Cherry Management Global Privacy Policy (GDPR-Compliant)

Effective Date: January 1, 2025

Last Updated: April 15, 2025

Contact Email: support@cherrymgmt.com

1. Introduction

This Privacy Policy outlines how Cherry Management (“Cherry”, “we”, “our”, or “us”) collects, uses, shares, and protects personal data. It applies to all products and services offered by Cherry, and to our websites that link to this policy.

Cherry Management is committed to safeguarding your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").

2. Data Controller and Contact Information

The data controller for your personal data is:

Cherry Management LLC
Fort Lauderdale Florida 33301

Email: support@cherrymgmt.com

3. Scope of This Privacy Policy

This Policy applies to personal data we collect:

• Through our websites
• When you use our products and services
• When you interact with us (e.g., customer support, marketing)
• When data is provided to us for processing on behalf of a customer (as a processor)

This Policy does not apply to third-party websites or services linked to from our websites.

4. Principles of Data Processing

We process personal data in accordance with the GDPR's key principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

5. Types of Data We Collect and Purpose of Processing

A. Data You Provide to Us

• Account Information: Name, email, company, phone number, password
• Communication: Emails, chats, feedback
• Payment Details: Limited card data (last 4 digits, billing address); processed securely by third-party payment providers
• Event and Form Submissions: Data submitted via forms, registrations, surveys, or support requests
• Testimonials: Shared with explicit consent

Purpose: To provide and improve services, manage accounts, support communication, process payments, and market our products (where permitted).

B. Data We Collect Automatically

• Device & Usage Data: IP address, browser type, OS, access times, pages viewed
• Cookies and Tracking: Used for session management, analytics, user experience
• Mobile Analytics: Usage of mobile apps, features accessed, location (when enabled)

Legal Basis: Legitimate interest, performance of contract, or consent (e.g., cookies).

C. Data from Third Parties

• Referrals: From individuals or partners
• Marketing & Social Media: From public sources or interaction with our channels

Legal Basis: Legitimate interest or consent, as appropriate.

6. Legal Bases for Processing

We process personal data under the following legal bases:

• Contractual necessity
• Consent (e.g., marketing, cookies)
• Legitimate interests (e.g., service improvement, fraud prevention)
• Legal obligation
• Vital interests (rarely, for emergencies)

Where consent is the legal basis, you may withdraw it at any time.

7. Your Data Protection Rights (EEA/UK)

You have the following rights under GDPR:

• Right of access – Obtain a copy of your data and information on processing
• Right to rectification – Correct inaccurate or incomplete data
• Right to erasure – Request deletion under specific conditions
• Right to restrict processing – Temporarily stop processing
• Right to data portability – Receive your data in a machine-readable format
• Right to object – To certain types of processing, including direct marketing
• Right to lodge a complaint – With your national supervisory authority

To exercise your rights, email: support@cherrymgmt.com

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined or as required by law (e.g., tax, legal claims). After the retention period, we securely delete or anonymize data.

9. Sharing and Disclosure

We do not sell your personal data.

We may share personal data with:

• Authorized Employees & Contractors – On a need-to-know basis
• Service Providers (Processors) – Bound by strict data protection agreements
• Collaborators – Where you engage in shared projects or services
• Legal Authorities – As required by law
• Mergers/Acquisitions – With notice and safeguards in place

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

10. Data Transfers Outside the EEA

When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses
• Adequacy decisions
• Binding Corporate Rules (if applicable)

11. Data Security

We implement technical and organizational security measures including encryption, access control, monitoring, and regular audits to protect personal data against unauthorized access or disclosure.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience and analyze usage.

• Essential cookies are required for site operation
• Non-essential cookies (e.g., analytics, personalization) are used only with your consent

You can manage cookie preferences via browser settings or our cookie banner.

13. Data We Process on Your Behalf (Processor Role)

When you use our services to store or process data (including personal data), you are the Data Controllerand we act as a Data Processor.

We:

• Process data only on your documented instructions
• Ensure confidentiality and data protection
• Assist with data subject rights
• Provide breach notification support

Sub-processors engaged are contractually bound by the same data protection standards.

14. Children’s Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under this age. If you believe such data has been collected, contact us for deletion.

15. Your Choices

You may:

• Unsubscribe from marketing communications at any time
• Disable cookies via browser settings
• Control permissions in mobile apps

16. Use of AI and Automation

We use machine learning and AI technologies strictly for product functionality, personalization, and internal analytics. We do not use personal data for training third-party AI models.

17. Changes to This Policy

We may update this Privacy Policy periodically. For significant changes, we will notify you via email or a website banner. Continued use after updates constitutes acceptance.

18. Contact and Complaints

For any questions or complaints about this Privacy Policy or your data rights, contact:

Data Protection Officer
Cherry Management
Email: support@cherrymgmt.com

You also have the right to lodge a complaint with your local Data Protection Authority.