The processing of your personal data is based on your consent, contract performance, compliance with a legal obligation, or our legitimate interest. Data is retained for the duration necessary for the purposes for which it is collected, and for a maximum of 3 years after your last contact.
Your data is used for: managing your customer account, processing your orders, personalizing your experience, sending commercial communications (with your consent), and improving our services.
As part of our business, we collect the following data:
Under the GDPR, you have the following rights: right of access, rectification, erasure, portability, objection, and restriction of processing. To exercise your rights, contact us at privacy@afrilux.com.
We implement appropriate technical and organizational measures to protect your data: encryption of sensitive data, strict access control, regular security audits, and ongoing staff training.
Your data may be transferred to technical partners located in the European Union or in countries offering an adequate level of protection. Any transfer is governed by standard contractual clauses compliant with GDPR requirements.