Privacy Policy - Edfali Marketplace

(Effective as of February 23, 2025)

1. Introduction

At Edfali (“we,” “our,” or “us”), we recognize the importance of privacy and the confidentiality of personal information. This Privacy Policy outlines how we collect, use, disclose, and protect personal data related to our services and platform operations.

Edfali.com (“Edfali” or “the Platform”) is a marketplace that facilitates transactions between buyers and sellers by providing a secure environment for e-commerce activities. We are committed to protecting your privacy and ensuring compliance with all applicable data protection laws worldwide.

This Privacy Policy applies to all users of the Platform, including:

Buyers who purchase products or services through the Platform.
Sellers who list, promote, and sell products or services on the Platform.
Visitors who access or browse the Platform without creating an account.

Additionally, this Privacy Policy covers the use of the Platform on both desktop and mobile devices. By accessing or using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Entity Responsible for Data Collection and Processing

Depending on your location, the entity responsible for handling your personal information (“data controller”) is:

For users worldwide: The data controller is Edfali Ltd., a company incorporated in Hong Kong, with its principal business operations in Germany, the United Kingdom, Hong Kong, and Singapore, where our data storage facilities are located.
For any inquiries regarding this Privacy Policy, please refer to Section 13: How to Contact Us for our official contact details.

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. If we make significant changes, we will take appropriate measures to notify you, such as posting a revised Privacy Policy on our Platform.

2. Collection of Personal Information

To provide our services efficiently and securely, Edfali collects and processes different types of personal information from users. The personal data we collect depends on how you interact with the Platform, including whether you are a buyer, seller, or visitor.

We categorize the information we collect into the following categories:

2.1 Information You Provide to Us

We collect personal information directly from you when you interact with the Platform, such as when you register an account, make a purchase, or contact our support team. This includes:

Account and Profile Information

Personal identifiers: Full name, username, date of birth, gender, country of residence.
Contact details: Email address, phone number, billing/shipping address.
Profile preferences: Profile picture (optional), preferred language, communication preferences.

Payment and Billing Information

Payment method details: Credit/debit card information or other payment account details used for transactions.
Billing and shipping address: Information needed to process payments and deliver goods/services.
Tax-related data: Where applicable, we may collect tax identification numbers for compliance.

Purchase and Order Details

Transaction history: Details of orders placed, including product/service information, order ID, timestamps, and payment confirmations.
Logistics and tracking data: Delivery details, status updates, and return/exchange records.
Refunds and dispute information: Records of cancellations, refund requests, or disputes.

Customer Service and Complaint Information

Support inquiries: Information you provide when you contact our customer support team (e.g., messages, call recordings, complaint details).
User feedback and reviews: Comments, ratings, and product/service reviews you submit.
Proof of identity (if required): In certain cases, we may request additional verification (e.g., a government-issued ID) to resolve disputes or comply with legal requirements.

2.2 Information We Collect Automatically

When you use the Edfali Platform, we automatically collect certain information about your device, browsing behavior, and interactions with our services. This data helps us optimize performance, enhance security, and improve user experience.

Device and Browser Data

IP address (for security monitoring and fraud prevention).
Device type (mobile, desktop, tablet), operating system, and browser type/version.
Unique device identifiers (e.g., MAC address, device fingerprint).

Usage and Activity Logs

Session details: Time and date of access, pages visited, navigation patterns.
Clickstream data: Interactions with the Platform, such as search queries, product views, and cart activity.
Referral data: The source or website that referred you to Edfali.

Cookies and Tracking Technologies

Cookies: We use cookies to store user preferences, enhance website functionality, and track analytics.
Tracking pixels: Third-party tracking tools (e.g., Facebook Pixel, Google Analytics) help us measure ad performance.
Behavioral tracking: We analyze browsing habits to personalize recommendations and detect suspicious activities.

For more details on how we use cookies, refer to Section 7: Cookies and Tracking Technologies.

