Privacy Policy
How we protect and handle your personal information
Last updated: September 25, 2025
1. Introduction
At InitiumX, we value and respect your privacy. This Privacy Policy describes how we collect, use, store, and protect personal information you provide when using our software development, mobile applications, digital consulting, and related services.
Data Controller Information:
- Company: InitiumX
- Location: San Pedro Sula, Cortés, Honduras
- Service Areas: United States, Canada, Honduras, Latin America
- Contact Email: contacto@initiumx.com
- Phone: +504 3253-6271
- Data Protection Officer: contacto@initiumx.com
Compliance Notice: We comply with GDPR (European Union), CCPA (California), PIPEDA (Canada), and other applicable privacy regulations based on your location and our business relationship.
2. Information We Collect
Personal Information You Provide
- • Contact Details: Name, email address, phone number, business address
- • Business Information: Company name, job title, industry sector
- • Project Information: Requirements, technical specifications, project scope
- • Communications: Messages, inquiries, feedback, support requests
- • Payment Information: Billing address, payment method details (processed securely)
Automatically Collected Information
- • Technical Data: IP address, browser type, operating system, device information
- • Usage Data: Pages visited, time spent, click patterns, referrer URLs
- • Cookies & Tracking: Session data, preferences, analytics information
- • Server Logs: Access timestamps, requested resources, response codes
- • Location Data: Approximate geographic location based on IP address
Third-Party Information
- • Business References: Information provided by professional references
- • Social Media: Public profile information when you interact with us
- • Partner Networks: Information shared by authorized business partners
- • Marketing Platforms: Interaction data from advertising platforms
3. How We Use Your Information
Primary Purposes
- • Provide software development services
- • Project communication and management
- • Send proposals and quotations
- • Deliver technical support
- • Process payments and invoicing
- • Fulfill contractual obligations
Secondary Purposes
- • Improve our services and user experience
- • Market research and trend analysis
- • Marketing and business communications
- • Legal and regulatory compliance
- • Fraud prevention and security
- • Business development activities
Legal Basis for Processing
- • Consent: When you explicitly agree to processing
- • Contract Performance: To fulfill service agreements
- • Legitimate Interest: For business communications and service improvement
- • Legal Obligation: To comply with applicable regulations
- • Vital Interest: To protect health and safety
- • Public Interest: When required by law
4. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on our website and services. You can manage your cookie preferences at any time.
Essential Cookies
Required for basic website functionality. Cannot be disabled.
Duration: Session only
Analytics Cookies
Help us understand website usage to improve performance.
Duration: Up to 2 years
Marketing Cookies
Used to deliver relevant content and measure campaign effectiveness.
Duration: Up to 1 year
Third-Party Services
- • Google Analytics: Website traffic and user behavior analysis
- • Google Ads: Advertising performance and conversion tracking
- • Facebook Pixel: Social media advertising and retargeting
- • LinkedIn Insight Tag: Professional network advertising
- • Hotjar: User experience analysis (optional)
- • Mailchimp: Email marketing and communication
- • Calendly: Meeting scheduling integration
- • Intercom: Customer support chat (if implemented)
Your Cookie Choices
You can control cookies through:
- • Browser settings to block or delete cookies
- • Our cookie preference center (when available)
- • Opt-out links provided by third-party services
- • Do Not Track browser signals (we respect DNT preferences)
5. How We Share Information
InitiumX does not sell, rent, or trade your personal information to third parties for commercial purposes. We only share information in the following circumstances:
Authorized Sharing
- • Service Providers: Hosting, email, payment processing
- • Subcontractors: Specialized developers (under NDA)
- • Business Partners: With explicit consent only
- • Analytics Services: Google Analytics, marketing tools
- • Professional Services: Legal, accounting, consulting
Required Sharing
- • Legal Requirements: Court orders, subpoenas
- • Rights Protection: Legal defense and enforcement
- • Security: Fraud prevention and investigation
- • Emergency Situations: Protection of persons or property
- • Business Transfers: Mergers, acquisitions, asset sales
International Transfers
Your information may be transferred to and processed in countries other than your own, including:
- • United States: Cloud hosting and analytics services
- • European Union: GDPR-compliant service providers
- • Canada: Payment processing and communication tools
- • Honduras: Primary business operations and development
We ensure all international transfers comply with applicable data protection laws through appropriate safeguards.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
- • Encryption: SSL/TLS for data transmission
- • Secure Storage: Encrypted databases and file systems
- • Access Controls: Multi-factor authentication
- • Regular Backups: Automated data backup systems
- • Network Security: Firewalls and intrusion detection
- • Monitoring: 24/7 security monitoring and alerts
Organizational Measures
- • Staff Training: Regular privacy and security training
- • Internal Policies: Comprehensive security procedures
- • Confidentiality Agreements: NDAs with all personnel
- • Regular Audits: Security assessments and reviews
- • Incident Response: Breach notification procedures
- • Vendor Management: Third-party security requirements
Data Breach Notification
In the event of a security breach that may affect your personal information, we will notify you and relevant authorities within 72 hours of discovery, as required by applicable law. We will provide details about the incident and steps taken to address it.
