This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We understand the critical importance of Your privacy and are committed to protecting Your personal data with the utmost care and transparency. Our aim is to provide a clear and comprehensive overview of how Your information is handled, ensuring You are fully informed and empowered regarding Your data.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws, reflecting our commitment to global privacy standards.

1. Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. These definitions are crucial for understanding the scope and intent of this Privacy Policy, ensuring clarity and consistency throughout the document. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique, personalized account created for You to access specific features and functionalities within our Service, such as managing your profile, viewing order history, or saving preferences.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" signifies ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority. This includes our parent company, subsidiaries, and any joint venture partners.
  • Application refers to GlobalBuy24, the comprehensive software program provided by the Company, which is meticulously developed and continuously operated using the FlutterFlow platform to ensure a robust and efficient user experience.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to GlobalBuy24, with its registered office at Huttenstraße 25, 13353 Berlin, Germany. For the purpose of the GDPR, the Company acts as the Data Controller, determining the purposes and means of processing Your Personal Data.
  • Country refers to: Germany, specifically Berlin, which is within the European Economic Area (EEA), meaning our data processing activities are subject to the General Data Protection Regulation (GDPR).
  • Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. This signifies our responsibility for Your data.
  • Device means any electronic device that can access and utilize the Service, encompassing a wide range of hardware such as personal computers, mobile phones (smartphones), or digital tablets.
  • Personal Data is any information that directly or indirectly relates to an identified or identifiable individual. This can include anything from a name or email address to an IP address or a unique device identifier, provided it can be linked back to a specific person.
  • Service refers to the Application, GlobalBuy24, and all the functionalities, content, and services provided through it.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. This broadly refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service (e.g., hosting, customer support), or to assist the Company in analyzing how the Service is used (e.g., analytics providers).
  • Usage Data refers to data collected automatically, either generated by the use of the Service itself or derived from the Service infrastructure. This includes technical information about Your interaction with the Service, such as the duration of a page visit, features accessed, or error reports.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. This refers to the user whose data is being collected and processed.

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You, or to enable specific features of the Service. This information is collected to facilitate Your use of GlobalBuy24, manage Your account, and fulfill Your requests. Personally identifiable information may include, but is not limited to:

  • Email address: Primarily used for account registration, login, sending transactional notifications (e.g., order confirmations, password resets), and for direct communication regarding Your account or inquiries.
  • First name and last name: Used for personalizing Your experience within the app, addressing You correctly, and for shipping purposes.
  • Phone number: May be collected for order verification, delivery notifications, or for direct customer support communication, especially for critical updates related to Your purchases.
  • Address, State, Province, ZIP/Postal code, City: Essential for processing and shipping Your orders, calculating shipping costs, and ensuring accurate delivery of products purchased through the Service. This information is directly tied to the fulfillment of Your purchase contracts.

Usage Data

Usage Data is collected automatically when You interact with or use the Service. This data helps us understand how users engage with GlobalBuy24, enabling us to improve its performance, stability, and user experience.

Usage Data may include information such as Your Device's Internet Protocol address (e.g., IP address), browser type, browser version, the specific pages or screens of our Service that You visit, the precise time and date of Your visit, the duration spent on those pages or screens, unique device identifiers (such as the device's advertising ID or other persistent identifiers), and other diagnostic data related to app performance and stability.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use (e.g., iPhone, Android phone), Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system (e.g., iOS, Android), the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data that helps us troubleshoot and improve the app. This data is crucial for optimizing the app's compatibility and performance across various devices and network conditions.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device. This includes standard log data that web servers typically collect.

Cookies and Similar Technologies

While GlobalBuy24 itself may not directly employ extensive tracking cookies for advertising purposes, the FlutterFlow platform and its integrated services, as well as third-party service providers, may utilize cookies, web beacons, and similar tracking technologies to enhance functionality, analyze usage patterns, and ensure the proper operation of the Service. These technologies may collect information to:

  • Maintain user sessions (e.g., keeping you logged in).
  • Remember user preferences.
  • Analyze site traffic and user behavior for performance optimization.
  • Facilitate secure transactions.

Any such use is primarily for the functional integrity and improvement of the Service. You can instruct Your browser to refuse all cookies or to indicate when a cookie is being sent. However, if You do not accept cookies, You may not be able to use some portions of our Service.

