WEBSITE PRIVACY POLICY

1. Who we are

We are MALJOY LTD, a company incorporated and operating under the laws of the United Kingdom. We are the controller of your personal data, meaning that we independently determine the purposes and means of processing it. Registration number: 16216055. Legal address: Suite 12 2nd Floor Queens House, 180 Tottenham Court Road, London, United Kingdom, W1T 7PD.

Chatus is intended for users aged 18 and over. If you are under 18, please do not use the Site or Chatus services. If you do not agree with this Policy, stop using the Site.

The current version of this Policy is published on this page. We may update the Policy to reflect changes in applicable law, court practice, and service operation. Changes take effect 15 days after publication unless the new version states otherwise.

2. Definitions

• Contact information means data that a User may provide to MALJOY to receive reference information, contact support, receive marketing offers and notices, or comply with legal requirements. This information includes, among other things, an email address.
• Personal data means information or data of any nature that can identify an individual, including Contact information and Depersonalized analytical data.
• Cookies mean text files generated by the Site to improve user experience and stored on your device, as well as other similar technologies.
• Depersonalized analytical data means analytical depersonalized information about User actions on the Site, collected and processed to improve the quality of our services.
• Applicable law means personal data protection and privacy rules that apply to you based on your location or other legal criteria.
• Cross-border transfer means transferring data to the territory of a foreign state to an individual or legal entity for data processing purposes, including storage.

3. What data we process

We receive data from you directly, including through communications and completed forms, and through Cookies and other similar technologies installed by our Site in your browser.

Depersonalized analytical data helps us understand how visitors interact with the Site, fix errors, evaluate demographic information, support new device types, and improve marketing processes.

4. Who we may share data with

By agreeing to this Policy, you confirm your consent to the transfer of your data to our affiliated companies and partners that are not our affiliated companies, in accordance with this Policy.

We ensure that the level of protection of Personal data provided under contracts with third parties is the same as or higher than the level provided by this Policy.

• Marketing and business communications. Depending on the nature of your relationship with MALJOY, we process your Personal data to promote our services to you or to our partners.
• Improving the quality of the Site and services, and market research. We may allow third-party services to collect data in order to evaluate, analyze, and improve the Site and services.
• Disclosure required by law. We may disclose information in response to subpoenas, requests, notices, court orders, requests from public authorities, and to exercise or protect our rights.
• Preventing violations. We may transfer information to investigate, prevent, or take measures against unlawful actions, suspected fraud, and situations involving potential security threats.

5. Automated decisions

We do not use automated decision-making and do not use your data for automated evaluation of aspects of your personality, including automated profiling.

6. Cross-border transfer and storage

We store data in the United Kingdom, which provides an adequate level of data protection. By agreeing to this Policy, you consent to the transfer of Personal data to the territory of the United Kingdom.

7. Data security

The security of your Personal data is important to us. We follow generally accepted standards to protect information both during transmission and after we receive it. However, no method of transmission over the Internet or electronic storage is 100% secure.

We and our partners take appropriate security measures to protect against unauthorized access to or disclosure of collected information. For MALJOY, this includes preventing unnecessary disclosure of data, transmitting information through secure connections, and protecting and encrypting it with software of an appropriate level. Our employees and third parties who receive access to your data undertake to maintain confidentiality.

8. Your rights

For residents of the European Economic Area (EEA): if you are an EEA resident, you have rights under applicable data protection laws.

• Right of access: request and receive a copy of the data we hold about you.
• Right to rectification or deletion: request correction or deletion of the data we hold about you.
• Right to restriction of processing: restrict processing of the data we hold about you.
• Right to data portability: receive the data and transfer it to another controller.
• Right to object to processing in certain circumstances.
• Right to withdraw consent at any time if we rely on consent as the basis for processing.

For residents of the Russian Federation: if you are a personal data subject from the Russian Federation, you have the right to protect your rights and freedoms when Personal data is processed, including the right to privacy, personal secrets, and family secrets.

• Require clarification, blocking, or destruction of Personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the stated processing purpose.
• Receive information concerning the processing of Personal data, including the fact of processing, legal grounds, purposes, processing methods, information about persons with access to the data, processing and storage periods, cross-border transfer information, and other information provided by law.
• Protect your rights and legitimate interests, including compensation for losses and moral damages through court proceedings.

