Privacy Policy

Effective Date: September 17, 2025

Introduction

At HuzenMax ("HuzenMax", "we", "us", or "our"), we are deeply committed to protecting and respecting your privacy. This Privacy Policy explains in detail how we collect, use, process, share, and safeguard your personal information when you access and use our website, platform, and services (collectively, the "Services").

We understand that your privacy is paramount, and we have designed our data handling practices to be transparent, secure, and compliant with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy legislation.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any aspect of this Policy, please discontinue use of our Services immediately.

Data Controller Information: For users in the European Union and other jurisdictions where data protection laws apply, HuzenMax serves as the data controller for your personal information. Our registered office is located at [Company Address].

1. Data Collection Framework

We collect information to provide you with exceptional service and to continually improve our platform. The information we collect falls into several categories:

1.1 Seller Data Collection

Merchant Registration Details:

Full name, email address, and telephone number
Physical or business address
Business identification information and tax details
Professional credentials and business licenses (where applicable)
Date of birth (where legally required for age verification)

Commercial Operations Data:

Store name, business description, and branding materials
Product catalogs, inventory data, and pricing information
Payment processing details and banking information
Sales performance metrics and financial data
Profile photographs and biographical information
Communication preferences and language settings

Seller Platform Analytics:

Technical data such as IP address, browser type, and device identifiers
Activity logs related to platform usage
Feature interaction patterns and seller dashboard analytics
Search queries and navigation behavior on the platform

1.2 Customer Data Collection (via Sellers)

Transaction Details:

Customer name and contact information
Shipping and billing addresses
Order details and product specifications
Special delivery instructions and preferences
Purchase timestamps and order tracking data

Financial Processing Information:

Payment information processed through secure third-party payment processors
Transaction IDs and payment confirmation details
Refund and chargeback information (when applicable)

Customer Engagement Data:

Customer service communications and support tickets
Product reviews, ratings, and feedback
Return and exchange requests
Communication between customers and sellers through our platform

1.3 Automated Data Collection

System-Generated Information:

Internet Protocol (IP) address and geolocation data
Browser type, version, and operating system information
Device identifiers, including mobile device IDs
Referring and exit pages, clickstream data
Time stamps, session duration, and page views
Search queries and navigation patterns
Platform interaction data and feature usage statistics

Digital Tracking Technologies:

Session cookies for authentication and security
Persistent cookies for user preferences and settings
Analytics cookies to understand user behavior
Marketing cookies for targeted advertising (with consent)
Web beacons and pixel tags for email engagement tracking

1.4 External Source Data Collection

Third-Party Service Integrations:

Payment processors and financial institutions
Shipping and logistics providers
Marketing and advertising partners
Analytics and data enhancement services
Social media platforms (when you connect your accounts)
Credit reporting agencies and fraud prevention services

Public Information Sources:

Business directories and professional networks
Social media profiles and public posts
Government databases and regulatory filings
Industry publications and news sources

2. Data Processing and Utilization

We process your personal information for various legitimate business purposes, always ensuring that our use is lawful, fair, and transparent.

2.1 Service Provision and Platform Operations

Account Management: Creating and maintaining user accounts, authenticating users, and providing personalized experiences
Order Processing: Facilitating transactions, processing payments, coordinating shipping, and handling returns
Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance
Platform Security: Monitoring for fraudulent activity, preventing unauthorized access, and maintaining system integrity
Quality Assurance: Ensuring service reliability, performance optimization, and bug resolution

2.2 Business Intelligence and Analytics

Usage Analytics: Understanding how users interact with our platform to improve functionality and user experience
Market Research: Analyzing trends, preferences, and behaviors to inform business decisions
Performance Monitoring: Tracking key performance indicators and service metrics
Predictive Analytics: Using data to anticipate user needs and optimize services

2.3 Communication and Marketing

Essential Communications: Sending account notifications, security alerts, and service updates
Marketing Communications: With explicit consent, delivering promotional content, special offers, and relevant product recommendations
Surveys and Feedback: Requesting input on services, conducting market research, and gathering user testimonials
Educational Content: Providing helpful resources, tutorials, and best practices

