General Data Protection Regulation (GDPR) Policy
1. Introduction
Neoflow (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This GDPR Policy explains how we collect, use, and process personal data in compliance with the General Data Protection Regulation (EU Regulation 2016/679).
2. Data We Collect
We may collect the following types of personal data:
Contact Information: Name, email address, phone number, and postal address.
Account Information: Username, password, and other registration details.
Transaction Data: Payment details, purchase history, and billing information.
Usage Data: Information about how you use our website, products, and services.
Technical Data: IP address, browser type, operating system, and other technical information.
3. How We Use Your Data
We process your personal data for the following purposes:
To provide our products and services.
To process payments and manage transactions.
To communicate with you, including customer support and marketing.
To improve our website and services.
To comply with legal obligations.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
Consent: When you have given explicit consent for specific purposes.
Contract: When processing is necessary for the performance of a contract.
Legal Obligation: To comply with legal and regulatory obligations.
Legitimate Interest: When processing is necessary for our legitimate interests, provided they do not override your rights.
5. Data Sharing and Transfers
We may share your personal data with:
Service Providers: To help us provide services (e.g., payment processors, cloud storage).
Business Partners: For joint marketing or co-branded services.
Legal Authorities: When required by law or to protect our legal rights.
International Transfers: If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements.
7. Your Rights
Under GDPR, you have the following rights:
Access: Request access to your personal data.
Rectification: Request corrections to inaccurate or incomplete data.
Erasure: Request the deletion of your personal data (“right to be forgotten”).
Restriction: Request restrictions on the processing of your data.
Portability: Request to receive your data in a structured, commonly used, and machine-readable format.
Objection: Object to the processing of your data for specific purposes.
Withdraw Consent: Withdraw consent at any time if processing is based on consent.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
9. Updates to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the effective date.
10. Contact Information
If you have questions or concerns about this GDPR Policy or your rights, please contact us at: hello@thisisneoflow.com