Privacy Policy

1. Introduction

Shiny Points ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at shiny-points.com and use our virtual meeting services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number)
• Company information and job title
• Account credentials and profile information
• Meeting recordings and chat logs (with your consent)
• Payment information (processed securely by third-party providers)

2.2 Technical Information

We automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Providing and maintaining our virtual meeting services
• Processing payments and managing your account
• Communicating with you about our services
• Improving our platform and user experience
• Ensuring security and preventing fraud
• Complying with legal obligations
• Sending marketing communications (with your consent)

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract: To fulfill our service agreement with you
• Legitimate interests: To improve our services and ensure security
• Consent: For marketing communications and optional features
• Legal obligation: To comply with applicable laws

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Service providers: Third parties who help us operate our business
• Business partners: For joint services (with your consent)
• Legal authorities: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or sale

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• End-to-end encryption for meeting communications
• Secure data storage and transmission
• Regular security assessments and updates
• Access controls and employee training
• Compliance with industry security standards

7. Your Rights

Under GDPR and UK data protection laws, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Objection: Object to certain types of processing
• Withdraw consent: For consent-based processing

To exercise these rights, contact us at [email protected]

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services (in anonymized form)

Meeting recordings are deleted automatically after 30 days unless you choose to save them longer.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the UK/EEA. We ensure adequate protection through:

• European Commission adequacy decisions
• Standard contractual clauses
• Certification schemes and codes of conduct

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through our cookie banner or browser settings. For more information, see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly.