Privacy Policy
Your privacy and data security are our top priorities. Learn how we protect your healthcare information in compliance with global regulations including HIPAA, GDPR, and other privacy laws.
Our Commitment to Privacy
Mercato Agency ("Mercato", "we", "us") is committed to protecting the personal data of our clients, partners, and website users. We are the data controller for personal information collected through our website and related services globally.
Our practices comply with applicable data protection laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Australian Privacy Act (APPs), the New Zealand Privacy Act, and other relevant regulations.
Secure by Design
Enterprise-grade security measures
Compliant
HIPAA, GDPR, CCPA certified
Transparent
Clear data handling practices
Information We Collect
We collect various categories of personal data when you use Mercato's website or services, or when we otherwise interact with you:
Contact Information
- Name and email address
- Postal address
- Phone number
- Business contact details
Professional Data
- Job title and employer
- Business email
- Industry information
- LinkedIn profile data
Account Information
- Login credentials
- Marketing preferences
- Communication history
- Account settings
Technical Data
- IP address
- Device and browser data
- Cookie identifiers
- Website usage patterns
Special Categories of Data
We may collect sensitive categories of data (health, race, etc.) only if you voluntarily provide them and only with explicit consent. We never collect children's data under 16 without parental consent.
How We Use Your Data
Mercato uses personal data only for legitimate business purposes, based on lawful grounds under GDPR Article 6:
Service Provision & Improvement
Providing and improving our AI-powered marketing and lead-generation services
Communication & Support
Emails, customer support, billing and account management
Marketing & Analytics
Understanding usage patterns and tailoring content to your preferences
Security & Compliance
Verifying identity, preventing abuse, and complying with legal obligations
Security Measures
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:
Encryption
TLS for data in transit, AES-256 for data at rest
Access Controls
Multi-factor authentication and principle of least privilege
Monitoring
Continuous security monitoring and intrusion detection
Compliance
ISO/IEC 27001 and NIST framework alignment
Staff Training
Regular security awareness and best practices training
Incident Response
Comprehensive breach notification and response plan
Your Privacy Rights
Mercato respects your privacy rights under applicable laws. Depending on your location, you may have the following rights:
EU/EEA Residents (GDPR)
California Residents (CCPA/CPRA)
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided in the Contact section below. We will verify your identity and respond within legal timeframes (typically 30 days).
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Data Protection Officer
📧 privacy@mercato.com
🏢 Mercato Agency
📍 Attn: Privacy Department
Regulatory Authorities
You may also lodge a complaint with your local data protection authority if you believe your privacy rights have been violated. We are committed to working with authorities to resolve any concerns.
Policy Updates
We may update this Privacy Policy from time to time. Significant changes will be notified on our website or via email. This policy applies globally and incorporates all applicable data protection regulations.