2.3 Information We Receive from Third Parties

In addition to data collected directly from users, Edfali also receives certain personal information from third parties that support our operations.

Social Media Login Data

If you choose to register or log in using third-party social media accounts (e.g., Facebook, Google, Apple ID), we may receive:

Basic profile information (name, email, profile picture, public profile details).
Social media ID linked to your account.
Authentication tokens used for secure sign-in.

Payment and Shipping Service Providers

Transaction verification: We receive confirmation of successful or failed payments from our payment processors.
Shipping updates: Logistics partners provide tracking details and delivery confirmations.
Chargeback data: Payment gateways notify us about disputes, refunds, or fraudulent transactions.

Compliance and Fraud Prevention Data

To maintain a secure marketplace and prevent fraudulent activities, we may receive information from:

Risk assessment providers: Data related to potential fraud alerts, chargeback risks, or suspicious transactions.
Regulatory compliance databases: If necessary, we may verify user details with databases that track fraudulent activities or financial risks.

3. Use of Personal Data

At Edfali, we collect and process personal data to provide a seamless and secure experience for all users. We ensure that personal information is handled in compliance with applicable data protection laws and used strictly for legitimate business purposes.

We use personal data for the following purposes:

3.1 Account Management and Service Provision

We process personal data to:

Create and manage user accounts (including buyers and sellers).
Enable login and authentication to verify user identity.
Facilitate account customization, including user preferences and saved settings.
Provide customer support and respond to inquiries or complaints.
Resolve technical issues and maintain platform functionality.

3.2 Processing Orders and Payments

We use personal data to:

Process transactions securely and facilitate payment verification.
Confirm, fulfill, and track orders placed through the Platform.
Manage refunds, cancellations, and chargebacks.
Coordinate with payment service providers to prevent fraudulent transactions.
Provide logistics support by sharing shipping details with carriers.

3.3 Enhancing User Experience and Personalization

We analyze collected data to:

Improve Platform performance and optimize user interface design.
Offer personalized recommendations based on browsing and purchase history.
Remember user preferences, such as language settings and preferred payment methods.
Enhance search functionality by refining product listings and filters.

3.4 Marketing and Targeted Advertising

We use personal data to:

Deliver promotional offers and discounts tailored to user interests.
Conduct email and push notification campaigns to inform users about new products or deals.
Use behavioral data for targeted advertising via third-party platforms (e.g., Google Ads, Facebook Ads).
Analyze marketing campaign effectiveness to optimize ad strategies.

Users can opt-out of marketing communications at any time through account settings or the unsubscribe link in emails.

3.5 Security and Fraud Prevention

To maintain a safe and trustworthy marketplace, we process personal data for:

Detecting and preventing fraudulent activities, such as unauthorized access or suspicious transactions.
Assessing account security risks based on behavioral patterns and login history.
Verifying user identity, especially for sellers and high-value transactions.
Investigating potential violations of our terms and policies.

We implement industry-standard security measures to protect user information and prevent unauthorized access.

3.6 Legal Compliance and Regulatory Obligations

We process personal data to:

Comply with global data protection regulations (such as GDPR, CCPA, LGPD, and others).
Fulfill tax and financial reporting requirements where applicable.
Cooperate with law enforcement authorities only when legally required.
Enforce our Terms of Service and policies to protect platform integrity.

4. Sharing and Disclosure of Personal Information

At Edfali, we value your privacy and ensure that personal data is shared only when necessary for providing our services, enhancing user experience, or meeting legal obligations. We do not sell personal data to third parties.

We categorize data sharing as follows:

4.1 Sharing with Third Parties

We share personal information with carefully selected third-party service providers to facilitate transactions, enhance platform functionality, and ensure compliance with security standards.

Payment and Shipping Providers

To process transactions and fulfill orders, we share relevant data with:

Payment gateways (e.g., Visa, MasterCard, PayPal, Apple Pay, Google Pay) for secure payment processing.
Shipping carriers and logistics providers to coordinate deliveries, provide tracking updates, and handle returns.
Fraud detection services to assess the legitimacy of payments and prevent unauthorized transactions.