2.4 Legal and Regulatory Compliance

Legal Obligations: Complying with applicable laws, regulations, and legal processes
Dispute Resolution: Investigating and resolving conflicts between users
Regulatory Reporting: Providing information to regulatory authorities when required
Tax and Financial Reporting: Maintaining records for accounting and tax purposes

3. Legal Foundation for Processing (GDPR Compliance)

Under GDPR, we process personal data based on the following legal grounds:

Consent: For marketing communications, non-essential cookies, and optional data collection. Contract Performance: To fulfill our obligations under our Terms of Service and user agreements. Legitimate Interests: For platform security, fraud prevention, analytics, and business operations. Legal Obligation: To comply with applicable laws and regulatory requirements. Vital Interests: In rare circumstances, to protect the fundamental interests of individuals

4. Information Sharing and Third-Party Disclosure

We respect your privacy and limit data sharing to essential business purposes. We never sell personal data to third parties for their marketing purposes.

4.1 Service Providers and Business Partners

We share information with carefully vetted third-party service providers who assist us in operating our platform:

Payment Processors: For secure transaction processing and fraud prevention
Cloud Hosting Providers: For data storage and platform infrastructure
Shipping and Logistics: For order fulfillment and delivery services
Analytics Providers: For usage analysis and performance monitoring
Customer Support Tools: For efficient customer service delivery
Marketing Platforms: For authorized promotional communications

All third-party partners are bound by strict contractual obligations to protect your data and use it only for specified purposes.

4.2 Seller-Customer Data Sharing

For Sellers: We provide sellers with the necessary customer information to fulfill orders, including:

Customer name and shipping address
Contact information for delivery coordination
Order details and special instructions
Basic transaction information

Data Protection Requirements: Sellers must:

Handle customer data responsibly and securely
Use data solely for order fulfillment purposes
Comply with applicable privacy laws and regulations
Implement appropriate security measures
Delete customer data when no longer needed

4.3 Legal Disclosures

We may disclose personal information when required by law or when we believe disclosure is necessary to:

Comply with legal processes, court orders, or governmental requests
Enforce our Terms of Service and other agreements
Protect our rights, property, or safety, or that of our users
Investigate and prevent fraudulent or illegal activities
Respond to emergencies involving potential harm

4.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, personal information may be transferred as part of the business transaction. We will provide notice and ensure continued protection of your data under this Privacy Policy.

5. Security Infrastructure and Data Protection

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5.1 Technical Safeguards

Encryption: Data is encrypted both in transit and at rest using industry-standard protocols
Access Controls: Multi-factor authentication and role-based access restrictions
Secure Infrastructure: Regular security audits, penetration testing, and vulnerability assessments
Monitoring Systems: 24/7 security monitoring and intrusion detection
Data Backup: Regular, secure backups with disaster recovery procedures

5.2 Organizational Measures

Privacy Training: Regular employee training on data protection and privacy best practices
Data Minimization: Collecting and retaining only necessary personal information
Privacy by Design: Incorporating privacy considerations into system development
Incident Response: Established procedures for handling potential data breaches
Vendor Management: Due diligence and ongoing oversight of third-party providers

5.3 Breach Notification

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will:

Notify affected users within 72 hours of discovery
Provide details about the nature and extent of the breach
Explain the steps we are taking to address the incident
Offer guidance on protective measures you can take
Report the breach to the relevant supervisory authorities as required by law

6. Information Retention and Disposal Policies

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, and resolve disputes.

6.1 Retention Periods

Account Information: Retained while your account is active and for up to 7 years after closure for legal and business purposes
Transaction Data: Kept for 7 years for accounting, tax, and legal compliance purposes
Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
Support Communications: Maintained for 3 years for quality assurance and dispute resolution
Analytics Data: Aggregated data may be retained indefinitely after anonymization

6.2 Data Deletion

Upon account closure or data deletion request, we will:

Permanently delete personal information from active systems within 30 days
Remove data from backup systems during regular backup cycles
Retain only anonymized or aggregated data for analytical purposes
Maintain minimal information required for legal compliance

7. Individual Privacy Rights and Controls

We respect your fundamental right to privacy and provide you with comprehensive control over your personal information.

