At HaroFlow, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information in compliance with GDPR and applicable EU privacy laws.
1. Data Controller
HaroFlow is the data controller responsible for your personal data. Contact us at: [email protected]
2. Information We Collect
We collect information you provide directly (account info, profile info, communications) and automatically (device info, usage data, cookies).
3. Legal Basis for Processing (GDPR)
We process your data based on: contract performance, legitimate interests, legal obligations, and consent where applicable.
4. How We Use Your Information
We use your information to provide and improve our services, process transactions, send notifications, respond to requests, monitor security, and personalize your experience.
5. Data Sharing
We may share data with service providers, when required by law, in business transfers, or with your consent. We do not sell your personal information.
6. International Data Transfers
When transferring data outside the EEA, we ensure appropriate safeguards including Standard Contractual Clauses.
7. Your GDPR Rights
You have the right to: access your data, rectification, erasure ("right to be forgotten"), restrict processing, data portability, and object to processing. Contact us at [email protected] to exercise these rights.
8. Data Retention
We retain your data only as long as necessary for the purposes collected, typically: account data (while active + 3 years), transaction records (7 years), communication logs (2 years).
9. Cookies
We use essential, performance, and functionality cookies. You can control cookies through your browser settings.
10. Data Security
We implement encryption, access controls, regular security assessments, and employee training to protect your data.
11. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect information from children.
12. Changes to This Policy
We may update this policy and will notify you of material changes via email or service notice.
13. Supervisory Authority
If you're in the EEA and believe we haven't addressed your concerns, you may lodge a complaint with your local data protection authority.
14. Contact Us
Questions? Contact us at [email protected] or through our Contact Page.
By using HaroFlow, you acknowledge that you have read and understood this Privacy Policy.