Technical Support and Analytics Providers

To optimize the platform, we collaborate with:

Cloud hosting providers to store and protect user data.
Analytics services (e.g., Google Analytics, Google Tag Manager) to understand user behavior and improve our services.
Customer support tools to manage inquiries, complaints, and assistance requests.

Government Authorities and Regulators

Unlike some platforms, Edfali does not voluntarily provide user data to government entities. However, if required by applicable laws, we may comply with:

Tax or regulatory authorities (if legally obligated).
Customs agencies to process international shipments.
Legal enforcement bodies in response to valid legal requests.

4.2 Sharing Between Buyers and Sellers

To facilitate transactions and ensure seamless communication, certain personal information may be shared between buyers and sellers.

Order and Delivery Information

Sellers receive buyer information necessary for order fulfillment, including name, shipping address, and contact details.
Buyers receive seller details, such as business name, shipping terms, and order status updates.

Communication Between Buyers and Sellers

Edfali provides a secure messaging system to allow direct communication between buyers and sellers regarding orders, returns, and product inquiries.
Personal contact details are not disclosed unless required for logistics purposes (e.g., courier coordination).

4.3 Situations Where We Disclose Data

We may disclose personal information in the following exceptional circumstances:

Legal Compliance and Law Enforcement Requests

We comply with legally binding orders where required under applicable data protection laws. However, we do not voluntarily provide user data to government authorities unless obligated by law.

Protection of Company and User Rights

We may disclose data when necessary to:

Investigate suspected fraudulent activities or violations of our terms.
Defend against potential legal claims affecting Edfali, users, or partners.
Prevent security threats, such as unauthorized access or cyberattacks.

Business Mergers or Acquisitions

In the event of a merger, acquisition, or sale of company assets, user data may be transferred to a successor entity. We will notify users if such a transfer affects their personal data rights.

5. Data Storage and Retention

At Edfali, we store personal data securely and retain it only for as long as necessary to fulfill our obligations, provide services, and comply with applicable legal and regulatory requirements. Our data retention policies are designed to protect user privacy while ensuring business continuity and compliance.

5.1 How Long We Retain Personal Data

The retention period for personal data depends on the type of information and the purpose for which it was collected. Generally:

Account Information: Retained as long as the user maintains an active account. If an account is deleted, we retain the data for a limited period in accordance with legal and security obligations.
Order and Transaction Data: Stored for at least 5 years to comply with financial, tax, and fraud prevention laws.
Customer Service Records: Retained for up to 2 years after issue resolution to assist with future inquiries and disputes.
Marketing and Analytics Data: Stored for up to 24 months, unless the user opts out of data tracking or requests deletion.
Cookies and Tracking Data: Retention periods vary depending on the cookie type, but typically range from 30 days to 12 months (see Section 7: Cookies and Tracking Technologies for more details).

5.2 When Data is Deleted or Anonymized

We follow strict procedures to delete or anonymize personal data once it is no longer needed.

Automatic Deletion: When retention periods expire, data is permanently deleted from our systems.
User-Initiated Deletion: Users can request account deletion at any time, and personal data will be removed unless retention is required by law (e.g., tax records).
Anonymization: In some cases, instead of deletion, we may anonymize data for analytics, ensuring that it can no longer be linked to any individual.

5.3 Backup and Archival Policies

To prevent data loss and ensure business continuity, we maintain secure backups of our databases.

Backups are stored in secure data centers in Germany, the United Kingdom, Hong Kong, and Singapore.
Access to backup data is restricted to authorized personnel only.
Retention of backup copies follows a defined schedule, after which outdated backups are securely deleted.
Encrypted backups are used to prevent unauthorized access in case of a security breach.

6. User Rights

At Edfali, we respect and uphold the rights of users regarding their personal data. We provide users with full control over their information in accordance with global data protection regulations, including GDPR (Europe), CCPA (California), LGPD (Brazil), and other applicable laws.

