Compliance Policy

1. CCPA COMPLIANCE POLICY (California Residents)

This policy is part of the Master Terms of Service and uses all definitions included in the Master Definitions Section. All references to “Company”, “we”, “our”, “us”, “the Website”, or “the Products” carry the meanings assigned in the Master Definitions.

CALIFORNIA CONSUMER PRIVACY ACT (CCPA) RIGHTS

If you are a resident of California, you may exercise specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

These rights apply only to California residents and only to personal information collected by the Company through the Website or the Products.

1. RIGHT TO KNOW / ACCESS

You may request:

  • The categories of personal data collected
  • The specific pieces of personal data collected
  • The categories of sources from which data was obtained
  • The business purpose for collecting such data
  • The categories of third parties with whom the data is shared

2. RIGHT TO DELETE

You may request the deletion of personal information the Company has collected, subject to certain exceptions (e.g., fraud prevention, transaction fulfillment, legal compliance).

3. RIGHT TO CORRECT

You may request correction of inaccurate personal information we maintain about you.

4. RIGHT TO OPT OUT OF DATA SHARING

The Company does not sell or rent personal data to third parties for their own marketing.
If you wish to formally opt out of any form of data sharing that may occur for service operation, you may contact us as described below.

5. RIGHT TO LIMIT USE OF SENSITIVE INFORMATION

If any sensitive data is collected (such as geolocation, biometrics, or ID verification data), you may request that its use be limited to what is strictly necessary for fulfilling the service.

6. NON-DISCRIMINATION

Exercising your CCPA rights will not result in:

  • Price increases
  • Service denial
  • Reduced quality
  • Penalty or discrimination

HOW TO SUBMIT REQUESTS

To exercise any of the rights above, submit a verifiable consumer request to:

[SUPPORT EMAIL]

To protect your privacy, you may be required to verify your identity before a request is processed.

POLICY INTEGRATION

This policy is part of the Master Terms of Service and incorporates all definitions, disclaimers, and governance outlined within the Master Terms and Master Definitions.

2. GDPR COMPLIANCE POLICY (EU & EEA Residents)

This policy is part of the Master Terms of Service and uses all definitions included in the Master Definitions Section. All references to “Company”, “we”, “our”, “us”, or “the Products” carry the meanings assigned in the Master Definitions.

GENERAL DATA PROTECTION REGULATION (GDPR) RIGHTS

Residents of the European Union (EU) and European Economic Area (EEA) have specific data protection rights under the GDPR.

These rights apply only to EU/EEA residents and only to personal information collected by the Company through the Website or the Products.

1. RIGHT OF ACCESS

You may request copies of the personal data the Company holds about you.

2. RIGHT TO RECTIFICATION

You may request correction of inaccurate or incomplete personal data.

3. RIGHT TO ERASURE (“Right to be Forgotten”)

You may request deletion of your personal data where:

  • It is no longer needed
  • You withdraw consent
  • You object to processing
  • Data was processed unlawfully

4. RIGHT TO RESTRICT PROCESSING

You may request limited use of your data under certain conditions.

5. RIGHT TO DATA PORTABILITY

You may request your data in a structured, commonly used digital format (e.g., CSV) and request its transfer to another controller.

6. RIGHT TO OBJECT

You may object to processing carried out under legitimate interest or direct marketing.

7. RIGHTS RELATED TO AUTOMATED DECISION-MAKING

If any automated systems are used (e.g., fraud screening, SMS automation), you may request human review.

LAWFUL BASES FOR PROCESSING

The Company processes personal data under one or more of the following:

  • Consent
  • Contractual necessity
  • Legitimate interest
  • Legal obligation

DATA RETENTION

Personal data is retained only as long as necessary for:

  • Order fulfillment
  • Legal compliance
  • Fraud prevention
  • Internal business needs

HOW TO SUBMIT GDPR REQUESTS

To exercise your GDPR rights, contact:

[SUPPORT EMAIL]

You may be required to verify your identity before we can provide information.

POLICY INTEGRATION

This policy is part of the Master Terms of Service and incorporates all definitions, disclaimers, and governance outlined in the Master Terms and Master Definitions.