For residents of Brazil: if Brazilian law applies to the processing of your Personal data, you have the rights provided by LGPD.

• Request confirmation that data is processed and access to processed data.
• Request correction of incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of LGPD.
• Request portability of data to another service or product provider.
• Request deletion of personal data processed with your consent.
• Receive information about public and private organizations with which MALJOY has shared data.
• Receive information about the possibility of refusing consent and the consequences of such refusal.

For residents of Indonesia: Law No. 27 of 2022 on Personal Data Protection (UU PDP), which came into force in October 2024, gives you rights regarding your personal data.

• Right of access: request confirmation of processing and access to data, including processing purposes, data categories, and recipients.
• Right to rectification: request correction of inaccurate or incomplete personal data without undue delay.
• Right to stop processing and delete data if the data is no longer necessary, consent has been withdrawn, an objection has been upheld, or processing is unlawful.
• Right to withdraw consent at any time.
• Right to object to exclusively automated processing, including profiling, if it has legal or similarly significant consequences.
• Right to request temporary suspension of processing while a dispute regarding data accuracy or processing lawfulness is resolved.
• Right to data portability where technically possible.
• Right to claim compensation or other civil remedies for damages.

For residents of India: the Digital Personal Data Protection Act, 2023 (DPDPA) gives you rights as a data principal regarding personal data that we process as a data fiduciary.

• Right to access information about processing, including a description of personal data, processing methods, and information about persons with whom the data was shared.
• Right to correction, completion, updating, and deletion of inaccurate, incomplete, outdated, or no longer necessary data.
• Right to withdraw consent at any time.
• Right to prompt grievance redressal.
• Right to nominate another person to exercise data protection rights in the event of death or incapacity.

We do not knowingly process children's Personal data without verified consent from parents or legal guardians. If you believe we may have processed a child's Personal data without proper consent, contact us immediately at privacy@maljoy.io.

For residents of the Republic of Turkey: Personal Data Protection Law No. 6698 (DPL) grants rights to data subjects accessing services from the Republic of Turkey.

• Learn whether your personal data is being processed and request information about processing.
• Learn the purpose of processing and whether data is used in accordance with that purpose.
• Know the third parties to whom data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion of personal data in accordance with Article 7 of the DPL.
• Request notification of third parties about completed operations.
• Object to a result arising from analysis of data exclusively by automated systems.
• Claim compensation for damages arising from unlawful data processing.

For California residents: the California Consumer Privacy Act (CCPA) grants California residents special rights.

• Right to access and receive information about categories and specific pieces of Personal data, sources, processing purposes, categories of disclosure, sale, or transfer of data.
• Right to delete Personal data in certain circumstances.
• Right to correct inaccurate Personal data.
• Right to opt out of the sale and sharing of Personal data. We do not sell your Personal data.
• Right to non-discrimination for exercising rights set out in the CCPA.

9. How to exercise your rights

To exercise any of the rights listed above, contact us at privacy@maljoy.io. We will respond to your request within a reasonable time and, in any case, within thirty (30) days. We may need to verify your identity before processing the request.

If providing information may violate the rights and legitimate interests of third parties, we may refuse to provide such information.

• Your email address.
• Information confirming that you are connected with us, or other information confirming that we process your Personal data.
• Your signature or the signature of your representative.

10. Contacting data protection authorities

• For EEA residents: you may lodge a complaint with your local data protection supervisory authority. Contact information is available on the European Commission website: https://commission.europa.eu/about-european-commission/contact_en.
• For residents of the Russian Federation: you may contact Roskomnadzor: https://rkn.gov.ru/contacts/.
• For residents of Brazil: you may send a request to the Brazilian Data Protection Authority (ANPD).
• For California residents: you may file a complaint with the California Privacy Protection Agency at PRA@cppa.ca.gov.
• For residents of Indonesia: complaints may be submitted to the Ministry of Communication and Digital Technology (Komdigi): https://komdigi.go.id. Complaint portal: https://aduankonten.id.
• For residents of India: you may file a complaint with the Data Protection Board of India: https://dpboard.gov.in. We recommend contacting us first at privacy@maljoy.io so that we can try to resolve the matter directly.
• For residents of the Republic of Turkey: you may contact the Personal Data Protection Authority: https://www.kvkk.gov.tr/Icerik/6655/Contact-Us.