Users can exercise their rights at any time by contacting us at DataProtection@edfali.com or via our Contact Page: https://edfali.com/contact.

6.1 Right to Access Personal Data

Users have the right to request a copy of the personal data we hold about them. This includes:

Account details (name, email, phone number, etc.).
Order and transaction history.
Data collected through cookies and tracking technologies.

Users can request this data via their account settings or by submitting a formal request to our Data Protection Team.

6.2 Right to Correction and Update

If any of the user’s personal data is incorrect, incomplete, or outdated, they have the right to update or correct it. This includes:

Changing account details (name, contact information, shipping address).
Updating payment or billing information.
Correcting inaccurate order or transaction details.

Users can update most information directly through their Edfali account settings, or they may contact our support team for assistance.

6.3 Right to Deletion

Users can request the deletion of their personal data if:

They no longer wish to use the Edfali platform.
Their data is no longer needed for the purposes it was collected.
They object to the processing of their data and there is no overriding legitimate reason for us to retain it.

Exceptions:

We may retain certain data for legal or regulatory reasons, including:

Order history and payment records (for tax and fraud prevention).
Security logs (for protecting against fraudulent activities).

When a deletion request is approved, data is permanently removed from our systems, except where retention is legally required.

6.4 Right to Withdraw Consent

Users who have given consent for data processing (e.g., for marketing or tracking purposes) have the right to withdraw that consent at any time.

Marketing emails and promotions: Users can unsubscribe through the “Unsubscribe” link in emails or adjust settings in their account preferences.
Cookies and tracking: Users can adjust their cookie preferences via our cookie settings panel (see Section 7: Cookies and Tracking Technologies).

Once consent is withdrawn, we will cease processing the affected personal data unless a legal basis for retention exists.

6.5 Right to Object to Direct Marketing

Users have the right to object to their data being used for direct marketing purposes, including:

Email and SMS promotions.
Targeted ads on third-party platforms (e.g., Google, Facebook).

Users can opt out of marketing communications through:

Account settings (under privacy preferences).
Unsubscribe links in marketing emails.
By contacting our Data Protection Team.

Upon receiving an objection, we will immediately stop using the user’s data for marketing.

6.6 Right to Data Portability

Users have the right to request a structured, machine-readable copy of their personal data so they can transfer it to another service provider.

This applies to:

Account details.
Purchase history.
Stored preferences and settings.

Data portability requests can be submitted through DataProtection@edfali.com, and we will provide the data in a commonly used format (e.g., JSON, CSV, or XML).

7. Cookies and Tracking Technologies

At Edfali, we use cookies and similar tracking technologies to enhance the user experience, improve platform functionality, and deliver personalized content and advertisements. This section explains the types of cookies we use, how users can control them, and their role in advertising and personalization.

Users can manage their cookie preferences at any time through our Cookie Settings Panel available on the Platform.

7.1 Types of Cookies Used

Cookies are small text files stored on a user’s device when they visit the Platform. We categorize our cookies as follows:

Essential Cookies (Strictly Necessary)

Required for the Platform to function properly.
Enable features like secure login, order processing, and fraud prevention.
Without these cookies, some platform services may not work.

Performance and Analytics Cookies

Help us analyze user behavior on the Platform.
Track page visits, browsing patterns, and error reports.
Used by services like Google Analytics and Facebook Pixel to measure traffic and performance.

Functional Cookies

Store user preferences, such as language, currency, and login session settings.
Improve site navigation and personalize user experience.

Advertising and Targeting Cookies

Enable us and third-party partners to deliver relevant ads based on user interests.
Collect data about interactions with ads on Google, Facebook, and other platforms.
Used for retargeting campaigns and measuring ad effectiveness.

