GDPR Compliance Policy for FileFox
Effective Date: 01-12-2024
Last Updated: 08-12-2024
At FileFox, we are committed to complying with the General Data Protection Regulation (GDPR). This policy outlines how we process, store, and protect the personal data of users from the European Union (EU) and European Economic Area (EEA).
1. Data Controller Information
FileFox operates as the Data Controller for your personal data.
- Company Name: FileFox
- Address: FileFox, Madurai, 625107, Tamil Nadu, India
- Contact Email: support@filefox.in
- Contact Phone: +91 7045903523
2. Types of Personal Data We Collect
We collect and process the following categories of personal data:
- Identity Data: Name, email address, account username.
- Contact Data: Phone number and address (if provided).
- Transaction Data: Payment details for premium services.
- Technical Data: IP address, browser type, device information, and usage logs.
- Communication Data: Messages sent via our contact form.
3. Legal Bases for Processing
We process your personal data based on the following legal grounds under GDPR:
- Performance of a Contract: To provide access to our services.
- Consent: For marketing communications, where applicable.
- Legal Obligations: To comply with applicable laws and regulations.
- Legitimate Interests: To enhance our services, prevent fraud, and improve security.
4. Your GDPR Rights
As an EU/EEA user, you have the following rights under GDPR:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data ("Right to be Forgotten").
- Right to Restriction: Request to limit the processing of your data.
- Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to the processing of your data for specific purposes, including marketing.
- Right to Withdraw Consent: Withdraw consent for processing where consent was the legal basis.
To exercise these rights, contact us at support@filefox.in.
5. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Specific retention periods include:
- Account Data: Until account deletion.
- Transaction Data: Retained for tax and legal compliance for up to [X years, depending on jurisdiction].
6. Data Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include:
- SSL encryption for data transmission.
- Secure data storage facilities.
- Regular security audits and updates.
7. Data Sharing and Transfers
a. Data Sharing
We share your data with trusted third-party service providers, such as:
- Payment Processors: For secure payment transactions.
- Hosting Providers: For website and data hosting.
- Analytics Providers: To improve our services.
All third parties are required to comply with GDPR and protect your data.
b. International Data Transfers
As FileFox is based in India, your data may be transferred outside the EU/EEA. We ensure that such transfers are protected by appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs).
- Adequacy decisions approved by the European Commission.
8. Cookies and Tracking
We use cookies to improve user experience and for analytics purposes. For details, refer to our Cookie Policy.
9. Breach Notification
In the event of a data breach, we will notify affected users and relevant authorities within 72 hours, as required by GDPR.
10. Contact Information
For GDPR-related inquiries or to exercise your rights, contact:
This GDPR Policy complements our Privacy Policy and Terms of Use.
