PRIVACY POLICY

Last Updated: December 26, 2025

—

## 1. DATA CONTROLLER

**Company Name:** SMALLCAP MARKET SYSTEMS LLC
**Registered Address:**
5830 E 2ND ST, STE 7000 #31660
CASPER, WY 82609
United States

**Email:** info@mariomaldonado.com
**Website:** https://mariomaldonado.com

For EU/EEA/UK Data Subject Requests: info@mariomaldonado.com

—

## 2. INFORMATION WE COLLECT

We collect the following types of information:

**Account Information:**
– Name and email address when you register or purchase
– Username and password for account access
– Country of residence (for tax and legal compliance)

**Payment Information:**
– Payment details are processed securely by third-party payment processors (e.g., Stripe, PayPal)
– We do not store complete credit card numbers on our servers
– Transaction IDs are retained for refund processing and legal compliance

**Usage Information:**
– Pages visited and features used
– Device information and IP address
– Browser type and operating system
– Cookies and similar technologies (see Section 7)

**Communication Data:**
– Emails and messages you send us
– Survey responses and feedback
– Support ticket history

—

## 3. HOW WE USE YOUR INFORMATION

We use your information to:

– Provide and deliver educational services you purchase
– Process payments and send transaction confirmations
– Send educational content and program updates
– Respond to your questions and support requests
– Improve our website and services
– Prevent fraud and ensure security
– Comply with legal obligations (including tax reporting)
– Send marketing communications (only with your explicit consent)

—

## 4. LEGAL BASIS FOR PROCESSING (GDPR – EU/EEA/UK Users)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

| Purpose | Legal Basis |
|———|————-|
| Providing purchased services | Contract Performance (Art. 6(1)(b)) |
| Processing payments | Contract Performance (Art. 6(1)(b)) |
| Marketing communications | Consent (Art. 6(1)(a)) – you can withdraw anytime |
| Website analytics | Legitimate Interest (Art. 6(1)(f)) |
| Security and fraud prevention | Legitimate Interest (Art. 6(1)(f)) |
| Tax and legal compliance | Legal Obligation (Art. 6(1)(c)) |

**Legitimate Interest Assessment:** Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms.

—

## 5. DATA SHARING

**We do not sell your personal data.**

We may share data with the following categories of recipients:

| Recipient | Purpose | Location |
|———–|———|———-|
| Payment Processors (Stripe, PayPal) | Transaction processing | USA |
| Email Service Providers | Communications delivery | USA |
| Analytics Providers | Website usage analysis (anonymized) | USA |
| Cloud Hosting Providers | Data storage and security | USA |
| Legal/Tax Advisors | Compliance requirements | USA |
| Legal Authorities | When required by law | Various |

All third-party processors are bound by data processing agreements that require them to protect your data in accordance with applicable laws.

—

## 6. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries outside your country of residence, including the United States.

**For EU/EEA/UK Users:**
When we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place:

– **Standard Contractual Clauses (SCCs)** approved by the European Commission
– **Data Processing Agreements** with all service providers
– **Technical and organizational security measures**

You may request a copy of the safeguards we use by contacting info@mariomaldonado.com.

**For Mexican Users:**
International transfers are made in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and applicable regulations.

—

## 7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies for the following purposes:

**Essential Cookies (Always Active):**
– Required for website functionality
– Enable secure login and account access
– Cannot be disabled

**Analytics Cookies (Require Consent in EU):**
– Understand how visitors use our site
– Improve website performance
– Provider: Google Analytics (anonymized IP enabled)

**Preference Cookies (Require Consent in EU):**
– Remember your language and region settings
– Personalize your experience

**Marketing Cookies (Require Consent):**
– Deliver relevant advertisements
– Measure advertising effectiveness

**Your Cookie Choices:**

For EU/EEA/UK visitors: Our cookie banner provides clear options to “Accept All” or “Reject All/Essential Only” cookies, as required by the ePrivacy Directive.

You can also control cookies through your browser settings:
– [Google Chrome](https://support.google.com/chrome/answer/95647)
– [Mozilla Firefox](https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer)
– [Safari](https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac)
– [Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09)

Disabling certain cookies may affect website functionality.

