1. Introduction

Welcome to Jaffar Ali Tech ("we," "us," "our," or the "Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://jaffaralitech.com (the "Website") and use our services.

By accessing or using our Website and services, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Website.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

2.2 Payment Information

We process all payments through secure, PCI-DSS compliant third-party payment processors. We do not store your full credit card details or banking information on our servers.

2.3 Automatically Collected Information

When you visit our Website, we automatically collect:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent
• Referring / exit pages
• Date and time of visits
• Clickstream data

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

3. How We Use Your Information

We use your personal information for the following purposes:

4. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data based on:

1. 1 Contractual Necessity — Processing necessary to perform our contract with you (e.g., delivering purchased products)
2. 2 Legitimate Interests — Processing necessary for our legitimate business interests, provided your rights do not override those interests (e.g., fraud prevention, service improvement)
3. 3 Legal Obligation — Processing necessary to comply with UK law (e.g., tax record keeping)
4. 4 Consent — Processing based on your explicit, freely given consent (e.g., marketing emails)

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

5.1 Service Providers

We share information with trusted third-party service providers under strict contractual obligations:

All service providers are contractually bound to protect your data and use it solely for the purposes we specify.

5.2 Legal Disclosures

We may disclose your information:

• To comply with applicable laws, regulations, or legal processes
• To respond to lawful requests from public authorities
• To protect our rights, property, or safety, and that of our users
• In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement robust technical and organizational security measures:

• SSL/TLS Encryption: All data transmission is encrypted using industry-standard protocols
• Secure Hosting: Data stored on secure servers with firewalls and intrusion detection
• Access Controls: Personal information accessible only to authorized personnel on a need-to-know basis
• Password Security: Passwords are hashed using industry-standard algorithms
• Regular Security Reviews: We conduct periodic security assessments and updates

7. Data Retention

We retain your personal information only as long as necessary:

After the retention period expires, we securely delete or anonymize your data.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

We will respond to your request within 30 days as required by law. We may request verification of your identity before processing your request.

9. International Data Transfers

Your data is primarily stored and processed in the United Kingdom and the European Economic Area (EEA).

When we transfer data outside the UK/EEA (e.g., to Stripe or PayPal in the US), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
• UK Addendum to the EU Standard Contractual Clauses
• Adequacy decisions by the UK Secretary of State

10. Children's Privacy

Our Website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@JaffarAliTech.com, and we will take steps to delete such information promptly.

11. Third-Party Links and Services

Our Website may contain links to third-party websites, services, or applications (e.g., Stripe checkout, PayPal login). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

• Material Changes: We will notify you by posting a prominent notice on our Website and/or sending an email to your registered email address at least 30 days before the changes take effect.
• Minor Changes: We will update the "Last Updated" date at the top of this policy.

Your continued use of our Website after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices:

14. Digital Products and Downloads

As we sell digital downloadable products (software, themes, plugins, scripts), please note:

• License Keys: We store license key information associated with your purchases
• Download History: We maintain records of your product downloads for support and license verification
• Software Updates: We may use your email to notify you of product updates (if applicable)
• Usage Data: For certain software products, anonymous usage statistics may be collected to improve product functionality