7.1 Universal Rights

Regardless of your location, you have the right to:

Access: Request information about what personal data we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal data (subject to legal requirements)
Communication Preferences: Opt out of marketing communications at any time

7.2 Enhanced Rights (GDPR and Similar Laws)

If you are located in the EU, UK, or other jurisdictions with comprehensive privacy laws, you have additional rights:

Right to Portability: Request your data in a structured, machine-readable format
Right to Restriction: Limit how we process your personal information
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent for processing where consent was the legal basis
Right to Lodge Complaints: File complaints with supervisory authorities

7.3 Exercising Your Rights

To exercise your privacy rights:

Contact us using the information provided in Section 12
Provide sufficient detail to verify your identity
Specify which rights you wish to exercise
We will respond within 30 days (or as required by applicable law)
Complex requests may require additional time, and we will keep you informed

8. Digital Tracking Technologies and Cookie Management

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

8.1 Types of Cookies We Use

Essential Cookies: Required for basic platform functionality, security, and user authentication. Performance Cookies: Help us understand how users interact with our platform. Functionality Cookies: Remember your preferences and settings. Marketing Cookies: Used for targeted advertising and measuring campaign effectiveness

8.2 Cookie Management

You can control cookie settings through:

Your browser settings and preferences
Our cookie consent management tool
Opting out of specific tracking technologies
Third-party opt-out mechanisms for advertising cookies

Note: Disabling certain cookies may limit platform functionality and user experience.

9. Cross-Border Data Transfers

We may transfer personal information to countries outside your residence jurisdiction to provide our Services effectively.

9.1 Transfer Safeguards

When transferring data internationally, we ensure adequate protection through:

Adequacy Decisions: Transfers to countries with adequate data protection laws
Standard Contractual Clauses: EU-approved contractual protections
Certification Schemes: Participation in recognized privacy frameworks
Binding Corporate Rules: Internal policies ensuring consistent data protection

9.2 Data Processing Locations

Your personal information may be processed in:

United States (primary data centers)
European Union (for EU users)
Other countries where our service providers operate

We maintain the same level of protection regardless of processing location.

10. Minor Protection and Parental Oversight

We are committed to protecting children's privacy and do not knowingly collect personal information from individuals under 16 years of age.

10.1 Age Verification

We implement age verification measures during account registration
Users must confirm they meet the minimum age requirements
We may request additional verification for suspected underage accounts

10.2 Parental Rights

If we discover that we have collected information from a child under 16:

We will delete the information immediately
Parents may contact us to request information about data collection
We will provide tools for parents to manage their children's online privacy

11. External Platforms and Third-Party Integrations

Our platform may contain links to third-party websites, services, or applications not operated by HuzenMax.

11.1 Third-Party Responsibility

We are not responsible for third-party privacy practices
Each third party has its own privacy policy and terms
We encourage you to review third-party privacy policies
Our Privacy Policy does not apply to third-party services

11.2 Social Media Integration

When connecting social media accounts:

We collect only the information you authorize
Social media providers have separate privacy policies
You can disconnect social accounts at any time
We do not post to your social media without permission

12. Policy Evolution and Amendment Procedures

We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations.

12.1 Notification of Changes

Material changes will be announced via email or platform notification
Policy updates will be posted on our website
The effective date will be updated to reflect changes
Continued use of Services constitutes acceptance of updates

12.2 Reviewing Changes

We encourage you to:

Review this Policy periodically
Contact us with questions about updates
Exercise your rights if you disagree with changes
Discontinue service use if you cannot accept updates

13. Communication Channels and Privacy Support

13.1 General Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@huzenmax.com
Phone: +1 240 545 8093
Address: 704 Evans St, Emporia, VA 23847, USA
Response Time: We respond to privacy inquiries within 7 days

13.2 Data Protection Officer

Our Data Protection Officer oversees privacy compliance and serves as your primary contact for:

GDPR-related inquiries and requests
Privacy impact assessments
Data breach notifications
Regulatory compliance matters

Contact: support@huzenmax.com

13.3 Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority.

This Privacy Policy is part of our Terms of Service and should be read in conjunction with those terms. By using HuzenMax Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.