GSMXCODE

1. Introduction & Scope

1.1. Policy Application

This Privacy Policy applies to all personal data collected by GSMXCODE through our Platform, services, and any related interactions. This policy is incorporated by reference into our Terms of Service.

1.2. Legal Compliance

We comply with global privacy regulations including:

1.3. Data Controller Information

GSMXCODE acts as the data controller for personal data processed through our Platform:

2. Data We Collect

2.1. Personal Information Collected

We collect the following categories of personal data:

2.2. KYC/AML Data Collection

For compliance with financial regulations and payment processor requirements, we may collect:

• Government-issued identification documents
• Proof of business address and registration
• Proof of payment method ownership
• Business license and certification documents

2.3. Automated Data Collection

We automatically collect technical information including:

• IP addresses and geographic location data
• Device type, operating system, and browser information
• Usage patterns and platform interaction data
• Security and authentication logs

3. How We Use Your Data

3.1. Primary Usage Purposes

We use personal data for the following business purposes:

3.2. Legitimate Business Interests

We process data based on legitimate interests including:

• Platform security and abuse prevention
• Service quality improvement and optimization
• Business operations and administrative purposes
• Network and information security
• Direct marketing (where permitted by law)

3.3. Legal Basis for Processing

All data processing activities are based on one or more legal grounds:

4. Data Sharing & Disclosure

4.1. Third-Party Service Providers

We share data with the following categories of service providers:

4.2. Legal Disclosures

We may disclose personal data when required by law or necessary to:

• Comply with legal processes or governmental requests
• Protect our rights, property, or safety
• Enforce our Terms of Service or other agreements
• Prevent or investigate fraud, security breaches, or other wrongdoing

4.3. Business Transfers

In the event of a merger, acquisition, or sale of all or portion of our assets, user data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

5. Data Protection & Security

5.1. Security Measures

We implement comprehensive technical and organizational security measures:

5.2. Data Breach Procedures

In the event of a data breach, we will:

1. Immediately investigate and contain the breach
2. Notify affected users and regulatory authorities as required by law
3. Provide guidance on protective measures users can take
4. Implement corrective actions to prevent future breaches

5.3. Security Limitations

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.

6. Your Privacy Rights

6.1. Comprehensive Rights Overview

Depending on your location and applicable laws, you may have the following rights:

6.2. Exercise Your Rights

To exercise your privacy rights:

• Email: [email protected] with "Privacy Rights Request" in subject
• Use platform privacy settings where available
• Contact us through our support channels

We respond to all legitimate requests within 30 days and may request verification of your identity before processing.

6.3. Complaint Procedures

If you have concerns about our data handling practices, you may:

• Contact us first to resolve the issue directly
• Lodge a complaint with your local data protection authority
• Seek legal remedies as provided by applicable law

7. Cookies & Tracking Technologies

7.1. Cookies Usage

We use cookies and similar technologies for the following purposes:

7.2. Cookie Management

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie consent management platform
• Opt-out mechanisms for specific tracking technologies
• Platform privacy settings where available

8. International Data Transfers

8.1. Global Operations

As a global service provider, we may transfer and process data internationally:

• Primary data processing in the Singapore
• Backup and disaster recovery in multiple jurisdictions
• Third-party service providers located globally

8.2. Transfer Safeguards

All international data transfers are protected by appropriate safeguards:

• EU Standard Contractual Clauses (SCCs)
• UK International Data Transfer Agreement
• Adequacy decisions where applicable
• Binding Corporate Rules for intra-company transfers
• Additional technical and organizational measures

8.3. Legal Basis for Transfers

International data transfers are conducted under legal mechanisms that ensure adequate protection of your personal data in compliance with applicable privacy laws.

9. Data Retention

9.1. Retention Periods

We retain personal data only as long as necessary for legitimate business purposes:

9.2. Deletion Procedures

Upon expiration of retention periods, data is:

• Permanently deleted from active systems
• Removed from backup systems during routine cycles
• Anonymized for statistical purposes where appropriate

10. Children's Privacy

10.1. Age Restrictions

Our services are not intended for individuals under the age of 18:

• We do not knowingly collect data from children under 18
• Accounts may only be created by individuals 18 years or older
• Business accounts require proof of business registration

10.2. Parental Controls

If you believe we have collected data from a child under 18, please contact us immediately at [email protected] and we will promptly investigate and take appropriate action.

11. Policy Updates

11.1. Update Procedures

We may update this Privacy Policy to reflect:

• Changes in our data processing practices
• Legal or regulatory requirements
• Service enhancements or modifications
• User feedback and industry standards

11.2. Notification of Changes

For material changes, we provide:

• 30 days advance notice via email
• Platform notifications and announcements
• Updated effective date clearly displayed
• Summary of key changes

11.3. Continued Use

Continued use of our services after policy updates constitutes acceptance of the modified terms. Users who do not agree with changes should cease using our services and request account deletion.

15. Official Contact & Support