Privacy Policy

Effective Date: June 2026

PART A — DATA CONTROLLER DETAILS

Limited Company [DELETE THIS ENTIRE SECTION IF SOLE TRADER]

Field	Details
Data Controller (Company Name)	Webshopsy Limited
Company Registration Number	14839710
Country / Jurisdiction of Incorporation	England & Wales
Registered Office Address	71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact Email	info@aiwebshopsy.com
Website	www.ashopai.com

Sole Trader / Freelancer [DELETE THIS ENTIRE SECTION IF LIMITED COMPANY]

Field	Details
Full Legal Name	To Hin Fai
Operating Model	Self-employed independent — globally mobile / location-neutral
Business / Correspondence Address	71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Contact Email	info@aiwebshopsy.com
Website	www.ashopai.com

GLOBAL COMMITMENT: [We apply / I apply] the highest applicable standard of data protection to all clients worldwide. If your local law provides stronger rights than described here, those rights apply to you. Your privacy rights are protected regardless of where [we are / I am] based.

[We / I] — [Company Name / Your Name trading as Webshopsy Limited] — operate ashopai.com (the “Website”), providing custom eCommerce website building services to clients globally. This Privacy Policy explains how [we / I] collect, use, disclose, and protect your personal information when you use [our / my] Website or Services.

[We / I] [am / are] committed to complying with applicable data protection laws worldwide, including UK GDPR, EU GDPR, CCPA/CPRA (USA), Australia Privacy Act 1988, New Zealand Privacy Act 2020, Canada PIPEDA & Quebec Law 25, Hong Kong PDPO, Taiwan PDPA, Singapore PDPA, and other applicable international privacy regulations.

SUMMARY OF KEY POINTS

[We / I] collect personal and business information you provide through [our / my] registration form, application forms, and checkout process.
[We / I] collect business details including your store name, address, company registration number, tax/VAT number, and business category.
[We / I] collect product information, pricing, and images you upload to build your online store.
[We / I] collect social media profile URLs and direct contact channel details you choose to provide.
[We / I] collect shipping logistics preferences and target market information.
[We / I] do NOT collect or process sensitive personal information such as racial origin, health data, or biometric data.
[We / I] do NOT sell or share your personal information for commercial purposes.
All payment data is processed securely by [our / my] payment provider. [We / I] do not store your card details.
Depending on your location, you have rights to access, correct, delete, or restrict use of your data.
[SOLE TRADER ONLY: As the sole freelancer, I am the only person who accesses your data — no staff, no outsourcing without your knowledge. Delete this bullet if Limited Company.]

#	Section
1	What Information Do [We / I] Collect?
2	How Do [We / I] Process Your Information?
3	Legal Bases for Processing
4	When and With Whom Do [We / I] Share Your Information?
5	Third-Party Websites
6	Cookies and Tracking Technologies
7	How Long Do [We / I] Keep Your Information?
8	How Do [We / I] Keep Your Information Safe?
9	Children’s Privacy
10	Your Privacy Rights by Region
11	Do-Not-Track Features
12	United States Residents — Specific Rights
13	Other Regions — Specific Rights
14	International Data Transfers
15	Governing Law & Dispute Resolution
16	Updates to This Policy
17	How to Contact [Us / Me]
18	How to Review, Update, or Delete Your Data

1. WHAT INFORMATION DO [WE / I] COLLECT?

[We / I] collect information across seven stages of [our / my] service: Account Registration, Checkout & Billing, Store & Contact Details, Social Media & Contact, Design & Branding, Product Information, and Shipping & Logistics — plus information collected automatically when you use [our / my] Website.

Stage 1 — Account Registration — Collected when you create your aShopAI account

Username
Email address
Password (stored in encrypted form — [we / I] cannot view your password)
Consent to Terms & Conditions and Privacy Policy (checkbox confirmation)

Stage 2 — Checkout & Billing Details — Collected when you place your order

First name and last name
Company name (optional)
Country / Region
Street address, flat/suite/unit details
Town / City
Postcode / ZIP
Phone number
Email address
Consent to Terms & Conditions (checkbox confirmation)

Payment Data: All credit/debit card details (card number, expiry date, security code) are processed directly and securely by [our / my] payment provider under PCI DSS compliance. [We / I] do not store, access, or transmit your card details on [our / my] own systems. Please refer to [our / my] payment provider’s privacy policy for full details.