7.2 How to Control or Disable Tracking

Users have full control over cookies and can manage them in the following ways:

Browser Settings: Most web browsers allow users to block or delete cookies through settings.
Cookie Preferences Panel: Users can adjust their tracking preferences directly within the Platform.
Opt-out of Third-Party Ads: Users can disable targeted ads via:
Google Ads Settings: https://adssettings.google.com
Facebook Ad Preferences: https://www.facebook.com/ads/preferences
Your Online Choices (EU): https://www.youronlinechoices.com/

Disabling cookies may impact certain functionalities, such as personalized recommendations and saved login sessions.

7.3 Use of Cookies for Advertising and Personalization

Cookies and tracking technologies allow us to:

Deliver personalized content and recommendations based on user behavior.
Serve targeted ads on third-party platforms, including Google, Facebook, and Instagram.
Track ad performance to optimize marketing campaigns.

We do not sell personal data for advertising purposes. However, we may share anonymous or aggregated data with advertising partners to improve the relevance of promotions.

Users who prefer not to be tracked for advertising can opt-out through our Cookie Preferences Panel or by disabling third-party cookies via their browser settings.

8. Data Security and Protection

At Edfali, we prioritize the security of user data and implement industry-standard measures to safeguard personal information from unauthorized access, misuse, or disclosure. While we employ robust security protocols, we also encourage users to take responsibility for securing their accounts.

8.1 Security Measures to Protect User Data

We implement technical, administrative, and organizational security measures to ensure the confidentiality, integrity, and availability of user data. These include:

Encryption and Secure Storage

All sensitive data, including passwords and payment details, is encrypted using AES-256 and TLS 1.2/1.3 encryption.
Data stored in our servers is protected by firewalls and intrusion detection systems.

Access Control and Authentication

Multi-factor authentication (MFA) is required for account access in certain cases.
Internal access to user data is restricted to authorized personnel only on a need-to-know basis.

Regular Security Audits and Monitoring

We conduct periodic security assessments and vulnerability scans to identify potential risks.
Real-time monitoring is in place to detect suspicious activities or unauthorized access attempts.

Fraud Detection and Prevention

We use AI-powered fraud detection systems to flag unusual login attempts or payment transactions.
Transaction verification mechanisms are in place to prevent identity theft and unauthorized purchases.

8.2 How We Handle Data Breaches

In the event of a data breach or security incident, we follow strict protocols to contain, investigate, and mitigate the impact. Our response plan includes:

Immediate Response and Containment

Identifying the source of the breach and isolating affected systems.
Blocking unauthorized access to prevent further damage.

User Notification

If a data breach poses a risk to user privacy, affected users will be notified via email or in-app alerts.
We will provide clear instructions on steps users can take to protect their accounts.

Regulatory Compliance and Reporting

If required by law, we will report the breach to data protection authorities (e.g., GDPR regulators, CCPA authorities).
We will cooperate with cybersecurity experts and legal teams to assess and resolve the issue.

8.3 User Responsibility for Securing Their Account

While Edfali takes extensive measures to secure user data, users must also take steps to protect their accounts:

Use strong and unique passwords for their accounts.
Enable multi-factor authentication (MFA) where applicable.
Do not share login credentials with others or store them insecurely.
Be cautious of phishing attempts—Edfali will never ask for passwords via email or messages.
Log out after using shared or public devices to prevent unauthorized access.

If users suspect unauthorized access or security risks, they should immediately contact our Data Protection Team at:

📧 DataProtection@edfali.com

9. Children’s Privacy

At Edfali, we take the protection of children’s personal data seriously. Our Platform is designed for use by adults, and we do not knowingly collect, store, or process personal data from individuals under the minimum age requirement.

9.1 Minimum Age Requirement for Account Registration

Edfali is intended for users aged 18 and above.
By creating an account, users confirm that they meet the minimum age requirement applicable in their jurisdiction.
If we discover that an account has been created by a user under 18 years old, we will take immediate action to suspend and remove the account.

9.2 How to Request Deletion of Children’s Data if Collected Unintentionally

If we become aware that we have inadvertently collected personal data from a child under 18, we will:

Immediately delete the data from our systems.
Prevent further access to the account.
Notify the relevant guardians (if contactable).