—

## 8. YOUR RIGHTS

### 8.1 Rights for All Users

Regardless of your location, you may:
– Access: Request a copy of your personal data
– Rectification: Correct inaccurate personal data
– Object: Object to certain processing activities
– Withdraw Consent: Withdraw consent for marketing communications

### 8.2 Additional Rights for EU/EEA/UK Residents (GDPR)

Under the General Data Protection Regulation, you also have:

– **Right to Erasure (“Right to be Forgotten”):** Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected
– **Right to Restriction:** Request limitation of processing in certain circumstances
– **Right to Data Portability:** Receive your data in a structured, commonly used format (JSON or CSV)
– **Right to Object to Automated Decision-Making:** We do not make decisions based solely on automated processing that produce legal effects
– **Right to Lodge a Complaint:** File a complaint with your local Data Protection Authority (see Section 8.5)

### 8.3 Rights for California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have:

– **Right to Know:** What personal information we collect, use, and disclose
– **Right to Delete:** Request deletion of your personal information
– **Right to Opt-Out:** We do not sell personal information
– **Right to Non-Discrimination:** We will not discriminate against you for exercising your rights
– **Right to Correct:** Correct inaccurate personal information

To submit a CCPA request, contact: info@mariomaldonado.com

### 8.4 Rights for Mexican Residents (LFPDPPP – Derechos ARCO)

Under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, you have:

– **Acceso:** Solicitar acceso a sus datos personales
– **Rectificación:** Corregir datos personales inexactos
– **Cancelación:** Solicitar la eliminación de sus datos
– **Oposición:** Oponerse al tratamiento de sus datos para fines específicos

Para ejercer sus derechos ARCO, envíe una solicitud a: info@mariomaldonado.com

Su solicitud debe incluir:
– Nombre completo y medio de contacto
– Descripción clara de los datos y el derecho que desea ejercer
– Documento de identificación

Responderemos en un plazo de 20 días hábiles.

### 8.5 How to Exercise Your Rights

To exercise any of your rights, contact us at: **info@mariomaldonado.com**

We will respond within:
– **GDPR:** 30 days (extendable by 60 days for complex requests)
– **CCPA:** 45 days (extendable by 45 days)
– **LFPDPPP:** 20 business days

We may request verification of your identity before processing your request.

### 8.6 Data Protection Authorities

**EU/EEA Residents:** You have the right to lodge a complaint with your local Data Protection Authority. A list of DPAs is available at: https://edpb.europa.eu/about-edpb/board/members_en

**UK Residents:** Information Commissioner’s Office (ICO) – https://ico.org.uk

**Mexican Residents:** Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) – https://home.inai.org.mx

—

## 9. DATA RETENTION

We retain your personal data for as long as necessary to:

| Data Type | Retention Period | Reason |
|———–|——————|——–|
| Account data | Duration of account + 5 years | Legal/tax compliance |
| Transaction records | 7 years | Tax and legal obligations |
| Course access logs | 3 years | License verification |
| Support communications | 3 years | Service quality |
| Marketing consent records | Duration + 5 years | Proof of consent |

After the retention period, data is securely deleted or anonymized.

**Your Right to Request Deletion:** You may request earlier deletion of your data, subject to our legal obligations (e.g., tax records must be retained for the legally required period).

—

## 10. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data, including:

**Technical Measures:**
– SSL/TLS encryption for all data in transit
– Encryption of sensitive data at rest
– Secure cloud infrastructure with access controls
– Regular security assessments and updates

**Organizational Measures:**
– Access limited to authorized personnel only
– Confidentiality agreements with all staff and contractors
– Regular privacy and security training
– Incident response procedures

**Breach Notification:** In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by applicable law (within 72 hours for GDPR).

—

## 11. CHILDREN’S PRIVACY

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children.

If you believe we have inadvertently collected data from a child, please contact us immediately at info@mariomaldonado.com, and we will take steps to delete the information.

—

## 12. CHANGES TO THIS POLICY

We may update this policy periodically to reflect changes in our practices or applicable laws.

**How we notify you:**
– Material changes: Email notification to registered users
– Minor changes: Updated date on this page

**Your acceptance:** Continued use of our services after changes constitutes acceptance of the updated policy. If you do not agree with changes, you may close your account.

—

## 13. CONTACT US

For privacy-related questions or to exercise your rights:

**SMALLCAP MARKET SYSTEMS LLC**

**Registered Address:**
5830 E 2ND ST, STE 7000 #31660
CASPER, WY 82609
United States

**Email:** info@mariomaldonado.com

**Response Time:** We aim to respond to all privacy inquiries within 5 business days.

—

## 14. ADDITIONAL DISCLOSURES

### 14.1 Do Not Track Signals
Some browsers offer a “Do Not Track” (DNT) feature. We currently do not respond to DNT signals, as there is no industry standard for compliance.

### 14.2 Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal data.

### 14.3 Social Media Features
Our website may include social media features (e.g., share buttons). These features may collect your IP address and set cookies. Your interaction with these features is governed by the privacy policy of the respective platform.

—

© 2025 SMALLCAP MARKET SYSTEMS LLC. All Rights Reserved.

Last Updated: December 26, 2025