UNRELEASED DATA POLICY

1.1. Personal Information

We may collect personal information that you provide to us when you use our Services, including but not limited to your name, email address, postal address, phone number, and payment information.

1.2. Usage Information

We may collect information about how you interact with our Services, including your IP address, browser type, operating system, and pages visited.

1.3. Cookies

We may use cookies and similar technologies to collect information about your browsing activities and preferences. You can manage your cookie preferences through your browser settings.

2.1. We may use your personal information to:

• Provide, maintain, and improve our Services
• Communicate with you about your account and our Services
• Process transactions and fulfil orders
• Customise and personalise your experience with our Services
• Send you promotional materials and offers that may be of interest to you

3.1. We may share your personal information with third parties in the following circumstances:

• With service providers and business partners who assist us in providing our Services
• With law enforcement authorities or other government agencies when required by law or to protect our rights and interests
• In connection with a merger, acquisition, or sale of all or a portion of our business

8.1. Legal Basis for Processing

Under the GDPR, we are required to have a lawful basis for processing your personal data. The legal bases for processing your personal data may include:

• The necessity of processing for the performance of a contract with you
• Compliance with a legal obligation
• Protection of vital interests
• Consent
• Legitimate interests pursued by us or by a third party

8.2. Consent

Where we rely on your consent as the legal basis for processing your personal data, we will obtain your explicit consent before collecting your data. You have the right to withdraw your consent at any time by contacting us.

8.3. Data Subject Rights

Under the GDPR, you have certain rights regarding your personal data, including but not limited to:

• The right to access your personal data and obtain a copy of it
• The right to rectify any inaccuracies in your personal data
• The right to erase your personal data under certain circumstances ("right to be forgotten")
• The right to restrict or object to the processing of your personal data in certain situations
• The right to data portability
• The right not to be subject to automated decision-making

8.4. Data Protection Impact Assessments (DPIAs)

We conduct Data Protection Impact Assessments (DPIAs) to assess the potential risks and impacts of processing activities on the protection of personal data, particularly where processing is likely to result in a high risk to your rights and freedoms.

8.5. Data Breach Notification

In the event of a data breach involving your personal data that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms.

8.6. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that adequate safeguards are in place to protect your personal data, such as by using standard contractual clauses approved by the European Commission or relying on other mechanisms permitted under the GDPR.

8.7. Complaints

If you believe that we have violated your rights under the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

8.8. Updates to GDPR Compliance

We will review and update our GDPR compliance measures as necessary to ensure ongoing compliance with the GDPR and any applicable data protection laws.