Privacy And Policy - Terms of Condition

6. Where we store and process your personal data

The personal data that we collect from you is stored in the United Kingdom. However, in some cases, your personal data may be transferred to and processed in countries outside the UK or European Economic Area (EEA).

Under UK data protection law (UK GDPR and Data Protection Act 2018), we can only transfer personal data outside the UK if:

1. The UK government has made an 'adequacy decision' about the country or territory, confirming it provides an adequate level of data protection; or
2. Appropriate safeguards are in place, such as:
   • Binding corporate rules
   • Standard contractual clauses approved by the UK government
   • An approved certification mechanism or code of conduct
3. The transfer falls under a specific exception (derogation) defined in the UK GDPR Article 49.

We ensure that any international transfer of your personal data complies with these requirements by:

• Conducting data transfer impact assessments
• Implementing appropriate technical and organizational security measures
• Using UK-approved International Data Transfer Agreements (IDTAs) where required
• Regularly reviewing our data transfer mechanisms to ensure continued compliance

We take all steps necessary to ensure that your data is treated securely and in accordance with this privacy policy and UK data protection laws, including:

• Encrypting data in transit and at rest
• Implementing strict access controls
• Regular security assessments
• Staff training on data protection

For more information about our data transfer mechanisms or to obtain a copy of the safeguards we use, please contact us at source@blacksquare.finance.

8. Uses we make of personal data

We use information held about you in the following ways:

• To verify your identity.
• To provide you with the products and services you have purchased from us.
• To carry out our obligations arising from any contracts entered into between you and us.
• To ensure that content from our site is presented in the most effective manner for your device.
• To respond to queries.
• To provide you with information, products or services that you request from us where you have consented to be contacted.
• To notify you about changes to our services.
• To display personalized Ads from us.
• To prevent fraud.
• To detect, prevent and diagnose potential security breaches.

15. Your rights under GDPR

Under GDPR (General Data Protection regulation) you have a number of rights relating to your personal data, these will come into force on the 25th May 2018

Right to Restrict Processing

You have the right to request we restrict processing of your personal data where there is no legitimate interest for us to do so:

• Where the accuracy of the personal data is contested, to restrict the processing until such time as the accuracy has been sufficiently verified.
• Where you object to the processing (See Right to Object), and where we are considering whether there are legitimate grounds to override the request.
• When processing is unlawful and you oppose erasure and request restriction instead.
• If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.

You can exercise the right at any time by contacting our team (see Contacting Us).

Right of Access (Access to Information)

The GDPR Act gives you the right to access information held about you. You can exercise this right by contacting us (see Contacting Us). We are required to verify your identify before processing any right to access request, once verified the data shall be provided within 28 days. The data shall be provided free of charge however an admin fee may be applied where a request is manifestly unfounded or excessive, particularly if it is repetitive.

Right to Erasure (Also known as the right to be forgotten)

As an individual you have the right to request the erasure of any data we hold on you, this is not an absolute right, for example it does not override our requirement under Swiss law to keep financial data such as invoice information. You can make a request where your personal data is no longer necessary in relation to the purpose for which it was originally collected/processed, for example if you cancel all services you have with us. To make a right to erasure request please contact our customer services team (see Contacting Us).

Right to Rectification

The GDPR provides the right to have any personal data rectified that may be incorrect or incomplete. Customers can update their own personal details via the client area however if this is not sufficient please contact our customer services team (See contacting Us).

Right to Object

You have the right to object to the processing of your personal data where there is no legitimate or lawful reason to do so. To make a right to object request please contact our customer services team (see Contacting Us).

17.1 Restrictions and Limitations

Prohibited Activities

Users shall not:

• Copy, modify, or create derivative works of our Content
• Reverse engineer, decompile, or disassemble our applications
• Attempt to gain unauthorized access to our proprietary systems
• Extract, scrape, or mine data from our applications
• Share, lease, license, sell, or transfer any of our proprietary Content

Limited License

Any access granted to our services, applications, or Content is on a limited, non-exclusive, non-transferable, and revocable basis. This access does not constitute a transfer of any intellectual property rights.