Introduction

24fulfill.com ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.24fulfill.com (the "Site"). It complies with applicable laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.

If you do not agree with the terms of this Privacy Policy, please do not access the Site.

1. Information We Collect

• Personal Identification Information: Name, email address, phone number, mailing address.
• Technical Information: IP address, browser type, operating system, device type, and Site usage behavior.
• Transaction Data: Details of your purchases, services requested, and payment methods.
• Other Information: Information provided during communications with us or through surveys, feedback forms, or support requests.

2. How We Use Your Information

1. To provide, maintain, and improve our services and Site functionality.
2. To process transactions and manage your orders.
3. To personalize your experience and provide targeted advertising or recommendations.
4. To communicate updates, respond to inquiries, and offer customer support.
5. To comply with legal obligations, such as fraud prevention or enforcement of our terms and conditions.

3. Legal Basis for Processing

• Consent: Where you have explicitly agreed to specific uses of your data.
• Contractual necessity: To fulfill contracts with you.
• Legitimate interests: To operate and improve our Site and services.
• Legal compliance: To meet applicable legal obligations.

4. Sharing Your Information

We may share your data in the following situations:

• Service Providers: With trusted third parties for business purposes, such as payment processing or hosting services.
• Legal Compliance: If required by law, subpoena, or to protect our rights.
• Business Transfers: In connection with mergers, sales, or acquisitions.

We do not sell your personal data to third parties.

5. Data Security

We implement robust security measures to protect your data, including:

• Encryption: AES-256 encryption for data at rest and TLS 1.2+ for data in transit.
• Access Control: Strict access policies based on the "least privilege" principle.
• Regular Audits: Ongoing security assessments, including vulnerability scans and penetration testing.
• Incident Response: A formal incident management policy, with drills conducted annually.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. When data is no longer required, it is securely deleted.

7. Your Rights

• Access: Request access to the data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Request a machine-readable copy of your data.
• Objection: Object to specific data processing activities, such as direct marketing.

To exercise your rights, contact us at service@24fulfill.com.