Parents or legal guardians who believe that Edfali has collected data from a minor can request deletion by contacting:

📧 DataProtection@edfali.com

Requests must include:

Proof of parental authority (if applicable).
Details of the child’s account or data in question.

We will process all verified deletion requests as quickly as possible in accordance with global data protection regulations.

10. Updates and Changes to the Privacy Policy

At Edfali, we may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or security practices. We are committed to keeping users informed about how we handle their personal data.

10.1 How and When We Update the Policy

We may revise this Privacy Policy to comply with new regulations, enhance security measures, or introduce new features.
Updates will be effective from the date specified at the beginning of the policy.
The most recent version will always be available on our Platform for users to review.

Users are encouraged to regularly check this Privacy Policy to stay informed about how their data is processed.

10.2 How Users Will Be Notified of Changes

For minor updates (e.g., clarifications or non-material changes), the revised policy will be published directly on our website.
For significant changes (e.g., updates affecting user rights, data processing, or legal compliance), we will notify users through:
Email notifications sent to registered users.
In-app alerts or pop-up notifications on the Platform.
Announcements on our website detailing the key changes.

If users continue to use the Platform after an update, it will be considered acceptance of the revised Privacy Policy.

For any questions or concerns regarding policy changes, users can contact our Data Protection Team at:

📧 DataProtection@edfali.com

11. Legal and Regional Compliance

At Edfali, we comply with global data protection laws and regulations to ensure that user data is processed lawfully, transparently, and securely. Depending on a user’s location, specific data protection laws may apply, granting additional rights or imposing obligations on how we process personal data.

11.1 Users from the European Economic Area (EEA) and UK

For users in the European Economic Area (EEA) and the United Kingdom (UK), we process personal data in accordance with the General Data Protection Regulation (GDPR) and the UK GDPR.

Legal Basis for Data Processing Under GDPR

Under GDPR, we rely on the following legal bases to process personal data:

Performance of a Contract – Necessary for fulfilling orders, payments, and service delivery.
Legal Obligation – Compliance with tax, fraud prevention, and regulatory requirements.
Legitimate Interests – Improving our platform, preventing fraud, and securing our services.
Consent – For marketing activities and non-essential cookies (users may withdraw consent at any time).

User Rights Under GDPR

Users in the EEA and UK have the following rights:

✔ Right to Access – Request a copy of personal data.

✔ Right to Correction – Request updates to inaccurate or incomplete data.

✔ Right to Deletion – Request data erasure under certain conditions.

✔ Right to Restrict Processing – Limit how data is used in specific cases.

✔ Right to Object – Stop processing for marketing purposes or legitimate interests.

✔ Right to Data Portability – Receive data in a structured format for transfer.

✔ Right to Withdraw Consent – Opt out of marketing or data tracking at any time.

✔ Right to Lodge a Complaint – File a complaint with local Data Protection Authorities (DPA).

Users can exercise these rights by contacting DataProtection@edfali.com.

11.2 Users from the United States

For users in the United States, Edfali complies with federal and state-level data privacy laws, including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and other applicable laws.

Compliance with State Privacy Laws

California (CCPA & CPRA): Users have the right to know what personal data is collected, opt out of data sales/sharing, and request deletion of their data.
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA): Users have similar rights to access, correct, delete, and opt out of targeted advertising.

Key Rights Under U.S. Privacy Laws

✔ Right to Know – Users can request details on the personal data collected.

✔ Right to Delete – Users can request data deletion, subject to legal exceptions.

✔ Right to Opt-Out – Users can opt out of targeted ads and data sales.

✔ Right to Non-Discrimination – Users will not be penalized for exercising privacy rights.

Users in the U.S. can submit privacy requests by contacting DataProtection@edfali.com.

11.3 Users from Brazil

For users in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD), Brazil’s General Data Protection Law.

