1. Scope
This Privacy Policy explains how Sainfoxiya Inc. ("Sainfoxiya", "we") collects, uses, and safeguards personal data when your business uses the Sainfoxiya Business portal. It covers data about your account users and about voucher recipients you provide to us.
2. Data We Collect
- Account data: company name, business tax identifier (GST, VAT, or local equivalent), billing address, and the names, work emails, and roles of authorized users.
- Order data: products ordered, quantities, amounts, currency, and invoices.
- Recipient data: names and email addresses you upload for bulk delivery.
- Technical data: IP address, device/browser information, and usage logs for security and performance.
3. How We Use Data
We process personal data to create and manage your account, process orders and payments, deliver vouchers, issue tax invoices, provide support, prevent fraud, and comply with legal obligations. We may send service-related communications about your account and orders.
4. Recipient Data
When you upload recipient lists, you act as the controller of that data and we act as your processor. You are responsible for having a lawful basis to share recipient details with us, and we process them only to deliver the vouchers you order.
5. Legal Basis for Processing
Where GDPR or similar laws apply, we rely on the following bases: performance of a contract (to provide the Service), legitimate interests (security, service improvement), legal obligation (tax and record-keeping), and consent where required.
7. International Transfers
As a global platform, we may process data in countries other than yours. Where we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognized under applicable law.
8. Data Retention
We retain personal data for as long as your account is active and thereafter as required to meet legal, tax, and accounting obligations. Recipient data is retained only as long as needed to deliver and support the relevant orders.
9. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. Recipients should direct requests to the business that supplied their data.
10. Security
We use technical and organizational measures — encryption in transit, access controls, and monitoring — to protect personal data. No system is perfectly secure, but we work to protect your information and to notify you of material breaches as required by law.
11. Contact
For privacy questions or requests, email privacy@sainfoxiya.com or use the contact form.