Privacy Policy

Subject to legal limits, users may ask to access, correct, or delete certain personal data, and may object to or restrict some forms of processing. Where processing is based on consent, users may withdraw that consent for future processing. We may need to verify identity before acting on a request and may decline requests that would conflict with legal obligations or legitimate business needs.

To make a privacy request, users should provide enough information for us to identify the relevant records and confirm the scope of the request. We will review the request, apply any required legal exceptions, and respond within a reasonable period. If we cannot fully comply, we will explain the main reason where permitted by law.

Retention periods depend on the type of information, the reason it was collected, and any legal, accounting, or operational requirements that apply. When data is no longer needed, we delete it, anonymize it, or store it in a restricted form until it can be removed under our routine retention process. Some records may be kept longer where necessary to resolve disputes, enforce agreements, or meet legal duties.

If we make material changes, we will update the policy text and may provide additional notice where appropriate based on the nature of the change. The revised version applies from the date it is posted unless a different effective date is stated. Users should review the policy periodically to stay informed about current practices.