Digital ATM System ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website digitalatmsystem.com (the "Site"), purchase our products, or otherwise interact with us. This policy applies to all users worldwide, including those in the European Union/European Economic Area ("EU/EEA"), the United Kingdom ("UK"), and the State of California, United States.
By using this Site, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the Site.
1. Information We Collect
1.1 Personal Information You Provide Directly
We may collect the following categories of personal information when you voluntarily provide it to us:
- Identity Data: First name, last name, username or similar identifier
- Contact Data: Email address, telephone number, mailing address
- Financial Data: Payment card details, billing address (processed and stored by our third-party payment processors; we do not store full card numbers on our servers)
- Transaction Data: Details of products purchased, purchase dates, amounts paid, refund history
- Profile Data: Account login credentials, preferences, feedback, survey responses
- Communications Data: Contents of emails, chat messages, or support tickets you send us
1.2 Information Collected Automatically
When you visit the Site, we and our third-party service providers may automatically collect:
- Device Data: IP address, browser type and version, operating system, device type, device identifiers, screen resolution, and language preferences
- Usage Data: Pages visited, time spent on pages, click-through data, referring URLs, exit pages, date and time of visits, and navigation paths
- Location Data: Approximate geographic location inferred from your IP address (city/region level; we do not collect precise GPS location)
- Cookie and Tracking Data: Data collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8 below)
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Payment processors (transaction confirmations and fraud detection data)
- Analytics providers (aggregated usage statistics)
- Advertising partners (conversion data, audience demographics)
- Social media platforms (if you interact with our social media pages or use social login)
2. How We Use Your Information
We use the information we collect for the following purposes:
- To fulfill orders and deliver products: Processing payments, providing access to purchased digital products, sending purchase confirmations and receipts
- To provide customer support: Responding to inquiries, resolving disputes, processing refunds
- To communicate with you: Sending transactional emails, service updates, product updates, and (where you have opted in) marketing and promotional communications
- To improve our Site and Services: Analyzing usage patterns, conducting A/B testing, improving user experience, developing new features and products
- To ensure security: Detecting and preventing fraud, unauthorized access, and other security threats; verifying identity when necessary
- To comply with legal obligations: Responding to legal process, enforcing our Terms of Service, complying with applicable laws and regulations
- To administer our business: Maintaining internal records, financial reporting, auditing
- For advertising and marketing: Delivering targeted advertising on third-party platforms, measuring advertising effectiveness, retargeting campaigns (subject to your consent where required by law)
3. Legal Bases for Processing (EU/EEA/UK Users)
If you are located in the EU, EEA, or UK, we process your personal data only where we have a valid legal basis under the General Data Protection Regulation ("GDPR") or UK GDPR:
- Performance of a Contract: Processing necessary to fulfill our contractual obligations to you (e.g., delivering a purchased product, providing account access)
- Consent: Where you have given clear, affirmative consent for us to process your data for a specific purpose (e.g., subscribing to our email marketing list). You may withdraw consent at any time.
- Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, improving our services, direct marketing to existing customers), provided those interests are not overridden by your rights and freedoms
- Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject (e.g., tax reporting, responding to lawful government requests)
4. How We Share Your Information
We may share your personal information with the following categories of recipients:
- Payment Processors: Stripe, PayPal, or other payment processors that handle transaction processing on our behalf. These processors have their own privacy policies governing their use of your financial data.
- Email Service Providers: Third-party platforms we use to send transactional and marketing emails
- Analytics Providers: Services such as Google Analytics, Vercel Analytics, and similar tools that help us understand Site usage
- Advertising Partners: Platforms like Google Ads, Facebook/Meta, and other advertising networks for targeted advertising and conversion tracking
- Hosting and Infrastructure Providers: Cloud hosting, CDN providers, and other infrastructure services
- Professional Advisors: Lawyers, accountants, auditors, and insurers where necessary
- Law Enforcement and Government Authorities: When required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
- Business Transfers: In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your information may be transferred as a business asset
We do NOT sell your personal information to third parties for their own direct marketing purposes. However, some of our advertising activities (such as sharing data with advertising networks for targeted advertising) may constitute a "sale" or "sharing" under the California Consumer Privacy Act (CCPA). See Section 6 below for your California-specific rights.
5. Your Rights Under the GDPR (EU/EEA/UK Users)
If you are located in the EU, EEA, or UK, you have the following rights under the GDPR and/or UK GDPR:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
- Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data or completion of incomplete personal data.
- Right to Erasure / Right to Be Forgotten (Article 17): You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, you withdraw consent, or we have no overriding legitimate interest.
- Right to Restriction of Processing (Article 18): You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
- Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object (Article 21): You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing immediately.
- Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in solely automated decision-making.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
International Data Transfers: Your data may be transferred to and processed in the United States, which may not provide the same level of data protection as your jurisdiction. Where we transfer data outside the EU/EEA/UK, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms. You may request a copy of the safeguards by contacting us.
Data Protection Officer: For GDPR-related inquiries, contact our data protection representative at privacy@digitalatmsystem.com.
6. Your Rights Under the CCPA / CPRA (California Residents)
If you are a California resident, you have specific rights under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"). This section applies solely to California residents and supplements the rest of this Privacy Policy.
6.1 Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA):
- Identifiers: Name, email address, IP address, account name
- Personal Information under Cal. Civ. Code 1798.80(e): Name, address, telephone number, financial information (payment card details processed by third-party payment processors)
- Commercial Information: Products purchased, purchasing history, transaction details
- Internet or Other Electronic Network Activity: Browsing history on our Site, search history on our Site, interactions with our Site and advertisements
- Geolocation Data: Approximate location derived from IP address
- Inferences: Inferences drawn from any of the above to create a profile about consumer preferences
6.2 Your California Privacy Rights
As a California resident, you have the right to:
- Right to Know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting or selling, and the categories of third parties with whom we share it.
- Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.
- Right to Correct: Request correction of inaccurate personal information we hold about you.
- Right to Opt-Out of Sale/Sharing: Direct us to not sell or share your personal information. Note: We do not sell personal information in the traditional sense. However, certain targeted advertising activities may constitute "sharing" under the CPRA.
- Right to Limit Use of Sensitive Personal Information: Direct us to limit the use and disclosure of sensitive personal information to purposes necessary to provide the services.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, provide a different quality of service, or suggest any of the foregoing because you exercised a right.
6.3 How to Exercise Your California Rights
To exercise any of your rights, you may submit a verifiable consumer request by emailing us at privacy@digitalatmsystem.com with the subject line "California Privacy Request." We will verify your identity by matching information you provide with information we have on file. We will respond to verifiable requests within 45 days (which may be extended by an additional 45 days if reasonably necessary, with written notice). You may designate an authorized agent to submit requests on your behalf; the agent must provide written authorization from you along with proof of identity.
6.4 "Do Not Sell or Share My Personal Information"
Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. We honor "Do Not Track" and Global Privacy Control ("GPC") signals as valid opt-out requests for California residents. You may also email us at privacy@digitalatmsystem.com with the subject line "Do Not Sell/Share."
6.5 California "Shine the Light" Law (Cal. Civ. Code Section 1798.83)
California residents may request a list of the categories of personal information that we have disclosed to third parties for their direct marketing purposes during the preceding calendar year, along with the names and addresses of such third parties. To make a request, please email privacy@digitalatmsystem.com. We do not currently disclose personal information to third parties for their own direct marketing purposes.
6.6 California Online Privacy Protection Act (CalOPPA)
In compliance with CalOPPA, we agree to the following: Users can visit our Site anonymously. Our Privacy Policy link includes the word "Privacy" and can be easily found on our homepage. Users will be notified of any privacy policy changes on this page. Users can change their personal information by emailing us.
7. Additional State and International Privacy Rights
7.1 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Other U.S. State Laws
Residents of states with comprehensive consumer privacy laws may have similar rights to access, delete, correct, and opt-out of the sale of personal information or targeted advertising. To exercise these rights, please email privacy@digitalatmsystem.com. We will comply with all applicable state privacy laws.
7.2 Canada (PIPEDA)
If you are a Canadian resident, you have the right to access, correct, and request deletion of your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA). Contact us to exercise these rights.
7.3 Brazil (LGPD)
If you are a Brazilian resident, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, delete, anonymize, and port your personal data. Contact us at privacy@digitalatmsystem.com to exercise these rights.
8. Cookies and Tracking Technologies
We use the following types of cookies and similar technologies:
- Strictly Necessary Cookies: Essential for the Site to function properly. These cannot be disabled.
- Performance/Analytics Cookies: Help us understand how visitors interact with the Site by collecting information anonymously (e.g., Google Analytics).
- Functionality Cookies: Remember your preferences and settings to provide a more personalized experience.
- Advertising/Targeting Cookies: Used to deliver relevant advertisements and track ad campaign performance across websites (e.g., Facebook Pixel, Google Ads remarketing tags).
Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may affect the functionality of the Site. EU/EEA/UK users: Non-essential cookies will only be placed with your explicit consent in compliance with the ePrivacy Directive and GDPR.
9. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purpose for processing:
- Account and transaction data: Retained for the duration of your account plus 7 years for tax and accounting compliance
- Marketing data: Retained until you unsubscribe or request deletion, plus a suppression list to honor your opt-out
- Analytics data: Aggregated and anonymized data may be retained indefinitely
- Support correspondence: Retained for 3 years after the last interaction
10. Data Security
We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption of data in transit (TLS/SSL), restricted access to personal information on a need-to-know basis, regular security assessments, and use of reputable third-party service providers with their own security commitments.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials.
11. Children's Privacy
The Site and Services are not intended for individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 18 years of age (or under the age of digital consent in your jurisdiction, which may be 13 or 16 depending on local law). If we learn that we have collected personal information from a child under the applicable age threshold, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us at privacy@digitalatmsystem.com.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. We will indicate material changes by updating the "Last Updated" date at the top of this page. For material changes, we may also send notice via email (if we have your email address). Your continued use of the Site after changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Digital ATM System
Privacy Inquiries: privacy@digitalatmsystem.com
General Support: support@digitalatmsystem.com
California Privacy Requests: privacy@digitalatmsystem.com (subject line: "California Privacy Request")
EU/UK Data Protection Inquiries: privacy@digitalatmsystem.com (subject line: "GDPR Request")
For EU/EEA residents who are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority. A list of EU DPAs can be found at the European Data Protection Board website.