Compliance with LGPD

Processing of personal data is based on legal grounds, including user consent, contract performance, legal obligations, and legitimate interests.
Users have the right to access, correct, delete, or transfer their data.
Data must be processed transparently, securely, and only for necessary purposes.

User Rights Under LGPD

✔ Right to Confirmation of Processing – Users can ask if their data is being processed.

✔ Right to Access – Request a copy of stored personal data.

✔ Right to Correction – Update incorrect or outdated data.

✔ Right to Deletion – Request data deletion when processing is based on consent.

✔ Right to Object – Dispute data processing under specific circumstances.

✔ Right to Portability – Transfer data to another service provider.

For privacy-related requests under LGPD, users can contact DataProtection@edfali.com.

11.4 Users from Mexico

For users in Mexico, we comply with local privacy regulations, including the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

Compliance with Mexican Privacy Laws

User data is processed with transparency and confidentiality.
Users must provide consent for personal data collection and processing.
Data must only be stored for necessary and legitimate purposes.

User Rights Under Mexican Law

✔ Right to Access – Request details on stored personal data.

✔ Right to Rectify – Request corrections to inaccurate data.

✔ Right to Cancel (Delete) – Request data removal when no longer needed.

✔ Right to Object – Restrict data processing based on legitimate concerns.

Users in Mexico can exercise their data rights by contacting DataProtection@edfali.com.

12. International Data Transfers

At Edfali, we operate globally, which means that user data may be stored, processed, and transferred across multiple countries. We take strong measures to ensure that personal data remains protected, regardless of where it is stored or transferred.

12.1 Where User Data is Stored

User data is stored on secure servers located in the following regions:

🌍 Germany & the United Kingdom – Used for European users, ensuring compliance with GDPR.

🌍 Hong Kong & Singapore – Used for global operations, ensuring high-security standards and international compliance.

Our data centers are operated by trusted cloud service providers with advanced security protocols in place to protect stored information.

12.2 How We Protect Data During International Transfers

To comply with GDPR, CCPA, LGPD, and other global regulations, we implement industry-standard security and legal mechanisms when transferring data internationally.

Data Protection Measures:

✅ Encryption: Data is encrypted both in transit and at rest using AES-256 and TLS 1.3 encryption.

✅ Access Restrictions: Only authorized personnel with security clearance can access stored data.

✅ Firewall & Threat Monitoring: 24/7 monitoring protects against cyber threats, unauthorized access, and data breaches.

Legal Safeguards for Data Transfers:

🔹 Standard Contractual Clauses (SCCs): For users in the EEA & UK, we rely on SCCs approved by the European Commission to ensure data transferred outside Europe meets GDPR standards.

🔹 Adequacy Decisions: If data is transferred to a country recognized as providing an adequate level of data protection, we comply with those frameworks.

🔹 Binding Corporate Rules (BCRs): Used to ensure that our internal data transfers across global offices follow strict security policies.

If users have any concerns about how their data is stored or transferred, they can contact our Data Protection Team at:

📧 DataProtection@edfali.com

13. How to Contact Us

At Edfali, we value transparency and are committed to addressing any privacy-related concerns or inquiries. Users can contact us through the following channels for questions, complaints, or data requests regarding their personal information.

13.1 Email for Privacy-Related Inquiries

For any privacy-related matters, including:

Requests to access, update, or delete personal data
Questions about data processing and security
Concerns about data protection rights

📧 Email our Data Protection Team at:

➡ DataProtection@edfali.com

We aim to respond to all inquiries within a reasonable timeframe, in accordance with applicable privacy laws.

13.2 Contact Channels for Complaints or Questions

Users can also reach out through our dedicated contact page for:

✔ General inquiries

✔ Account-related questions

✔ Platform support requests

🌍 Visit our contact page at:

➡ https://edfali.com/contact

If a user believes their privacy rights have been violated, they may also file a complaint with their local Data Protection Authority (DPA) in accordance with applicable regulations (GDPR, CCPA, LGPD, etc.).