This section outlines the legal framework for how we handle your information as part of our service agreement.
Data Collection and Usage
We collect identifiable information (name, email, phone) and sensitive data (financial or health records) only when necessary for our operations
Automated Means: Cookies and system logs
Third Parties: Business partners and public databases
Legal Basis for Processing
We process your data under the following legal frameworks:
Contractual Necessity: To fulfil our service obligations to you
Legal Obligation: To comply with statutory requirements
Legitimate Interests: To improve our business services, provided your fundamental rights are not overridden
Data Security and Sharing
Protection: We use encryption, firewalls, and strict access controls (the “principle of least privilege”) to keep your data safe
Third Parties: We only share data with third parties who have passed our due diligence and signed formal Data Processing Agreements
International Transfers: Any data moved outside its country of origin is protected by standard contractual clauses or explicit consent
Your Rights as a Data Subject
In accordance with the GDPR, you hold the following rights
Access and Rectification: You may request a copy of your data or ask us to correct inaccuracies
Erasure (“Right to be Forgotten”): You may request the deletion of your data when it is no longer needed for its original purpose
Portability: You have the right to obtain and reuse your data across different services