Information Collected while Using the Application

While using Our Application, in order to provide specific features and enhance Your experience, We may collect, with Your explicit prior permission:

  • Information regarding your location: This may include precise location data obtained through GPS, Wi-Fi, or cellular network triangulation. We use this information to provide location-based features, such as identifying nearby stores or services, tailoring product recommendations based on Your region, or facilitating location-specific offers. This information helps us to customize and improve the relevance of Our Service to Your geographic context.

We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company's secure servers and/or a Service Provider's server or it may be simply stored locally on Your device. You maintain full control over this data and can enable or disable access to this information at any time through Your Device settings.

Third-Party Service Providers

Our Application is developed and operated on the FlutterFlow platform. FlutterFlow applications inherently integrate with various default services, which may include Google's Firebase for core functionalities. These services are essential for the operation, analytics, crash reporting, and backend infrastructure of the Application. These integrated services may automatically collect certain Usage Data (as described above) to provide their respective functionalities. For instance, Firebase Analytics may collect data on app usage patterns, user engagement, and crash logs to help us monitor app performance, identify areas for improvement, and debug issues. This data is typically aggregated and anonymized where possible, but may include unique identifiers.

We also use the following specific third-party Service Providers to provide and improve our service, and to facilitate critical functionalities:

  • Fapshi (Payment Gateway): We utilize Fapshi, a third-party payment gateway based in Cameroon, to securely process all payments for goods and services purchased through GlobalBuy24. When You initiate a purchase, You will be securely redirected to Fapshi's dedicated platform to complete the transaction. During this process, Fapshi will collect necessary financial and personal information directly from You, such as Your payment card details, billing address, and transaction amount. Please note that GlobalBuy24 does not directly collect, store, or process Your sensitive payment card details. That information is provided directly to Fapshi, whose collection, use, and handling of Your personal information are governed by their own comprehensive Privacy Policy. We strongly encourage You to review Fapshi's Privacy Policy to understand their data practices: https://www.fapshi.com/en/privacy-policy. Our integration with Fapshi is designed to ensure the highest level of security for Your financial transactions.

3. Use of Your Personal Data

The Company may use Personal Data for the following purposes, each with a specific legal basis as outlined in Section 4:

