Privacy Policy

1. Scope

This policy applies to all data subjects whose personal data we collect, in compliance with GDPR or under the jurisdiction of our clients’ countries.

2. Responsibilities

2.1 The Data Protection Officer is responsible for ensuring that this notice is made available to data subjects before Nextowave, LLC collects or processes their personal data.

2.2 All employees or staff of Nextowave, LLC who interact with data subjects are responsible for ensuring this notice is brought to their attention and that their consent for data processing is obtained.

3. Privacy Notice

3.1 Who we are

Nextowave, LLC is an email-marketing service provider. We assist in planning, advising on, and managing email marketing strategies, including the handling of mailing lists, on behalf of merchants and service providers.

Our Data Protection Officer can be contacted at the following address:
Nextowave, LLC
131 Continental Dr, Suite 305
Newark, DE 19713
USA

3.2 Personal Data We Collect

• Email addresses
• IP address at the time of subscription
• Other data collected via double opt-in processes

3.3 Purpose and Use of Personal Data

We use collected personal data primarily to carry out email marketing campaigns for our partners. All data is stored and processed in our data center; we do not share personal data with third parties for unrelated purposes.

3.4 Consent

By accepting this privacy policy, you grant us explicit permission to process your personal data for the specified purposes. Consent is required for Nextowave, LLC to process your data, and must be given explicitly. If sensitive personal data is requested, we will explain the reasons and how it will be used. You may withdraw or modify your consent at any time by contacting us.

3.5 Disclosure

Nextowave, LLC does not transfer your personal data to any third party, except where necessary to fulfil contracted services—and such third parties are required to safeguard your data and only use it for those contracted purposes.

3.6 Data Retention

We process personal data for up to 36 months, and we retain the data for a maximum of 48 months, unless otherwise required by law.

4. Your Rights as a Data Subject

• Right of access: you may request a copy of the personal data we hold about you.
• Right of rectification: you may correct data that is inaccurate or incomplete.
• Right to erasure (right to be forgotten): in certain cases, you may request deletion of your data.
• Right to restrict processing: under certain conditions, you may ask to limit how we use your data.
• Right to data portability: you may request your data be transferred to another entity.
• Right to object: you may object to certain processing activities, including direct marketing.
• Right not to be subject to automated decisions: including profiling, where those decisions produce legal effects on you.
• Right to judicial review: if we refuse your request concerning these rights, we will provide our reasoning, and you may lodge a complaint.

If a third party is involved in processing, your requests concerning your rights will be forwarded appropriately.

5. Complaints

If you wish to raise a complaint about how Nextowave, LLC handles your personal data, or about how your request was handled, you may lodge a complaint with the relevant supervisory authority and with our Data Protection Officer.

6. Online Privacy Statement & Processing Details

Under GDPR, “personal data” means any information relating to an identified or identifiable natural person. We collect and use your personal data for subscription, unsubscription, and email tracking (such as opens and clicks). In carrying out these services, we are committed to collecting only the data necessary, protecting your privacy, and maintaining accurate and up-to-date records.

We may engage third-party service providers to host or maintain our database; such parties are obligated to protect your data and to destroy it when no longer needed for fulfillment of the service. If sensitive data is shared, we obtain your consent unless legally required otherwise.

You may request to know:

• the identity and contact of the entity responsible for processing your data,
• contact details of the Data Protection Officer,
• the processing purposes and legal basis,
• the categories of personal data processed,
• the recipients or categories of recipients to whom the data is disclosed,
• whether data is transferred internationally and safeguards used,
• the retention period,
• your rights (access, correction, erasure, restriction, objection, portability),
• whether you are obliged to provide data and consequences of not doing so,
• the source of data if not collected directly from you,
• information about automated decision-making, including profiling (logic, significance, consequences).

To request such information, we may ask for proof of identity (e.g., ID card, passport).