Privacy policy

This privacy policy describes how CA LABS LLP ("we" or the "Company"), acting as data controller, collects and uses your personal data when you place an order on our online store. It is intended to inform you of your rights under the General Data Protection Regulation (GDPR) and any other applicable law. We are committed to processing only the data strictly necessary to provide our services.

Data we collect

We only collect the data necessary to fulfil your order:

Email address: provided at checkout to confirm payment, communicate on progress and provide support.
Targeted account identifier or URL: the username or public link of the social-media account you provide, required to deliver the service.
Minimal technical data: access logs and IP address collected by our hosting provider for security and site-operation purposes.
No payment data: card details never transit through our servers and are not stored by us (see "Subprocessors and recipients" below).

Purposes of processing

Your data is processed for the following purposes:

To process, execute and deliver the order you have placed.
To verify the existence and accessibility of the targeted social-media account, which is a technical requirement for delivery.
To provide customer support, order follow-up and after-sales service.
To prevent fraud and abuse of the service, in particular through request rate-limiting.

Legal basis (GDPR)

Pursuant to Article 6 GDPR, the processing of your data relies on the following legal bases:

Performance of the contract: delivery of your order and the associated support.
Legitimate interest: the security of our systems, fraud prevention and protection of the store against abuse.
Consent: where required, for example for certain optional communications.

Subprocessors and recipients

To provide our services, we rely on the following subprocessors, which act on our instructions and under contractual safeguards:

Cloudflare: site hosting, order storage and network infrastructure.
TikHub: technical validation of the targeted social-media account; receives for this purpose the identifier or URL you entered.
Payment service provider (PSP): processes card data directly on its secured page. CA LABS LLP does not have access to that data.

Transfers outside the European Union

Some of these subprocessors may process your data outside the European Union. In such cases, transfers are framed by the appropriate safeguards required by the GDPR (Standard Contractual Clauses or equivalent mechanisms).

Retention period

Data related to your order (email, targeted account identifier, technical logs) is retained for the time necessary to provide the service, to handle after-sales support and to comply with our legal and accounting obligations. At the end of that period, it is deleted or anonymised.

Your rights

Under the GDPR, you have the following rights regarding your data at any time:

Right of access to your data.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to object to the processing.
Right to data portability.
Right to restriction of the processing.

How to exercise your rights

To exercise these rights, contact us by email at: support@ghalagency.com. You also have the right to lodge a complaint with the competent supervisory authority.

Cookies

Our store only uses cookies strictly necessary for the proper operation of the site (for example a session cookie to keep your cart and language). We do not use third-party advertising cookies and no data is shared for marketing-profiling purposes.

Contact

For any question regarding the processing of your data or to exercise your rights, contact us at: support@ghalagency.com