7. Your Privacy Rights
Depending on your location, you have the following rights regarding your personal information:
🔍 Right of Access
Request information about what personal data we hold about you.
✏️ Right to Rectification
Request correction of inaccurate or incomplete data.
🗑️ Right to Erasure
Request deletion of your personal data ("right to be forgotten").
⏸️ Right to Restriction
Request limitation of processing of your data.
📱 Right to Portability
Request your data in a structured, machine-readable format.
🚫 Right to Object
Object to processing of your data for direct marketing.
🔄 Withdraw Consent
Withdraw your consent for processing at any time.
⚖️ Right to Complain
File a complaint with data protection authorities.
Region-Specific Rights
California (CCPA)
- • Right to know what data is collected
- • Right to delete personal information
- • Right to opt-out of sale (we don't sell data)
- • Right to non-discrimination
Canada (PIPEDA)
- • Right to access personal information
- • Right to correct inaccuracies
- • Right to withdraw consent
- • Right to file complaints
EU (GDPR)
- • All rights listed above apply
- • Data Protection Officer contact
- • Right to lodge complaints with DPA
- • Automated decision-making rights
How to Exercise Your Rights
To exercise any of these rights, please contact us:
- • Email: contacto@initiumx.com
- • Phone: +504 3253-6271
- • Response Time: Within 30 days (or as required by local law)
- • Verification: We may request identity verification for security
8. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes for which it was collected:
Retention Periods
- • Contact Information: 3 years after last contact
- • Active Contracts: Duration + 7 years
- • Financial Records: 7 years (tax requirement)
- • Marketing Data: Until consent is withdrawn
- • Technical Cookies: Session duration
- • Analytics Cookies: Maximum 2 years
Retention Criteria
- • Duration of business relationship
- • Legal and tax obligations
- • Statute of limitations for claims
- • Legitimate business interests
- • User consent and preferences
- • Data minimization principles
Secure Deletion
When retention periods expire, we securely delete your personal information using industry-standard data destruction methods. Anonymized or aggregated data may be retained for statistical purposes with no ability to identify individuals.
9. Children's Privacy
Age Restriction: Our services are directed to businesses and individuals over 18 years of age. We do not knowingly collect personal information from children under 13 (or 16 in the EU) without appropriate parental consent.
If we discover that we have collected personal information from a child without appropriate parental authorization, we will immediately delete such information from our systems.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contacto@initiumx.com.
10. Changes to This Policy
We reserve the right to update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors.
Notification Process
- • Minor Changes: Updated on website with new date
- • Material Changes: Email notification 30 days in advance
- • Legal Changes: Immediate notification and adaptation period
- • Consent Changes: New consent required for expanded processing
We recommend reviewing this policy periodically to stay informed about how we protect your information. Your continued use of our services after policy changes constitutes acceptance of the updated terms.
11. Regulatory Compliance
InitiumX is committed to complying with applicable data protection regulations:
International Standards
- • GDPR: European Union General Data Protection Regulation
- • CCPA: California Consumer Privacy Act
- • PIPEDA: Canada's Personal Information Protection Act
- • ISO 27001: Information security management
Regional Compliance
- • Honduras: Transparency and Information Access Law
- • Latin America: Regional data protection frameworks
- • Industry Standards: Sector-specific privacy requirements
- • Best Practices: International privacy by design principles
Privacy Framework
- • Privacy by Design: Built-in privacy protection
- • Data Minimization: Collect only necessary information
- • Purpose Limitation: Use data only for stated purposes
- • Accountability: Demonstrate compliance through documentation
12. Contact Information
For questions, requests, or to exercise your rights regarding this Privacy Policy:
Data Protection Officer: InitiumX
Email: contacto@initiumx.com
Phone: +504 3253-6271
Business Hours: Mon-Fri 8 AM - 6 PM CST
Mailing Address: San Pedro Sula, Cortés, Honduras
WhatsApp: +504 3253-6271
Response Time: Within 30 days
Languages: English, Spanish
Supervisory Authorities
If you're not satisfied with our response, you may file a complaint with the relevant data protection authority in your jurisdiction:
- • EU: Your local Data Protection Authority
- • California: California Attorney General
- • Canada: Office of the Privacy Commissioner
- • Honduras: Instituto de Acceso a la Información Pública