use the Services to request technology guidance, submit a hardware configuration, or receive Recommendations, we may collect information you provide about your budget, intended use, preferences, hardware requirements, device needs, compatibility considerations, and other relevant information submitted through the Platform.

This information is used to provide Recommendations and improve the quality, relevance, and functionality of the Services.

iii. IP Address and Approximate Geolocation Data

When you first visit the Platform as a guest, we may determine your approximate country of origin using your IP address through the third-party service ip-api.com. This processing is used to display appropriate currency, country-specific content, or other localized elements of the Platform.

We do not use this process to collect precise geolocation data, and we do not store precise geolocation data as part of your user profile.

iv. Cookie Preference Data

We store your cookie consent choices in your browser using consent management cookies. These cookies record whether you have accepted or declined certain optional cookies and the timestamp of your consent decision.

Additional information about cookies is set out in Section 14.

v. Payment Information

RIGCOMMEND may integrate third-party payment processing services, including Greenpayment. Payment information is processed directly by the applicable payment processor.

RIGCOMMEND does not store full payment card data, tokenized payment identifiers, or billing financial information on its own servers, unless expressly stated otherwise at the time of collection.

vi. Sensitive Personal Information

We do not intentionally collect sensitive personal information, including information revealing racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, precise geolocation, or other specially protected categories of personal data.

You must not submit sensitive personal information through the Platform unless we expressly request it for a specific lawful purpose.

2. How We Collect Information

We collect information in the following ways.

i. Directly From You

We collect personal data directly from you when you create an Account, log in to the Platform, submit a contact form, submit a hardware configuration request, provide technology preferences, request Recommendations, communicate with us, or otherwise provide information through the Services.

ii. Automatically

We may automatically collect limited technical information when you access or use the Platform, including IP address, approximate country-level location, access logs, session-related security data, and cookie preference data.

At this time, we do not deploy third-party analytics scripts, tracking pixels, advertising SDKs, or similar behavioral tracking technologies on the Platform.

iii. From Service Providers

We may receive limited information from service providers that help us operate the Platform, process payments, localize content, host infrastructure, maintain databases, or provide security and operational support.

For example, ip-api.com may process your IP address to return a country code for localization purposes.

3. How We Use Information

We use personal data only for legitimate, necessary, and proportionate purposes connected to the Services.

i. To Provide the Services

We use Account information, contact information, and configuration-related information to operate the Platform, provide access to Account features, respond to user requests, process submitted preferences, and provide Recommendations.

ii. To Communicate With You

We use your contact information to respond to inquiries, provide service-related communications, send Account-related notices, deliver information connected to your requests, and communicate with you about the Services.

iii. To Improve the Platform and Services

We may use aggregated, anonymized, or de-identified information derived from user interactions with the Platform, including configuration submissions and contact form patterns, to evaluate Platform performance, improve our advisory methodology, develop new features, and enhance the relevance of Recommendations.

We do not use this type of analysis to examine individual personal data for behavioral profiling.

iv. To Maintain Security and Prevent Abuse

We use Account data, access logs, and technical information to protect the Platform, detect suspicious or anomalous activity, prevent fraud, investigate potential misuse, enforce our Terms of Service, and protect the rights, property, and safety of RIGCOMMEND, our users, and third parties.

v. To Process Payments

Where payment functionality is made available, payment-related data is processed by the relevant payment processor for transaction processing, fraud prevention, and payment compliance purposes. RIGCOMMEND does not independently process or store full payment card data.

vi. To Comply With Legal Obligations

We may process and retain personal data where required to comply with applicable laws, regulations, court orders, subpoenas, governmental requests, regulatory obligations, tax obligations, accounting requirements, or other valid legal processes.

4. Legal Basis for Processing

For users located in the European Union, European Economic Area, United Kingdom, or any jurisdiction requiring identification of a legal basis, we rely on the following legal bases.

vii. Performance of a Contract

We process personal data where necessary to provide the Services under our Terms of Service, including Account creation, authentication, Platform access, service delivery, communication related to user requests, and generation or support of Recommendations.

viii. Legitimate Interests

We process certain personal data based on our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests include operating and improving the Platform, localizing content, maintaining security, preventing fraud and abuse, protecting legal rights, and improving the quality of the Services.

ix. Consent

We rely on consent where required, including for optional cookies, marketing communications, or any future analytics or advertising technologies that require user consent.

You may withdraw consent at any time where processing is based on consent.

x. Legal Obligations

We process personal data where necessary to comply with applicable legal obligations or valid legal processes.

5. Sharing of Information

We do not sell personal data to third parties, disclose personal data to data brokers, or share personal data for cross-context behavioral advertising.