Stage 3 — Store & Contact Details — Application Form — Page 1. Collected to set up your store identity, legal pages, and invoicing

Contact Details:

First name and last name
Email address
WhatsApp / phone number

Store Details:

Company / Store name
Store address (line 1, line 2, city, country, postcode / ZIP)
Business category (e.g. Hobbies & Crafts, Fashion, Sports)
Company registration number (used for branded tax invoices within your store)
Tax / VAT number (e.g. GB123456789) (used for branded tax invoices within your store)

Note on Business Registration Data: Company registration numbers and Tax/VAT numbers are used solely to generate your branded tax invoices within your online store. [We / I] do not use this information for any other purpose and do not share it with third parties.

Stage 4 — Social Media & Contact Details — Application Form — Page 2. Collected to populate your website header, footer, and contact pages

Social Media Profile URLs (all optional — provide only platforms you use):

Facebook page URL
Threads profile URL
X (Twitter) profile URL
LinkedIn profile URL
Telegram username
Instagram profile URL
YouTube channel URL
Pinterest profile URL
TikTok profile URL
Snapchat profile URL

Direct Contact Channels (all optional):

Phone number
Facebook Messenger link
WhatsApp Business number
Instagram Messenger link

This information is used exclusively to build your website’s contact and social media sections. It will appear publicly on your website as provided. [We / I] do not use your social media accounts to track or collect additional data about you.

Stage 5 — Design & Branding — Application Form — Page 3. Collected to create your website’s visual identity

Banner images (optional upload — JPG or PNG, max 1 MB each)
Banner headline text (optional — or AI-generated on your behalf)
Company text logo and favicon file (optional upload — or AI-designed on your behalf)
Website main colour preference
Website sub colour preference
About Us / brand background content (optional — or AI-written on your behalf)

Uploaded brand assets (images, logos) are used solely to build your website. They are stored securely and not shared with any third party other than as necessary to deliver your project. [SOLE TRADER: As the sole freelancer, only I handle these files. DELETE if Limited Company.]

Stage 6 — Product Information — Application Form — Page 4. Collected to set up your online store product catalogue (up to 10 products for Premium Plan)

For each product (up to 10), [we / I] collect:

Product name
Product photo (JPG or PNG upload, max 1 MB)
Stock quantity
Product category
Category image (optional upload)
Price
Key product details (materials, dimensions, specifications — max 1,000 characters)

Product information and images you provide are used exclusively to build your online store. Your product data is your business property and will be delivered back to you as part of the completed website template.

Stage 7 — Shipping & Logistics — Application Form — Page 5. Collected to configure your store’s shipping and delivery settings (up to 3 countries for Premium Plan)

For each target market (Primary, Second, and Third), [we / I] collect:

Target country
Courier name (up to 2 options per country)
Shipping cost per courier option
Free shipping threshold (optional)

Shipping information is used solely to configure your WooCommerce store’s delivery settings. [We / I] do not share your logistics preferences with any courier or third party.

Information Automatically Collected
When you visit [our / my] Website, the following technical information is collected automatically:
• IP address and approximate location (country/city level)
• Browser type, version, and language settings
• Device type, operating system, and hardware model
• Pages viewed, links clicked, and time spent on pages
• Referring URLs and exit pages
• Date and time stamps of visits

Sensitive Information
[We / I] do NOT collect, process, or store any sensitive personal information, including racial or ethnic origin, religious beliefs, health or medical data, biometric data, sexual orientation, or political opinions.

2. HOW DO [WE / I] PROCESS YOUR INFORMATION?

[We / I] process your information only for specific, legitimate purposes directly related to delivering [our / my] eCommerce website building service.

Account Management: To enable you to register, log in, and manage your account
Website Building: To build and deliver your custom eCommerce website using the information you provide across all application form pages.
Payment Processing: To fulfil and manage your order and payment via [our / my] payment provider.
Store Configuration: To configure your store’s products, shipping, branding, social media links, and contact details as specified in your application.
Legal Pages Generation: To generate your store’s legal pages using your business details including company registration and tax numbers.
Customer Support: To respond to your enquiries and resolve service issues.
Administrative Communications: To send order confirmations, delivery updates, and service notices.
Security & Fraud Prevention: To detect and prevent fraudulent or unauthorised activity.
Legal Compliance: To comply with applicable laws and regulations worldwide.