  • To provide and maintain our Service: This encompasses all activities necessary to ensure the continuous and optimal functioning of GlobalBuy24. It includes monitoring the usage of our Service to identify trends, detect and resolve technical issues, prevent and address security incidents, and manage server infrastructure. By analyzing Usage Data, we can proactively identify bugs, optimize server load, and enhance the overall stability and security of the Application, ensuring a reliable experience for all users. This processing is essential for the legitimate interest of the Company to operate a functional and secure service.
  • To manage Your Account: When You register for an Account, the Personal Data You provide (such as email, name, and contact details) is meticulously used to create and maintain Your unique user profile. This enables You to access and manage personalized functionalities within the Service, including but not limited to viewing Your comprehensive order history, efficiently managing Your saved addresses for quicker checkouts, tracking the real-time status of Your shipments, and utilizing features specifically designed for registered users to enhance their shopping experience. This processing is necessary for the performance of the contract between You and the Company, as it directly supports the core functionality of Your user account.
  • For the performance of a contract: This refers to the fundamental purpose of GlobalBuy24 – facilitating Your purchases and ensuring the seamless execution of transactions. We use Your Personal Data to meticulously process Your orders, securely manage payments (primarily via our trusted Service Provider Fapshi), arrange for the efficient delivery of products to Your specified address, provide comprehensive customer support related to Your purchases (e.g., inquiries about products, delivery status, or order modifications), and handle returns or refunds in accordance with our terms of sale. This also extends to any other contractual agreements You enter into with Us through the Service, ensuring that all terms and conditions are met effectively and transparently. This processing is strictly necessary for the performance of the contract of sale or service with You.
  • To contact You: We may communicate with You through various electronic means to provide essential information. This includes sending critical transactional emails (e.g., order confirmations, shipping updates, password resets, security alerts regarding Your account), important service-related announcements (e.g., changes to terms of service, privacy policy updates, new feature rollouts), and critical security alerts to protect Your account. If enabled by You, mobile application push notifications may be used to provide real-time updates on Your orders, delivery status, or other relevant service information. These communications are vital for the effective provision of our Service, ensuring You are always informed about Your transactions and account security. This processing is based on the necessity for the performance of a contract or our legitimate interest in informing You about service-related matters.
  • To provide You with news, special offers and general information: We may use Your contact information to send You marketing communications about products, services, and events that we genuinely believe may be of interest to You. These communications are tailored based on Your past interactions, purchase history, or inquiries, and could include exclusive promotions, exciting new product announcements, seasonal sales, or updates on categories You've shown interest in. You always retain full control over these communications; You have the unequivocal right to opt out of receiving these marketing communications at any time by simply following the clear unsubscribe instructions provided in every email, or by contacting Us directly through the methods outlined in this Privacy Policy. This processing is based on Your consent or our legitimate interest in promoting our similar products and services to enhance Your shopping experience.
  • To manage Your requests: We use Your Personal Data to efficiently respond to and manage any inquiries, feedback, complaints, or support requests You submit to Us. This includes addressing technical issues You might encounter while using the app, providing personalized assistance with Your account settings, resolving disputes related to orders or services, and fulfilling information requests regarding our products or policies. Our goal is to ensure You receive timely, relevant, and effective support, enhancing Your overall satisfaction with GlobalBuy24. This processing is necessary for the performance of a contract (e.g., customer support related to a purchase) or our legitimate interest in providing effective customer service and maintaining positive user relations.
  • For business transfers: In the event that the Company is involved in a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, Your Personal Data held by Us about our Service users may be among the assets transferred. This transfer would be a necessary part of the business transaction. We will ensure that any such transfer is conducted in a manner that fully respects Your privacy rights and will provide You with prominent notice (e.g., via email or an in-app notification) before Your Personal Data is transferred and becomes subject to a different Privacy Policy. This ensures transparency and allows You to understand the implications of such a transfer. This processing is based on our legitimate interest in facilitating corporate transactions and ensuring business continuity.
  • For other purposes: We may utilize Your information for various internal analytical, research, and operational purposes that contribute to the continuous improvement of GlobalBuy24. This includes conducting in-depth data analysis to understand user behavior patterns, identify emerging usage trends, and gain insights into how our Service is being utilized. We also use this data to determine the effectiveness of our promotional campaigns, personalize Your experience within the app (e.g., customized product displays, relevant notifications), and continuously evaluate and enhance our Service, products, services, marketing strategies, and Your overall user experience. This comprehensive analysis helps us to deliver a more relevant, efficient, and enjoyable Service to You. This processing is based on our legitimate interest in improving our Service and user experience.

For users located in the European Economic Area (EEA) and the UK, our collection and use of Personal Data are always based on a valid legal ground as required by the General Data Protection Regulation (GDPR). The specific legal basis for processing Your Personal Data depends on the type of Personal Data We collect and the particular context in which We collect and use it.

We may process Your Personal Data because:

  • We need to perform a contract with You: This applies when the processing of Your Personal Data is necessary for the performance of a contract to which You are a party, or in order to take steps at Your request prior to entering into a contract. For example, processing Your name and address is necessary to fulfill Your purchase orders, manage Your account, or provide customer support related to a service You have requested. Without this processing, we would be unable to provide the core functionalities of GlobalBuy24.
  • You have given Us permission to do so (Consent): This legal basis applies when You have given us explicit, clear, and unambiguous consent for the processing of Your Personal Data for one or more specific purposes. For instance, we would rely on Your consent to send You marketing communications about new products or special offers, or to collect certain types of sensitive data if it were ever required and explicitly requested. You have the right to withdraw Your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • The processing is in Our legitimate interests and it's not overridden by Your rights: We may process Your Personal Data when it is necessary for the purposes of our legitimate interests, provided that these interests do not override Your fundamental rights and freedoms. Examples of our legitimate interests include:
    • Improving and optimizing our Service, products, and user experience.
    • Ensuring the security and integrity of our Application and systems.
    • Detecting and preventing fraud or other illegal activities.
    • Conducting internal analytics and research to understand user behavior and market trends.
    • Facilitating business transfers and corporate transactions.
    We always conduct a balancing test to ensure that our legitimate interests are proportionate to Your privacy rights.
  • To comply with the law (Legal Obligation): We may process Your Personal Data where it is necessary for compliance with a legal obligation to which the Company is subject. This includes, but is not limited to, obligations related to tax, accounting, consumer protection laws, or responding to valid legal requests from public authorities (e.g., court orders, government agency requests) in accordance with applicable laws.