We may share personal data only in the limited circumstances described below.

i. Service Providers and Subprocessors

We share personal data with service providers and subprocessors that help us operate the Platform, provide infrastructure, process payments, manage databases, support localization, and maintain security.

These providers may access personal data only as necessary to perform services on our behalf and are expected to process such data in accordance with applicable contractual, technical, and legal safeguards.

Our current subprocessors are listed in Section 16.

ii. Payment Processors

RIGCOMMEND may use Greenpayment as a payment processing provider. Greenpayment processes payment information directly and independently under its own privacy policy, security standards, and payment processing terms.

RIGCOMMEND does not store full payment card data, tokenized payment identifiers, or billing financial information on its own servers.

iii. Third-Party Product Websites and Affiliate Links

The Services may include links to third-party websites, retailers, manufacturers, marketplaces, or product pages, including Affiliate Links. If you click on an Affiliate Link or visit a third-party website, that third party may collect information from you in accordance with its own privacy policy and terms.

RIGCOMMEND does not control third-party websites, third-party tracking technologies, third-party checkout flows, or third-party privacy practices. You should review the applicable third-party policies before submitting information or making a purchase through any third-party website.

Where applicable, RIGCOMMEND may receive referral, commission, or attribution information from third parties in connection with Affiliate Links, but we do not receive or store your full payment card information from those third parties.

iv. Legal Requirements

We may disclose personal data where required by applicable law, court order, subpoena, governmental investigation, regulatory request, or other valid legal process.

Where legally permitted and reasonably practicable, we will seek to disclose only the minimum personal data necessary to satisfy the relevant legal requirement.

v. Protection of Rights and Safety

We may disclose personal data where reasonably necessary to protect the rights, property, security, or safety of RIGCOMMEND, our users, third parties, or the public, including to investigate suspected fraud, abuse, security incidents, or violations of our Terms of Service.

vi. Business Transfers

If RIGCOMMEND undergoes a merger, acquisition, restructuring, financing, sale of assets, change of control, or similar corporate transaction, personal data may be transferred as part of that transaction.

In such circumstances, we will take reasonable steps to ensure that personal data remains protected in accordance with this Privacy Policy or a successor policy providing materially comparable protection.

6. International Data Transfers

Your personal data may be stored, processed, or accessed in the United States, the European Economic Area, or other jurisdictions where RIGCOMMEND, its service providers, or subprocessors operate.

Our database is currently hosted in the European Economic Area. When you visit the Platform, your IP address may be temporarily transmitted to ip-api.com for country-level localization purposes. That service may process data outside your country of residence or outside the European Economic Area.

Where personal data is transferred from the European Economic Area, United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards where required, which may include standard contractual clauses, adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, or other lawful transfer mechanisms.

7. Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, misuse, disclosure, or destruction.

Our security measures may include HTTPS/TLS encryption in transit, encryption at rest where supported by infrastructure providers, role-based access controls, administrative access restrictions, secure authentication, API access controls, access logging, monitoring, infrastructure-level protections, database access restrictions, patch management, backup controls, and breach detection mechanisms.

Access to personal data is limited to personnel and service providers who reasonably require access for legitimate business, operational, technical, security, or legal purposes.

No internet transmission, cloud environment, or data storage system can be guaranteed to be completely secure. If you believe that your Account, interaction with the Platform, or personal data may no longer be secure, please contact us immediately using the contact details in Section 18.

Where required by applicable law, we will notify the competent supervisory authority of a personal data breach within the legally required timeframe. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay, as required by applicable law.

8. Data Retention

We retain personal data only for as long as reasonably necessary to provide the Services, maintain your Account, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our Terms of Service, maintain security, and protect our legal rights.

We retain Account information for 1 (one) year.

We may retain certain information for longer where required by law, necessary for accounting or tax purposes, needed to resolve disputes, or required for the establishment, exercise, or defense of legal claims.

9. Account Deletion

You may request deletion of your Account and associated personal data by contacting us as described in Section 13.

Upon receipt of a verified deletion request, we will delete, de-identify, or anonymize personal data as promptly as reasonably and technically feasible, unless retention is required or permitted by applicable law, necessary for security purposes, or necessary for the establishment, exercise, or defense of legal claims.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights in relation to your personal data. These may include the right to access, correct, update, delete, restrict, object to certain processing, withdraw consent, request portability, or lodge a complaint with a supervisory authority.

We will respond to privacy rights requests in accordance with applicable law and Section 13.