3. LEGAL BASES FOR PROCESSING YOUR INFORMATION

[We / I] only process your personal information when [we / I] have a valid legal basis under applicable law.

3.1 EU & UK Clients (GDPR / UK GDPR)
• Performance of a Contract: The primary basis — processing is necessary to deliver the eCommerce website you have ordered (Article 6(1)(b) GDPR).
• Legal Obligation: Where processing is required to comply with applicable laws (Article 6(1)(c) GDPR).
• Legitimate Interests: Where necessary for [our / my] legitimate business interests, balanced against your rights (Article 6(1)(f) GDPR).
• Consent: Where you have given explicit consent, e.g. for marketing communications (Article 6(1)(a) GDPR). You may withdraw consent at any time.

3.2 Canadian Clients (PIPEDA / Quebec Law 25)
[We / I] process your information where you have given express or implied consent, or where processing is permitted by law without consent. Quebec residents have additional rights under Law 25 (Act respecting the protection of personal information in the private sector).

3.3 Australian Clients (Privacy Act 1988)
[We / I] collect and process personal information under Australian Privacy Principle 3 (APP 3). [Our / My] collection of your information is reasonably necessary for the delivery of the Service.

3.4 All Other Jurisdictions
[We / I] apply the legal basis most appropriate under your local law. Your statutory rights are never diminished by this policy.

4. WHEN AND WITH WHOM DO [WE / I] SHARE YOUR INFORMATION?

[We / I] do not sell your personal data. [We / I] share it only in limited, necessary circumstances as described below.

Payment Provider: To process your payment securely under PCI DSS compliance. [We / I] do not access your full card data.
Website Analytics: [We / I] use Google Analytics to analyse website usage. Google may process your IP address and usage data. See Clause 6 for details.
[LIMITED COMPANY ONLY: Authorised Personnel — only [our / my] authorised employees or contractors with a strict need-to-know access your data, under confidentiality obligations. DELETE if Sole Trader.]
[SOLE TRADER ONLY: No Staff or Outsourcing — as a sole freelancer, only I personally handle all client data. No staff or subcontractors access your data without your prior explicit knowledge and agreement. DELETE if Limited Company.]
Business Succession: If [we / I] transfer, sell, or restructure [our / my] business or client contracts, your information may be transferred with prior notice to you.
Legal Requirements: Where required by law, court order, or government authority of any jurisdiction.
Protection of Rights: To protect [our / my] rights, safety, or property, or that of [our / my] clients or others.

[We / I] have NOT sold or shared any personal information to third parties for commercial purposes, and [we / I] do not intend to do so.

5. THIRD-PARTY WEBSITES

[Our / My] Website may contain links to third-party websites or services (including payment processors, social media platforms, and courier/logistics services referenced in your application form). [We / I] have no control over and are not responsible for the content, privacy policies, or security of those third parties. [We / I] encourage you to review the privacy policies of any external sites you visit.

6. COOKIES AND TRACKING TECHNOLOGIES

[We / I] use cookies and similar tracking technologies to operate [our / my] Website, improve your experience, and analyse usage of [our / my] Services.

6.1 Types of Cookies Used
• Essential Cookies: Required for the Website to function (e.g. login sessions, order processing, multi-page form progress). These cannot be disabled without affecting core functionality.
• Analytics Cookies: To understand how visitors use [our / my] Website (Google Analytics).
• Preference Cookies: To remember your settings and application form progress.

6.2 Google Analytics
[We / I] use Google Analytics to track Website usage. Your IP address and usage data may be processed by Google LLC in the United States.
• To opt out of Google Analytics tracking: https://tools.google.com/dlpage/gaoptout
• Google’s privacy policy: https://policies.google.com/privacy

6.3 Your Cookie Choices
You can control or disable cookies through your browser settings. Disabling certain cookies may affect Website functionality, including your ability to complete the application form. For full details, please refer to [our / my] Cookie Policy published at our website.

6.4 EU / UK Cookie Consent
Where required by the ePrivacy Directive and GDPR (and their UK equivalents), [we / I] will obtain your consent before setting non-essential cookies.

