Effective Date: July 18, 2025

Vccpanda IO is committed to protecting the privacy and personal data of all users in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This statement outlines how we comply with the GDPR when collecting, processing, storing, and transferring personal information of our users, including customers based in the European Union.

1. Lawful Basis for Processing

We collect and process personal data only when there is a lawful basis to do so under the GDPR. These bases include:

• User consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests in operating and securing our website and services

2. Data Subject Rights

Under the GDPR, EU residents have the following rights:

• Right to Access – Request access to your personal data.
• Right to Rectification – Request correction of inaccurate or incomplete data.
• Right to Erasure – Request deletion of your data (“right to be forgotten”).
• Right to Restrict Processing – Ask us to limit how your data is used.
• Right to Data Portability – Receive your data in a structured, machine-readable format.
• Right to Object – Object to processing based on legitimate interests or for direct marketing.

3. Data Collection and Use

We collect only the data necessary to deliver and support our services. This includes:

• Registration and contact information
• Order and transaction history
• Platform usage data (IP address, device/browser type, etc.)

This information is used to manage accounts, deliver products, provide customer support, and ensure security.

4. Data Transfers and Third Parties

Data may be transferred outside the EU only to trusted service providers who have signed GDPR-compliant data processing agreements. Examples include secure cloud storage services, payment processors, and customer support tools.

5. Data Security and Retention

We implement appropriate security measures including encryption, firewalls, and access controls. Personal data is retained only for as long as necessary to fulfill the purposes stated in this policy or to comply with legal obligations.

6. Consent and Opt-Out

Where required, we obtain explicit user consent for processing personal data. You may withdraw your consent at any time through your account settings or by contacting us.

7. Contact for GDPR Matters

If you wish to exercise your GDPR rights or have questions about your data, please contact our Data Protection Officer (DPO):

📧 Email: hello@vccpanda.io
📞 Phone: +44 7414 223844
📍 Address: 33 Charlotte Rd, Highfield, Sheffield S1 4TJ, United Kingdom