Privacy Policy

1. Overview & Data Controller

This Privacy Policy explains how Cristal Fondelle ("Company", "we", "us", or "our") processes, collects, stores, protects, and discloses personal information obtained through our website, web interfaces, and analytical modules.

For the purposes of applicable data protection legislation in the United Kingdom, Cristal Fondelle acts as the data controller responsible for determining the means and purposes of personal data processing under this policy.

2. Categories of Data Collected

We may process diverse classifications of personal and technical data depending on your degree of interaction with the platform:

• Identity & Contact Data: Name, email address, telephone contact details, and country of residence provided when engaging with our representatives or requesting technical materials;
• Technical & Network Data: Internet Protocol (IP) address, browser family, operating system build, time zone settings, referral URLs, telemetry headers, and device fingerprint metadata;
• Usage & Interaction Data: Analytical logs displaying viewed pages, dwell time, algorithmic tool preferences, clickstream pathways, and navigation flows;
• Communication Data: Records of queries, inquiries, support feedback, and email correspondence exchanged with our technical team.

3. Lawful Bases for Processing

We only process your personal data when permitted by statutory legal frameworks under UK GDPR Article 6. These legal justifications encompass:

• Contractual Performance: Processing required to provide access to software features, account management, or respond to service requests;
• Legitimate Interests: Processing essential for platform security, infrastructure monitoring, fraud prevention, service enhancement, and analytical optimization, provided your fundamental rights do not override these interests;
• Legal & Regulatory Obligations: Processing imperative to fulfill anti-money laundering (AML) guidelines, fraud suppression directives, or lawful court orders;
• Consent: Specific, informed assent provided for direct promotional communications or optional analytics technologies.

4. How We Utilise Personal Information

Cristal Fondelle uses collected data for transparent and operational purposes, specifically to:

• Deliver, manage, and refine the algorithmic platform interface;
• Safeguard network infrastructure against malicious exploitation, DDoS incursions, and bot manipulation;
• Authenticate authorized user requests and verify access permissions;
• Address technical troubleshooting, customer service tickets, and feedback;
• Assess platform telemetry to optimise load times and UX layouts.

5. Cookies and Web Telemetry

Cristal Fondelle employs essential cookies and lightweight telemetry tags to guarantee site operability, maintain security sessions, and remember user interface preferences. Essential cookies execute automatically because the platform cannot function correctly without them.

Performance and analytical cookies help us track aggregate traffic trends and conversion interactions. You can adjust your browser settings to decline or wipe cookies at any point, although certain interactive components of the website may experience reduced performance as a result.

6. Data Sharing & International Transfers

We do not commercialise, sell, or rent your personal information to unassociated third parties. Data sharing occurs exclusively with vetted service providers operating under strict contractual non-disclosure and security covenants, including:

• Cloud hosting and infrastructure providers ensuring server stability;
• Analytical, logging, and security verification software services;
• Regulatory bodies or legal enforcement authorities where required under compulsory UK judicial process.

Whenever personal data is transferred outside the United Kingdom or the European Economic Area, we implement robust safeguard protocols, including the UK International Data Transfer Agreement (IDTA) or standard contractual clauses, ensuring data receives protection equivalent to domestic standards.

7. Retention Periods

We retain personal information only for the duration necessary to fulfill the operational, legal, and reporting objectives outlined in this Privacy Policy. Technical telemetry logs are cyclically purged or anonymised. When data is no longer necessary to meet statutory obligations, it is permanently deleted or irreversibly pseudonymised.

8. Your Statutory Rights

Under the UK Data Protection Act 2018 and UK GDPR, you maintain comprehensive individual rights concerning your personal information:

• Right of Access: You may request copies of personal records stored about you;
• Right to Rectification: You may request immediate correction of inaccurate or incomplete information;
• Right to Erasure: You may request data deletion where statutory grounds for retention no longer apply;
• Right to Restriction: You may request a freeze on processing under certain investigative conditions;
• Right to Data Portability: You may request receipt of your data in a structured, machine-readable format;
• Right to Object: You may object to data processing conducted on the grounds of legitimate interests.

You also retain the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), via www.ico.org.uk, if you consider our data practices non-compliant.

9. Information Security Standards

We enforce rigorous technical and organisational protective measures, including TLS/SSL encryption for data in transit, encrypted database partitions, strict role-based access restrictions, and periodic penetration testing to forestall unauthorised disclosure, theft, or data destruction.

10. Updates to this Policy

We may periodically update this Privacy Policy to reflect technical revisions or emerging legal mandates. Any alterations will be published directly on this page with a revised effective date.