7. HOW LONG DO [WE / I] KEEP YOUR INFORMATION?

[We / I] retain information only as long as necessary for [our / my] Services and legal obligations, applying the longest applicable retention period across all jurisdictions [we / I] serve.

Data Type	Retention Period
Account data	Duration of your account plus up to 7 years for legal and tax compliance.
Application form data (store details, products, branding, shipping)	Duration of your project plus up to 7 years for tax and legal compliance.
Uploaded images and brand assets	Until your project is complete and delivered, then deleted within 90 days unless you request earlier deletion.
Invoice and transaction records	Up to 7 years for tax compliance across all jurisdictions served.
Support communications	Up to 3 years after resolution.
Marketing communications (if applicable)	Until you withdraw consent or unsubscribe.
Website analytics data	As per Google Analytics retention settings (default: 26 months).

Why 7 years? Different countries require different minimum retention periods for business records: UK self-employed (5 years), EU (typically 7–10 years), USA (3–7 years), Australia (5 years), Canada (6 years). [We / I] apply 7 years as the globally conservative standard to ensure compliance regardless of where [we are / I am] based.

When information is no longer needed, [we / I] will securely delete or anonymise it in accordance with applicable law.

8. HOW DO [WE / I] KEEP YOUR INFORMATION SAFE?

[We / I] implement appropriate technical and organisational security measures to protect your data, regardless of where [we are / I am] physically located.

Encryption: SSL/TLS encryption for all data transmitted via [our / my] Website and application forms.
Payment Security: Card data processed by [our / my] payment provider under PCI DSS compliance. [We / I] have no access to your full card details.
[LIMITED COMPANY ONLY: Access Controls — Only authorised personnel with a strict need-to-know basis access your data, under confidentiality obligations. DELETE if Sole Trader.]
[SOLE TRADER ONLY: Sole Access — As a sole freelancer, only I have access to your personal and business data. No staff or assistants access your data without prior explicit agreement with you. DELETE if Limited Company.]
Device Security: Password protection and encryption on all devices used for work.
Uploaded File Security: Product images and brand assets stored in secure, access-controlled cloud storage.
Secure Communications: Encrypted email and messaging where possible.
Incident Response: If a personal data breach occurs, [we / I] will notify affected clients and relevant supervisory authorities as required by applicable law, including within 72 hours where required by GDPR/UK GDPR.

No method of electronic transmission or storage is 100% secure. While [we / I] take all reasonable precautions, [we / I] cannot guarantee absolute security against cyberattacks or unauthorised access.

9. CHILDREN’S PRIVACY

[Our / My] Services are not directed at individuals under 18 years of age. [We / I] do not knowingly collect or process personal information from children under 18. If [we / I] become aware that a child under 18 has provided personal information, [we / I] will promptly delete such data. Please contact [us / me] if you believe [we / I] have inadvertently collected information from a child.

10. YOUR PRIVACY RIGHTS BY REGION

Regardless of where [we are / I am] based, [we / I] honour your privacy rights based on your location. If your local law provides stronger rights, those rights apply to you.

10.1 EU & UK Residents (GDPR / UK GDPR)
• Right of Access (Art. 15): Request a copy of the personal and business data [we / I] hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate data.
• Right to Erasure (Art. 17): Request deletion of your data (‘right to be forgotten’), subject to legal retention obligations.
• Right to Restrict Processing (Art. 18): Request that [we / I] limit how [we / I] use your data.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.
• Right to Complain: Lodge a complaint with your national data protection authority (UK: ico.org.uk; EU: your Member State’s supervisory authority).

10.2 California Residents (CCPA / CPRA)
• Right to Know: What personal information [we / I] collect, use, and share.
• Right to Access: Obtain a copy of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Delete: Request deletion of your personal information.
• Right to Opt Out: Of the sale or sharing of personal information. ([We / I] do not sell or share data for commercial purposes.)
• Right to Non-Discrimination: For exercising your privacy rights.

10.3 Other US State Residents
Residents of Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Texas (TDPSA), Montana, Oregon, and other states with applicable privacy laws have similar rights. [We / I] honour all such rights upon verified request to our email.

10.4 Australian Residents (Privacy Act 1988)
You have the right to access and correct your personal information under Australia’s Privacy Act 1988 and the Australian Privacy Principles (APPs). To lodge a complaint, contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10.5 New Zealand Residents (Privacy Act 2020)
You have the right to access and correct your personal information under the Privacy Act 2020. To lodge a complaint, contact the Privacy Commissioner at privacy.org.nz.

10.6 Canadian Residents (PIPEDA / Quebec Law 25)
You have the right to access and correct personal information [we / I] hold, and to withdraw consent at any time. Quebec residents have additional rights under Law 25, including data portability and the right to object to profiling. Please contact [us / me].

10.7 Hong Kong Residents (PDPO Cap. 486)
Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to access and correct your personal data. You may contact the Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk.

10.8 Taiwan Residents (PDPA)
Under Taiwan’s Personal Data Protection Act (PDPA), you have the right to query, review, copy, supplement, correct, discontinue processing, or delete your personal data (Article 3 PDPA). Please contact [us / me].

10.9 Singapore Residents (PDPA 2012)
Under Singapore’s Personal Data Protection Act 2012, you have the right to access and correct your personal data, and to withdraw consent. You may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

10.10 How to Exercise Your Rights

Channel	Details
Email	info@ashopai.com — please include your full name, email address, country of residence, and a description of your request
Online	Privacy Policy
Response Time	[We / I] will respond within 30 days (or such shorter period as required by your local law)
Identity Verification	[We / I] will verify your identity before processing any request

11. DO-NOT-TRACK FEATURES

As no uniform international standard for recognising Do-Not-Track (“DNT”) signals has been finalised, [we / I] do not currently respond to DNT signals automatically. If a binding standard is adopted, [we / I] will update this policy accordingly

12. UNITED STATES RESIDENTS — SPECIFIC PRIVACY RIGHTS

[We / I] honour all applicable US state privacy rights upon verified request.

12.1 Categories of Personal Information Collected

Category	Examples	Collected?
Identifiers	Name, email, username, IP address, phone, billing address	YES
Personal Info (Cal. Records)	Name, contact info, billing address, business reg., VAT number	YES
Commercial Information	Order details, product info, pricing, shipping preferences	YES
Business / Professional Info	Company name, store address, business category, company reg. no.	YES
Protected Characteristics	Gender, age, ethnicity	NO
Biometric Information	Fingerprints, voiceprints	NO
Internet / Network Activity	Pages viewed, browser type, IP address, usage data	YES
Geolocation Data	Approximate location from IP (country/city level only)	YES
Audio / Electronic / Sensory	Product images and brand assets (uploaded by you)	YES
Education Information	Student records	NO
Sensitive Personal Info	Any sensitive data categories	NO

Note on Uploaded Images: Product photos and brand assets you upload are considered ‘Audio/Electronic/Sensory’ data under California law. These are used exclusively to build your website and are never shared for commercial purposes.

12.2 Your Rights

Depending on your US state of residence, you may have the right to: know what personal information [we / I] collect and how it is used; access a copy of your personal information; correct inaccurate data; delete your data; opt out of targeted advertising ([we / I] do not engage in this); data portability; and be free from discrimination for exercising your rights.

12.3 Submitting a Request

Email us with your full name, email address, US state of residence, and description of your request. [We / I] will verify your identity before processing.

12.4 Appeals

If [we / I] decline your request, you may appeal by emailing us. If the appeal is denied, you may contact your state Attorney General.

12.5 California ‘Shine the Light’ Law

[We / I] do not share personal data with third parties for direct marketing purposes. California residents may contact us to confirm this.

13. OTHER REGIONS — SPECIFIC PRIVACY RIGHTS

Region	Framework & Supervisory Authority
Australia	Privacy Act 1988 (Cth) & Australian Privacy Principles — OAIC: oaic.gov.au
New Zealand	Privacy Act 2020 — Privacy Commissioner: privacy.org.nz
Canada (Federal)	PIPEDA — Privacy Commissioner of Canada: priv.gc.ca
Canada (Quebec)	Act respecting the protection of personal information in the private sector (Law 25) — Commission d’accès à l’information: cai.gouv.qc.ca
Hong Kong SAR	PDPO (Cap. 486) — PCPD: pcpd.org.hk
Taiwan	PDPA (Article 3 rights) — National Development Council / MOJ
Singapore	PDPA 2012 — PDPC: pdpc.gov.sg
Switzerland	Federal Act on Data Protection (nFADP) — FDPIC: edoeb.admin.ch
Other Jurisdictions	[We / I] apply the applicable local privacy law. Contact info@aiwebshopsy.com to exercise your rights.