5. Sharing Your Personal Information

We may share Your personal information in the following situations, always striving to ensure that Your data is protected and used only for the purposes disclosed:

  • With Service Providers: We engage trusted third-party Service Providers to perform various functions on Our behalf, enabling us to operate and improve GlobalBuy24 efficiently. These providers may include cloud hosting services, customer support platforms, email communication services, and analytics providers (such as those integrated through FlutterFlow like Firebase for analytics and crash reporting). We may share Your personal information with these Service Providers to monitor and analyze the use of our Service, to process payments (e.g., Fapshi), to facilitate communications with You, or to assist with technical support. These service providers act as data processors for the Company and are strictly bound by contractual agreements to protect Your data, adhere to stringent confidentiality requirements, and use it solely for the specific purposes for which they were engaged, in compliance with applicable data protection laws. This ensures that Your data is handled securely and responsibly even when processed by external entities.
  • For business transfers: In the event that the Company is involved in a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, Your Personal Data held by Us about our Service users may be among the assets transferred. This transfer would be a necessary part of the business transaction. Should such a transfer occur, We are committed to ensuring that the acquiring entity is bound by the terms of this Privacy Policy or provides a new privacy policy that offers comparable protection for Your Personal Data. We will provide You with prominent notice (e.g., via email or an in-app notification) before Your Personal Data is transferred and becomes subject to a different privacy policy.
  • With Affiliates: We may share Your information with Our affiliates for various legitimate internal administrative purposes, including centralized data processing, shared IT services, and consolidated business operations. This allows us to operate more efficiently across our group of companies and provide a more seamless and integrated service. For instance, Your account information or usage data might be shared with an affiliate responsible for product development, technical infrastructure, or customer support within the GlobalBuy24 corporate group. In all such instances, we will impose strict contractual obligations on those affiliates to adhere rigorously to the terms of this Privacy Policy and to implement equivalent data protection and security measures to safeguard Your information. Affiliates include Our parent company and any other subsidiaries, joint venture partners, or other companies that We control or that are under common control with Us.
  • With business partners: We may strategically collaborate with trusted business partners to offer You certain products, services, or promotions that we believe may significantly enhance Your overall experience with GlobalBuy24. This could involve co-branded offers, exclusive discounts, loyalty programs, or integrated services that complement our core offerings (e.g., shipping partners, product suppliers). When sharing Your information with these partners, we adhere to a principle of data minimization, providing only the necessary data required for the specific purpose, which may include aggregated or de-identified data where possible. If personal data such as Your email address is shared for direct marketing purposes by our partners, it will only be done with Your explicit and informed consent, and You will always have a clear and accessible option to opt-out of such communications. Our business partners are contractually bound to protect Your data and to use it solely for the purposes agreed upon, in accordance with their own privacy policies and all applicable data protection laws.
  • With other users: GlobalBuy24 may incorporate interactive features that allow You to engage with other users or share information in public areas of the Service. Examples of such public areas include publicly visible product review sections, community forums, comment sections on product listings, or user profiles if they are configured for public visibility by You. When You choose to share personal information or otherwise interact in these public areas (e.g., Your username, profile picture, the content of Your comments or reviews, or location if explicitly shared by You in a public post), such information may be viewed by all users of the Service and may also be publicly distributed outside of the Service (e.g., through search engines). We strongly urge You to exercise extreme caution and discretion when deciding to disclose Your Personal Data in public areas, as We cannot control the actions of other users or third parties who may access, copy, or use such publicly available information.
  • With Your consent: We are committed to transparency and Your control over Your data. Therefore, We may disclose Your personal information for any other purpose not explicitly mentioned in this Privacy Policy, but only when we have obtained Your clear, specific, informed, and affirmative consent to do so. This ensures that You have full control and understanding over the sharing of Your data for purposes outside of our standard operational and service provisions, and You can withdraw this consent at any time.

6. Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is strictly necessary for the purposes set out in this Privacy Policy, or for the duration required by applicable legal and regulatory obligations. The specific retention period for different types of Personal Data is determined by various factors, including:

  • The purpose for which the data was collected (e.g., account management, transaction fulfillment).
  • The nature of the data (e.g., sensitive vs. non-sensitive).
  • Any legal or regulatory requirements that mandate specific retention periods (e.g., tax laws, consumer protection laws, anti-money laundering regulations).
  • Our legitimate business needs, such as dispute resolution, fraud prevention, auditing, and internal record-keeping.

