Data Protection and Privacy Policy

Koodoo (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal data and your rights in relation to that data.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us at [email protected].

Contents

• Who We Are
• Information We Collect About You
• Legal Basis for Processing Personal Data
• How We Use Your Information
• Cookies and Other Technologies
• Communications and Marketing
• Data Transfers and Storage
• Data Security
• Data Retention
• Sharing Your Data
• Your Rights
• How to Exercise Your Rights
• Changes to This Policy
  
  

Who We Are

Koodoo is a strategic marketing agency specializing in the healthcare sector. We provide communication, branding, and marketing solutions for healthcare organizations. This Privacy Policy applies to Koodoo and its affiliated entities.

Information We Collect About You

We collect and process personal data relevant to our business relationships. The type of personal data we collect depends on our relationship with you and may include:

Personal Information:

• Name, job title, and employer details
• Contact details (email, phone number, postal address)
• Communication preferences
  
  

Business Information:

• Transaction details, including invoices and payments
• Business-related interactions, such as event participation
  
  

Technical Data:

• IP address, browser type, and device information
• Website interaction data, including cookies (see Cookies and Other Technologies)

We may collect this data:

• Directly from you (e.g., through email, phone, or website interactions)
• From your employer (if relevant to our business relationship)
• From third-party service providers or publicly available sources
  
  

Legal Basis for Processing Personal Data

We process your personal data based on one or more of the following legal grounds:

• Your consent (e.g., when you opt in to receive marketing communications)
• Performance of a contract (e.g., when we provide services to you or your company)
• Legal obligations (e.g., compliance with tax or regulatory requirements)
• Legitimate interests (e.g., to improve our services, protect our business, or communicate with clients)
  
  

How We Use Your Information

We process personal data to:

• Provide and manage our services
• Maintain business relationships
• Respond to inquiries and requests
• Conduct marketing and event communications
• Improve our website and services
• Fulfill legal and regulatory obligations
  
  

Cookies and Other Technologies

We use cookies and similar technologies to enhance user experience and analyze website traffic. For details on how we use cookies and how you can manage your preferences, please refer to our Cookies Policy.

Communications and Marketing

We may send you updates and marketing communications about our services, industry trends, and events. You can opt out at any time by clicking “unsubscribe” in our emails or contacting us at [email protected].

Data Transfers and Storage

Your data may be stored and processed in locations outside your country of residence. If we transfer your data internationally, we will ensure appropriate safeguards are in place.

Data Security

We implement appropriate security measures to protect your personal data from unauthorized access, alteration, or loss. Access to personal data is restricted to those with a business need and subject to confidentiality obligations.

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including legal and regulatory requirements. When no longer required, data is securely deleted or anonymized.

Sharing Your Data

We may share personal data with:

• Service providers and business partners who assist us in delivering our services
• Regulatory authorities if required by law
• Third parties in the event of a business reorganization, sale, or merger

We do not sell or share your data for third-party marketing.

Your Rights

Under applicable data protection laws, you have rights regarding your personal data, including:

• Access: Request a copy of your personal data
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your data, subject to legal retention obligations
• Restriction: Request limitation on how we process your data
• Objection: Object to data processing, including direct marketing
• Data Portability: Request a copy of your data in a structured format
  
  

How to Exercise Your Rights

To exercise your rights, contact us at [email protected]. We may request verification of your identity before processing your request.

We aim to respond within one calendar month. If your request is complex, we will inform you of any delay.

If you believe your data protection rights have been violated, you have the right to file a complaint with a data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We encourage you to review it periodically to stay informed.

Last updated: March 2025