14. INTERNATIONAL DATA TRANSFERS

[We / I] may process and store your personal data in countries other than your own. This may occur because [our / my] service providers (including Google Analytics and payment processors) are located in different countries.

Regardless of where [we are / I am] located or where your data is processed, [we / I] ensure your data is protected to the standard required by your local law, through one or more of the following mechanisms:

EU/UK Standard Contractual Clauses (SCCs) and International Data Transfer Agreements (IDTAs) for transfers from the EU and UK respectively;
Adequacy decisions by the European Commission or UK ICO where applicable;
Appropriate contractual safeguards with all data processors;
Binding Corporate Rules or other approved transfer mechanisms where relevant.

18. Termination

[SOLE TRADER: Personal Commitment — Your privacy rights do not depend on where I am physically based. As a sole freelancer, I personally ensure the same high standard of data protection is applied to every client worldwide, at every stage of your project. DELETE if Limited Company.]

15. GOVERNING LAW & DISPUTE RESOLUTION

[LIMITED COMPANY: This Privacy Policy is governed by the laws of [jurisdiction of incorporation]. Nothing in this clause limits your rights under the mandatory applicable privacy law of your country or state of residence. DELETE and replace with Sole Trader version if applicable.]

[SOLE TRADER: As a globally mobile sole trader, [I do / I] not fix this policy to any single country’s law as the exclusive governing law. Your privacy rights are determined by the applicable laws of your country or state of residence. DELETE and replace with Limited Company version if applicable.]

Any privacy disputes will first be attempted to be resolved through good-faith negotiation within 30 days of written notice to our email address. You always retain the right to lodge a complaint with your local data protection authority without first contacting [us / me].

[SOLE TRADER ONLY: Note on Location Changes — If I relocate to a new country that triggers additional legal obligations (e.g. registering as a data controller with a new national authority), I will update this policy and notify affected clients within 30 days. DELETE if Limited Company.]

16. UPDATES TO THIS PRIVACY POLICY

[We / I] may update this Privacy Policy from time to time to reflect changes in [our / my] practices, technology, legal requirements, or [our / my] location. The updated version will be indicated by a revised “Last Updated” date at the top of this policy. If [we / I] make material changes, [we / I] will notify you by email or by a prominent notice on the Website. [We / I] encourage you to review this policy regularly.

17. HOW TO CONTACT [US / ME]

For questions, comments, concerns, or requests relating to this Privacy Policy or [our / my] data practices, please contact:

Field	Details
Trading / Operating Name	aShopAI.com
Data Controller	[LIMITED COMPANY: [Webshopsy Limited], Company No. [14839710], [England & Wales]] [SOLE TRADER: [To Hin Fai] (Self-Employed Independent, acting as sole data controller globally)]
Website	www.ashopai.com
Email	info@ashopai.com
Privacy Policy URL	Privacy Policy
Response Time	[We / I] will respond within 30 days of receipt
[LIMITED COMPANY ONLY] Data Protection Registration	[ICO Reference No. ZXXXXXXXX (UK) / equivalent — delete if not applicable]
[SOLE TRADER ONLY] Operating Model	Globally mobile — location-neutral policy applies

18. HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

Based on the applicable laws of your country or state of residence, you may have the right to access, correct, delete, or port your personal information, or withdraw consent to [our / my] processing. To make any such request:

Method	Details
Email	Send your request to our email with: your full name; your registered email address; your country / state of residence; and a clear description of your request
Response	[We / I] will respond within 30 days after verifying your identity. Some requests may take up to 60 days for complex or multiple requests (EU/UK: extendable to 3 months with notice).
Identity Verification	[We / I] may ask you to provide proof of identity before processing your request, to protect against unauthorised access to your data.
Exceptions	Certain retention obligations under tax and legal compliance laws may prevent [us / me] from immediately deleting all data. [We / I] will explain any applicable exceptions clearly.

PRIVACY POLICY