We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable tax or accounting laws), resolve disputes, and enforce our legal agreements and policies. Once the retention period expires, Your Personal Data will be securely deleted or anonymized in a manner that prevents its re-identification.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time compared to Personal Data, as it is often aggregated and less directly identifiable. However, Usage Data may be retained for longer periods when this data is specifically used to strengthen the security of Our Service (e.g., analyzing unusual login patterns, detecting and preventing cyberattacks), to improve the functionality of Our Service (e.g., understanding feature usage to guide development, optimizing user flows), or when We are legally obligated to retain this data for longer time periods (e.g., for audit trails or regulatory compliance purposes related to system performance).

7. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices in Berlin, Germany, and in any other places where the parties involved in the processing are located. This means that Your information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in Your jurisdiction.

As a company based in Germany, we are subject to the General Data Protection Regulation (GDPR). When transferring Personal Data outside the European Economic Area (EEA) or the UK, we take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and the stringent requirements of the GDPR. This means that no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including appropriate safeguards to ensure the security of Your data and other personal information. These safeguards may include, but are not limited to:

  • Adequacy Decisions: Transferring data to countries or organizations recognized by the European Commission or competent UK authorities as providing an adequate level of data protection, ensuring a comparable standard of privacy protection.
  • Standard Contractual Clauses (SCCs): Implementing legally binding contracts approved by the European Commission or competent UK authorities that impose robust data protection obligations on the recipient of the data outside the EEA/UK, including security measures and data subject rights.
  • Binding Corporate Rules (BCRs): For transfers within a corporate group, implementing internal rules approved by data protection authorities, which provide a robust framework for international data transfers.
  • Your Explicit Consent: In specific situations, we may rely on Your explicit consent for the transfer, provided that You have been fully informed of the potential risks of such transfers for You due to the absence of an adequacy decision and appropriate safeguards. This consent is always voluntary and can be withdrawn.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to such transfers, provided the aforementioned safeguards are in place to ensure the continued protection of Your data.

8. Your Data Protection Rights under GDPR

If You are a resident of the European Economic Area (EEA) or the UK, You have certain comprehensive data protection rights under the General Data Protection Regulation (GDPR). We are committed to facilitating the effective exercise of these rights. You have the right to:

  • The right to access (Article 15 GDPR): You have the right to request copies of Your Personal Data that we hold. This allows You to verify the lawfulness of the processing. We may charge You a small fee for this service if the request is manifestly unfounded, excessive, or repetitive.
  • The right to rectification (Article 16 GDPR): You have the right to request that We correct any information You believe is inaccurate or incomplete. We are obliged to correct inaccurate Personal Data or complete incomplete Personal Data without undue delay.
  • The right to erasure (Right to be Forgotten) (Article 17 GDPR): You have the right to request that We erase Your Personal Data, under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected, or when You withdraw consent and there is no other legal ground for processing.
  • The right to restrict processing (Article 18 GDPR): You have the right to request that We restrict the processing of Your Personal Data, under certain conditions, for example, if You contest the accuracy of the data, or if the processing is unlawful but You oppose erasure.
  • The right to object to processing (Article 21 GDPR): You have the right to object to Our processing of Your Personal Data, under certain conditions, particularly where the processing is based on legitimate interests (unless we demonstrate compelling legitimate grounds) or for direct marketing purposes.
  • The right to data portability (Article 20 GDPR): You have the right to request that We transfer the data that we have collected to another organization, or directly to You, in a structured, commonly used, and machine-readable format, under certain conditions. This applies to data processed by automated means based on consent or a contract.
  • The right to withdraw consent (Article 7(3) GDPR): Where we rely on Your consent to process Your Personal Data, You have the right to withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • The right to lodge a complaint with a supervisory authority (Article 77 GDPR): You have the right to complain to a data protection authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority in the EEA or the UK. In Germany, this would be the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information directly. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us. Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so (e.g., for tax or legal compliance), or when it is necessary for the establishment, exercise, or defense of legal claims.

9. Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, asset sale, or similar business transaction, Your Personal Data may be transferred as part of that transaction. This is a standard part of corporate reorganizations. We will provide You with prominent notice (e.g., via email and/or a prominent notice on Our Service) before Your Personal Data is transferred and becomes subject to a different Privacy Policy, ensuring You are fully aware of any changes to the handling of Your data and can exercise any applicable rights.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or a legitimate request from a government agency). We are committed to transparency and will only comply with such requests where we believe they are legally valid and necessary. We will endeavor to notify You of such requests unless legally prohibited from doing so.

