Legal

 

Will your information be shared with others?

We do not sell or rent your contact information.

We may from time to time send out promotional information on behalf of partners or members of the iHEA community, for example, to promote other services which we think might be of interest to our members. We do not provide any of your contact information to these partners nor do we normally allow them access to this information.

Our email servers are run by Google as part of their Google Apps for Business program. Andra Motion Technologies Inc. pays for this email service and does not share your contact information with Google except insofar as it is necessary to provide us with email sending and receiving.
We may be obliged to provide access to your contact information to proper legal authorities if required by law.

How will you be contacted?

You are able to opt-out of all promotional messages, including our email newsletter, every message provides you with the option to unsubscribe at anytime. Once you’ve unsubscribed, you should stop receiving promotional messages within 24 hours. Please contact [email protected] if you continue to receive these emails. You may choose to resubscribe at any time.

If you open an account, you may receive from time to time some service-related messages which you CANNOT opt-out from. We try to keep these messages to a minimum and these are specific to user account management or site information. Should you find these messages undesirable, one option is to cancel your user account.

What information will be collected?

We automatically track certain information based upon your access of pages on the site. We use this information to do internal aggregated research on our users’ demographics, interests, and behavior to better understand, protect and serve you and our community. This information may include which pages were accessed,  computer and browser information, and IP address.

As part of the user account, we may collect your name, email address, address, and telephone number. Credit card information is not stored on our servers in accordance with PCI regulations.

Our website will set the following cookies:

Session cookie – This cookie enables you to log into your user account and ensure that you are recognized by the system when you access pages within the site and that any information you have entered or products you have added to your shopping cart are remembered. This type of cookie does not include any identifiable information, it merely allows us to connect your browser to our records in the database.

CSRF Cookie - This cookie is a security cookie that helps protect form entry

Analytics cookies from Google and Hubspot, these cookies are used to provide us with short and long-term web traffic information. It will – in aggregate – allow us to see web access information from people using the site including when and where our site was accessed from, what type of browsers and computers access our site, in addition to the date/time and the pages accessed.

Freshdesk cookies - these cookies are intended to provide an integrated technical support system.

We do not set any third party advertising cookies nor do we attempt to track your access of non-ANDRA sites. Cookies set by the Cinema Control Labs/ANDRA server do not contain any personal information.

How will your information be used?

Your details may be used for the following reasons:

  • Newsletter distribution
  • Approved third-party information distribution
  • Account analysis
How will your information be stored?

Your data is maintained in secure electronic format. Only staff in the course of their work duties have access to your personal information.

What security measures will protect your information?

All web access is done through an SSL secured HTTPS connection. At no time does any connection to andra.com ecommerce site occur over an unsecure connection.

The web application resides on the same server cluster as the database so your personal information never travels “over the wire”. For shopping cart checkouts, your payment information is sent to Stripe.com a PCI-compliant payment processor over a secure SSL connection.

By default, all contact information is restricted to yourself or designated Andra staff. We limit access to your information wherever possible.

Your passwords are secured with Argon 2 Password Hashing, one of the most advnaced password hashing algorithms and recommended by the Password Hashing Competition Panel. This encryption is a one-way hash which we are unable to read. If you forget your password, we have a form where you can request a password reset link that will be sent to your email address of record. We upgrade password hashing on a regular basis to protect password security.

How long will your information be kept?

We endeavor to collect as little information as we can while providing our services, however preserving a consistent historical record of transaction activities is an important part of our role, but at anytime and at your request, we can delete your user account from our site.

If your personally identifiable information changes (such as phone, email or postal address), please log into your account and update the information to ensure your account has the most up-to-date information.

User accounts which have not been accessed for extended periods of time may be deleted, if there is not important historical transaction information..