GDPR Compliance

Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It applies to all organizations operating within the EU and to organizations outside the EU that offer goods or services to individuals in the EU or monitor their behavior.

At VerifyFox, we are committed to ensuring that our email verification service complies with the GDPR. This page explains how we meet the requirements of the GDPR and how we help our customers comply with their GDPR obligations when using our service.

Our Commitments

We have implemented the following measures to ensure GDPR compliance:

• Lawful, Fair, and Transparent Processing: We process personal data lawfully, fairly, and in a transparent manner.
• Purpose Limitation: We collect personal data only for specified, explicit, and legitimate purposes and do not process it in a manner incompatible with those purposes.
• Data Minimization: We ensure that personal data is adequate, relevant, and limited to what is necessary for the purpose for which it is processed.
• Accuracy: We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date.
• Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it is processed.
• Security: We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
• Accountability: We are responsible for and can demonstrate compliance with the above principles.

Legal Basis for Processing Personal Data

Under the GDPR, we must have a legal basis for processing personal data. We rely on the following legal bases:

• Performance of a contract: Processing necessary for the performance of our contract with you (e.g., account setup, providing our email verification services).
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring the security of our platform.
• Consent: Processing based on your explicit consent, particularly for email marketing communications.
• Legal obligations: Processing necessary to comply with a legal obligation to which we are subject.

Data Processing Activities

As an email verification service, we process the following categories of personal data:

• Email Addresses: When you use our service to verify email addresses, we process those email addresses to check their validity. We do not store the email addresses after the verification process is complete unless specifically requested.
• Account Information: When you create an account with us, we collect and process information such as your name, email address, and company details.
• Usage Data: We collect data about how you use our service, including the number of verifications, timestamps, and IP addresses.

Data Subject Rights

We respect the rights of data subjects under the GDPR. These include:

• Right to Access: Data subjects have the right to obtain confirmation as to whether personal data concerning them is being processed and, if so, access to that data.
• Right to Rectification: Data subjects have the right to have inaccurate personal data rectified and incomplete personal data completed.
• Right to Erasure ('Right to be Forgotten'): Data subjects have the right to have their personal data erased under certain circumstances.
• Right to Restriction of Processing: Data subjects have the right to restrict the processing of their personal data under certain circumstances.
• Right to Data Portability: Data subjects have the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller.
• Right to Object: Data subjects have the right to object to the processing of their personal data under certain circumstances.
• Right to Not be Subject to Automated Decision-Making: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

To exercise any of these rights, data subjects can contact us as described in the "Contact Us" section below.

Data Security

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services
• Ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
• Process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing

Data Breach Procedures

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

If the breach is likely to result in a high risk to the rights and freedoms of natural persons, we will also notify the affected data subjects without undue delay.

Data Processors

We use the following categories of data processors to help us provide our service:

• Cloud Infrastructure Providers: We use secure cloud services to host our application and store data.
• Payment Processors: We use third-party payment processors to handle payments.
• Analytics Providers: We use analytics services to help us understand how our service is used.

We have entered into data processing agreements with each of these processors to ensure that they provide sufficient guarantees to implement appropriate technical and organizational measures to meet the requirements of the GDPR.

Data Protection Impact Assessment

We conduct data protection impact assessments (DPIAs) where our processing activities are likely to result in a high risk to the rights and freedoms of natural persons, particularly when using new technologies.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and its implementation to ensure compliance with GDPR requirements. You can contact our DPO at dpo@verifyfoxs.com.

Updates to This Policy

We may update this GDPR Compliance Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date at the top of this policy.

We encourage you to review this policy periodically to stay informed about our data protection practices.

Contact Us

If you have any questions about our GDPR compliance or would like to exercise your data subject rights, please contact us:

• By email: privacy@verifyfoxs.com
• By mail: 123 Verification Street, Suite 456, Email City, EC 78901