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation (e.g., maintaining financial records for tax purposes, fulfilling audit requirements, or adhering to industry-specific regulations).
  • Protect and defend the rights or property of the Company (e.g., enforcing our terms of service, defending against intellectual property infringement claims, or preventing unauthorized use of our Service).
  • Prevent or investigate possible wrongdoing in connection with the Service (e.g., detecting and addressing fraudulent activities, security breaches, or other illegal acts that may compromise the integrity of our Service or the safety of our users).
  • Protect the personal safety of Users of the Service or the public (e.g., in emergencies or situations posing a significant threat to life or physical integrity).
  • Protect against legal liability (e.g., responding to legal claims, subpoenas, or litigation where the disclosure of data is deemed essential for our legal defense).

10. Security of Your Personal Data

The security of Your Personal Data is of paramount importance to Us. We implement a variety of commercially acceptable technical and organizational measures designed to protect Your Personal Data from unauthorized access, use, alteration, and disclosure. These measures are continually reviewed and updated to adapt to evolving security threats. Our robust security framework includes, but is not limited to:

  • Encryption: Utilizing encryption technologies (e.g., Transport Layer Security/SSL for data in transit and encryption at rest for sensitive data) to protect data during transmission over networks and while stored on our servers.
  • Access Controls: Implementing strict physical, administrative, and technical access controls to limit who can access Personal Data within the Company, based on a "need-to-know" and "least privilege" principle, ensuring only authorized personnel can access Your data for legitimate purposes.
  • Data Minimization: Adhering to the principle of collecting only the Personal Data that is strictly necessary for the stated purposes, thereby reducing the amount of data potentially at risk.
  • Regular Audits and Assessments: Periodically reviewing our security practices, conducting vulnerability assessments, penetration testing, and security audits to identify and promptly address potential weaknesses in our systems and processes.
  • Secure Storage: Storing data on secure servers hosted in reputable data centers with appropriate physical security measures, environmental controls, and robust digital security protocols (e.g., firewalls, intrusion detection systems).
  • Employee Training: Ensuring our staff receives regular training on data protection, security best practices, and confidentiality obligations.

However, it is crucial to remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means and best practices to protect Your Personal Data, We cannot guarantee its absolute security. We encourage You to also take proactive steps to protect Your personal information, such as using strong, unique passwords for Your account, enabling multi-factor authentication where available, and being cautious about sharing Your account details or personal information online.

11. Children's Privacy

Our Service does not knowingly address anyone under the age of 13. We are committed to protecting the privacy of children and do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You become aware that Your child has provided Us with Personal Data without Your verifiable consent, please contact Us immediately. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We will take prompt and reasonable steps to remove that information from Our servers and cease processing it, in compliance with applicable laws.

Furthermore, if We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent or guardian for children above 13 (e.g., under specific GDPR provisions for children aged 13-16), We may require Your parent's or guardian's verifiable consent before We collect and use that information. This ensures compliance with age-specific consent requirements for data processing.

Our Service may contain links to other websites that are not operated by Us. These links are provided solely for Your convenience and information. For example, a link might direct You to a product manufacturer's website or a news article related to a feature. If You click on a third-party link, You will be directed away from our Service to that third party's site. We strongly advise You to review the Privacy Policy of every external site You visit, as their policies and data practices may differ significantly from ours.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We do not endorse or make any representations about third-party websites. Your interactions with any third-party website linked from our Service are solely at Your own risk, and we encourage you to exercise caution and make informed decisions before providing any personal information on such sites.

13. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time to reflect changes in our data processing practices, to comply with new legal requirements, or to incorporate technological advancements and new features within GlobalBuy24. We will notify You of any significant changes by posting the new Privacy Policy on this page, indicating the "Last updated" date at the top.

For material changes that affect how Your Personal Data is processed, we will endeavor to let You know via email and/or a prominent notice within Our Service (e.g., an in-app banner or pop-up message) prior to the change becoming effective. This ensures You have sufficient time to review the changes and understand their implications. We encourage You to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after the revised Privacy Policy has become effective indicates Your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy, Your data, or wish to exercise any of Your data protection rights, You can contact us using the following methods: