Privacy
Privacy Policy
How HISCEC collects, uses, discloses, retains and protects information across our websites, programs and digital services.
Scope of This Privacy Policy
This Privacy Policy applies to personal information collected through HISCEC-operated websites and digital services, including information submitted when you:
- browse HISCEC websites;
- create or manage an account;
- apply for or purchase a HISCEC membership;
- create or update a Business Directory or Marketplace listing;
- list products or services;
- communicate with another user where HISCEC provides that functionality;
- subscribe to newsletters, email updates, or text messages;
- register for events, webinars, workshops, courses, or programs;
- participate in HISCEC Advocacy activities;
- respond to surveys, research studies, polls, or questionnaires;
- sign support letters or other advocacy communications;
- request business assistance, resources, education, or support;
- communicate with HISCEC;
- participate in promotions or other HISCEC initiatives; or
- otherwise interact with our digital services.
This policy does not govern the independent privacy practices of HISCEC members, businesses listed in the Directory or Marketplace, sponsors, partners, third-party websites, or other organizations that may be accessible through HISCEC.
For example, when you contact or transact directly with a business listed in the HISCEC Marketplace, that business may independently collect and process your information under its own policies and practices.
Information We May Collect
The information HISCEC collects depends on how you use our services.
Information Collected Automatically
When you use our website, HISCEC and service providers supporting the website may automatically receive certain technical information, such as:
- IP address;
- browser type;
- device type;
- operating system;
- pages viewed;
- referring and exit pages;
- dates and times of visits;
- approximate geographic information derived from IP address;
- website interactions;
- error and diagnostic information; and
- security and server-log information.
This information may be used to operate, secure, troubleshoot, measure, and improve HISCEC's digital services.
How HISCEC Uses Information
HISCEC may use information for legitimate organizational and operational purposes, including to:
- provide and operate the website;
- create and manage accounts;
- process memberships;
- create and maintain Business Directory and Marketplace listings;
- facilitate Marketplace functionality;
- process transactions;
- deliver membership benefits;
- communicate with members and users;
- respond to inquiries;
- provide customer and member support;
- administer events, workshops, courses, and programs;
- provide business education and resources;
- conduct research and surveys;
- support HISCEC's small-business advocacy and public-policy initiatives;
- develop aggregated insights regarding small businesses;
- communicate relevant programs, opportunities, events, and resources;
- send newsletters where requested;
- send text messages when the recipient has provided the required consent;
- prevent fraud and abuse;
- protect HISCEC, its users, and its systems;
- maintain records;
- comply with applicable legal obligations;
- enforce HISCEC agreements and policies;
- analyze and improve our services; and
- develop new programs, resources, and functionality.
HISCEC may also use aggregated or de-identified information for research, statistical analysis, economic-impact analysis, advocacy, program evaluation, reporting, and organizational planning, subject to applicable law.
Business Directory and Marketplace Information
HISCEC is designed in part to help businesses become more visible.
When a business creates a public listing, certain information supplied for that purpose may be publicly displayed, including, as applicable:
- business name;
- business description;
- business category;
- products and services;
- business telephone or WhatsApp contact;
- website;
- social media links;
- business location or service area;
- photographs and business media; and
- other information designated for publication.
PUBLIC INFORMATION
Public information may be accessible to anyone and may potentially be indexed by search engines.
Business owners should therefore avoid placing personal or confidential information in fields intended for public display.
Administrative account information and information identified as private are treated separately from information submitted for public publication.
Communications, Email, and Text Messages
HISCEC may communicate with you regarding your account, membership, transactions, programs, events, Marketplace activity, security matters, or other service-related matters.
If you subscribe to promotional or informational emails, you may unsubscribe using the link provided in those communications.
If you separately consent to receive SMS/text communications, HISCEC or its communications provider may send messages to the number you provide.
Message and data rates may apply. Message frequency may vary. Consent to receive promotional text messages is not a condition of purchasing a membership, product, or service.
You may withdraw SMS consent using the opt-out method identified in the message, such as replying STOP, where applicable.
Opting out of marketing communications does not necessarily prevent HISCEC from sending transactional, security, account, or legally required communications.
We Do Not Sell Member Lists
HISCEC does not sell or rent its membership lists or personal contact information to third parties for their independent marketing purposes.
HISCEC may use its own communication channels to inform members and users about programs, opportunities, sponsors, partners, events, resources, or initiatives that HISCEC believes may be relevant to its community, subject to applicable law and communication preferences.
Diseño: dar a esta sección un callout azul claro sutil porque es una declaración de confianza importante.
Data Retention
HISCEC retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business and membership records, resolving disputes, enforcing agreements, preventing fraud, meeting accounting requirements, and complying with applicable legal obligations.
Retention periods may therefore vary depending on the type of information.
Examples:
- active account and membership records may be retained while the account or relationship remains active;
- certain account records may be retained for a reasonable period after termination;
- marketing subscription information may be retained until the user unsubscribes and afterward as necessary to maintain suppression records;
- server and security logs may be retained for periods appropriate to security and operational requirements;
- transaction, accounting, and tax records may be retained for periods required by applicable law; and
- legal records may be retained for applicable limitation periods.
Information may also remain temporarily in encrypted backups or archival systems until those systems cycle or the information can reasonably be deleted.
HISCEC may retain aggregated or de-identified information that no longer reasonably identifies an individual.
Data Security
HISCEC uses reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, destruction, loss, alteration, misuse, or disclosure.
Depending on the system, these measures may include access controls, authentication measures, encryption, secure hosting practices, logging, monitoring, backups, and restrictions on administrative access.
IMPORTANT CALL OUT: No website, database, network, or method of electronic transmission is completely secure. HISCEC therefore cannot guarantee absolute security.
Users are responsible for maintaining the confidentiality of their account credentials and should notify HISCEC if they believe their account has been compromised.
Data Breaches and Security Incidents
If HISCEC becomes aware of a security incident involving personal information, HISCEC will investigate and respond in accordance with applicable law.
Where legally required, HISCEC will provide appropriate notifications to affected individuals, regulators, law enforcement agencies, or other parties within applicable statutory periods.
Your Privacy Choices and Rights
Depending on where you live and applicable law, you may have rights regarding your personal information.
These may include the right to request:
- confirmation of whether HISCEC processes your information;
- access to certain personal information;
- correction of inaccurate information;
- deletion of certain information;
- a portable copy of certain information;
- withdrawal of consent where processing depends upon consent; or
- other rights provided by applicable law.
Certain rights may be subject to exceptions. For example, HISCEC may be required or permitted to retain information needed for legal compliance, fraud prevention, accounting, dispute resolution, security, or the establishment or defense of legal claims.
HISCEC will not unlawfully discriminate against an individual for exercising applicable privacy rights.
California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), to the extent the law applies to HISCEC or a particular processing activity.
Applicable rights can include rights concerning access, deletion, correction, disclosure of data practices, and sale or sharing of personal information.
HISCEC does not represent that the CCPA/CPRA applies to every interaction merely because an individual resides in California. California's statute contains applicability requirements and exemptions.
Where the CCPA/CPRA applies, HISCEC will honor applicable rights as required by law.
Privacy Rights in Other U.S. States
A growing number of U.S. states have enacted comprehensive consumer privacy laws.
Depending on your state, the applicable law, and whether HISCEC or the relevant activity is subject to that law, you may have rights relating to access, correction, deletion, portability, targeted advertising, sale of personal data, profiling, or other uses of personal information.
HISCEC will honor applicable state privacy rights where legally required.
Mexico — Privacy and ARCO Rights
Individuals in Mexico may have rights under applicable Mexican personal-data-protection laws, including rights commonly known as ARCO rights:
ACCESS
Request access to personal data.
RECTIFICATION
Request correction of inaccurate or incomplete information.
CANCELLATION
Request cancellation of personal information when legally appropriate.
OPPOSITION
Object to certain processing of personal information.
Individuals may also have rights regarding withdrawal of consent and other matters provided by applicable law.
For covered ARCO requests, applicable Mexican law establishes procedures and response periods, including a period generally not exceeding 20 days to communicate a determination and, when the request is granted, an additional period generally not exceeding 15 days to make the right effective, subject to applicable extensions and exceptions.
HISCEC will process qualifying requests in accordance with applicable Mexican law.
Diseño: usar un tratamiento ARCO en cuatro partes visualmente organizado, no un párrafo denso.
Exercising Your Privacy Rights
To submit a privacy request, contact:
Hispanic Chamber of E-Commerce (HISCEC)
Email:
info@hiscec.com
Please include enough information for HISCEC to understand your request.
HISCEC may need to verify your identity before fulfilling certain requests to help prevent unauthorized access to or deletion of another person's information.
Where permitted by law, an authorized agent may submit certain requests on your behalf, subject to appropriate verification.
HISCEC will respond within the period required by applicable law.
HISCEC generally does not charge for legitimate privacy requests, although applicable law may permit fees or limitations for excessive, repetitive, manifestly unfounded, or otherwise abusive requests.
CTA: SUBMIT A PRIVACY REQUEST → `mailto:info@hiscec.com`
International Data Processing
Because HISCEC serves businesses in both the United States and Mexico and may use service providers operating in multiple jurisdictions, information may be processed or stored outside the country in which it was originally collected.
Where applicable law requires safeguards relating to international transfers or processing, HISCEC will take reasonable steps designed to address those requirements.
Third-Party Websites and Services
HISCEC's website may contain links to:
- member businesses;
- Marketplace sellers;
- sponsors;
- partners;
- government agencies;
- financial institutions;
- social media platforms;
- educational resources; and
- other third-party websites or services.
HISCEC does not control the privacy, security, content, or practices of independent third parties.
A link from HISCEC does not mean HISCEC is responsible for that third party's privacy practices.
Users should review the privacy policies of third-party services before providing them with personal information.
Children
HISCEC's website and business services are intended primarily for business owners, entrepreneurs, professionals, and adults and are not directed to children under 13.
HISCEC does not knowingly seek to collect personal information online from children under 13 without legally required authorization.
If you believe a child has submitted personal information to HISCEC inappropriately, contact us at info@hiscec.com so the matter can be reviewed.
User-Generated and Public Content
Information that you intentionally make public through a business listing, review, Marketplace listing, comment, testimonial, event participation, or other public-facing feature may be visible to other users and potentially to search engines.
Do not submit confidential, sensitive, or personal information to public-facing fields unless you intend for that information to become publicly accessible.
Aggregated and De-Identified Information
HISCEC may create statistical, aggregated, or de-identified information from data collected through its programs and services.
HISCEC may use such information to:
- measure small-business trends;
- conduct research;
- evaluate programs;
- understand economic conditions;
- support advocacy initiatives;
- communicate small-business needs to policymakers;
- prepare reports;
- demonstrate program impact; and
- improve HISCEC services.
Where information has been appropriately de-identified, HISCEC will not intentionally attempt to re-identify it except where permitted or required by law.
Changes to This Privacy Policy
HISCEC may update this Privacy Policy periodically to reflect changes in:
- our services;
- website functionality;
- technology;
- service providers;
- legal requirements; or
- organizational practices.
The Last Updated date at the beginning of this policy identifies the most recent revision.
If HISCEC makes material changes affecting previously collected personal information, HISCEC may provide additional notice when appropriate or legally required.
Previous versions may be available upon request.
Contact HISCEC
Questions about this Privacy Policy or HISCEC's privacy practices may be directed to:
Hispanic Chamber of E-Commerce (HISCEC)
Email:
info@hiscec.com
Website:
hiscec.com
Privacy, deletion, correction, access, and ARCO requests may also be submitted through this email address.