11. European Privacy Rights

If you are located in the European Union, European Economic Area, United Kingdom, or another jurisdiction with similar privacy rights, you may have the following rights:

Access. You may request confirmation of whether we process your personal data and request a copy of that data.

Rectification. You may request correction of inaccurate or incomplete personal data.

Erasure. You may request deletion of personal data in certain circumstances.

Restriction. You may request restriction of processing in certain circumstances.

Portability. You may request that we provide certain personal data in a structured, commonly used, and machine-readable format.

Objection. You may object to processing based on legitimate interests or to processing for direct marketing purposes.

Withdrawal of Consent. Where processing is based on consent, you may withdraw that consent at any time.

Complaint. You may lodge a complaint with a competent data protection supervisory authority if you believe your rights have been violated.

12. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may provide you with certain rights regarding personal information.

Subject to applicable limitations, you may have the right to know what categories of personal information we collect, the purposes for which we use it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we have collected about you.

You may also have the right to request access to personal information, request deletion of personal information, request correction of inaccurate personal information, opt out of the sale or sharing of personal information, limit the use of sensitive personal information, and not be discriminated against for exercising your privacy rights.

We do not sell personal information as that term is defined under the CCPA/CPRA. We do not knowingly share personal information for cross-context behavioral advertising. We do not intentionally collect sensitive personal information.

13. How to Exercise Your Rights

To exercise any privacy rights available to you, please submit your request through our contact form at:

https://www.RIGCOMMEND.com/contact-us

Your request should include your full name, the email address associated with your Account, and a clear description of the right you wish to exercise.

We may need to verify your identity before processing your request. Verification will typically be carried out by confirming information associated with your Account or requesting additional information reasonably necessary to verify the request.

For GDPR-related requests, we will respond without undue delay and, in any event, within thirty (30) days of receipt. Where requests are complex or numerous, this period may be extended by up to two additional months, and we will notify you of the extension.

For CCPA/CPRA-related requests, we will respond within forty-five (45) days. If additional time is required, we will notify you of the extension and the reason for it within the initial forty-five (45) day period.

14. Cookies and Tracking Technologies

A cookie is a small text file placed on your device by a website to store information about preferences, settings, or interactions.

We use cookies in a limited and transparent manner.

i. Cookies We Use

We currently use the following consent management cookies:

gdpr_analytics_consent: records whether you accepted or declined analytics cookies.

gdpr_marketing_consent: records whether you accepted or declined marketing cookies.

gdpr_consent_timestamp: records the date and time at which you gave or declined consent.

These cookies are used to record and honor your privacy preferences. They are not used for behavioral profiling, cross-context advertising, or sale of personal information.

ii. Cookie Lifespan

The consent cookies described above have a maximum lifespan of twelve (12) months from the date on which you interact with the cookie banner.

Upon expiration, the cookies are automatically deleted from your browser, and the consent banner may reappear on your next visit to the Platform.

iii. Managing Cookie Preferences

You may update or withdraw your cookie consent by clearing your browser cookies and revisiting the Platform, at which point the cookie banner may reappear.

You may also configure your browser settings to refuse or delete cookies. Some Platform functionality may be affected if cookies are disabled.

iv. Third-Party Analytics and Marketing Technologies

At this time, we have not integrated third-party analytics, advertising, or tracking technologies, such as Google Analytics, Meta Pixel, Google Tag Manager, or similar tools, into the Platform.

If we implement such technologies in the future, we will update this Privacy Policy and, where required, obtain your consent before placing non-essential cookies or similar technologies.

15. Protection of Minors

The Services are not directed to children or minors. Under our Terms of Service, users must be at least eighteen (18) years old, or the age of legal majority in their jurisdiction, whichever is higher, to use the Services.

We do not knowingly collect personal data from children or minors. If we become aware that we have collected personal data from a child or minor without the required legal consent, we will take reasonable steps to delete that information.

If you are a parent or guardian and believe that a child or minor has provided personal data to us through the Platform, please contact us using the details in Section 18.

16. Subprocessors

We currently use the following subprocessors or service providers in connection with the Platform and Services:

MongoDB; Greenpayment; Hetzner; and ip-api.com.

We may update this list from time to time as our operations, infrastructure, payment processing, localization, or service requirements evolve.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform functionality, Services, legal obligations, security practices, or business operations.

The “Last Updated” date at the top of this Privacy Policy will indicate the most recent revision.

Where required by applicable law, we will provide additional notice of material changes. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, requests, or feedback about this Privacy Policy or our privacy practices, you may contact us through the Platform contact form or by using the information below.

Contact form: https://www.RIGCOMMEND.com/contact-us

Address:

Email: office@RIGCOMMEND.com