PRIVACY POLICY

Our Commitment to Your Data Journey

From the moment you interact with Compositemix, we want you to understand how your information flows through our systems and the choices available to you. The details that follow describe the path your data takes—starting with what we gather, moving through how it is applied and who else might see it, and ending with the safeguards we maintain and your ability to direct that journey. We believe transparency builds trust, and this overview is designed to give you that clarity without unnecessary complexity.

What We Collect and When

When we talk about personal data, we mean information that can identify you, either directly or when combined with other linked details. This includes anonymous data that is connected back to you. However, once data has been irreversibly anonymized or aggregated so that re-identification is impossible, it no longer falls under this definition.

The information we gather depends on how you engage with us. Broadly, it falls into two categories:

First, there is the data you actively share. This happens when you create an account, reach out to our support team, complete a survey, or use our online help or chat features. If you decide to make a purchase, we also collect payment-related details—specifically, your credit or debit card number, other card information, account and authentication information, and billing, shipping, and contact details—to complete that transaction.

Second, when you visit our websites, our systems automatically receive certain technical data from your device. This can include your device’s unique identifier, IP address, operating system, Internet browser type, usage information, diagnostic information, and location information. Location may be approximated through GPS, your IP address, or similar technologies, helping us understand how our services are accessed and how we can improve them.

How Your Data Moves Through Our Systems

Once collected, your information serves several interconnected purposes, all grounded in our legitimate interest in delivering a secure and evolving experience. A core use is maintaining safety and integrity: we verify accounts and monitor for fraud, investigating activity that appears suspicious, illegal, or in violation of our terms. This processing is essential to protecting both you and our platform.

Beyond security, we rely on personal data to provide, improve, and develop our products, services, and advertising. This includes behind-the-scenes work like data analysis, research, and audits. If you participate in a contest or promotion, we use the details you provide to administer that program, and any supplemental rules for those activities will offer further clarity.

Communication with you is another key part of the flow. With your prior express consent, we may send marketing messages about our own offerings, share updates about your account or transactions, and inform you of policy changes. You can opt out of marketing emails at any time by contacting us. Similarly, only with your prior express consent would we share your data with third-party partners for their own marketing, or personalize your experience on external websites and applications. You hold the ability to withdraw these consents by reaching out to us.

Our use of cookies and similar technologies also plays a role here. Cookies are small text files stored on your browser that help us personalize content, measure advertising, understand user behavior, and maintain a safer environment. The specific cookies in use will vary depending on which of our services you are using.

Who We Work With and Why

Your data does not sit in isolation. We make certain personal data available to strategic partners who assist us in delivering and improving our products, services, and advertising. This sharing is strictly for those operational purposes; we do not provide your information to third parties for their independent marketing use without first obtaining your prior express consent.

There are other scenarios where data may be disclosed. If Compositemix is involved in a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, sale, or bankruptcy, personal data may be transferred to the relevant third party as part of that business change. We may also disclose data to our affiliated companies, or when we determine in good faith that it is reasonably necessary to protect our rights, enforce our terms, investigate fraud, or safeguard our operations and users.

Legal obligations can also require disclosure. We may share data in response to law, legal process, litigation, or requests from public and governmental authorities, whether within or outside your country of residence. This includes situations involving national security, law enforcement, or other matters of public importance.

For residents of the European Economic Area (EEA), our processing is legitimized under specific frameworks. Whenever your consent is the basis for processing, that processing is justified pursuant to Article 6(1) of the General Data Protection Regulation (EU) (“GDPR”). The mandatory laws of the EEA or your country of residence may also apply to how we handle your data.

Your Control Over Your Information

You are not a passive participant in this lifecycle. We take reasonable steps to keep your personal data accurate, complete, and current, and you have a robust set of rights regarding the information we hold. You can request access to your data, ask for corrections, or seek deletion. You also have the right to restrict or object to further processing, and to receive your data in a structured, standard format. Should you have concerns, you may lodge a complaint with the competent data protection authority.

To protect your privacy during any such request, we may ask for verification of your identity and your right to access the data. Please be aware that in certain instances, applicable laws or regulatory requirements may allow or require us to refuse to provide or delete some or all of the personal data we maintain. We are committed to responding to all valid requests within a reasonable timeframe, and in any event, in less than 30 days.

Our services are designed for adults. We do not knowingly collect data from children under 16. If we discover that a child under 16 has provided us with personal data, we will act to delete it as quickly as possible. Please contact us immediately if you become aware of such a situation.

When you encounter links to third-party websites or services through our platform, remember that this Privacy Statement applies only to data we collect. We are not responsible for the privacy practices of those external parties, and we encourage you to review their policies before engaging with them.

Protecting What We Hold

We employ reasonable technical, administrative, and physical security measures designed to safeguard your data against unauthorized access and to ensure its proper use. We retain personal data for as long as necessary to fulfill the purposes outlined here, unless a longer retention period is required or permitted by law.

When Things Change

As technologies, industry practices, and regulatory requirements evolve, we may update this Privacy Statement from time to time. Your continued use of our products and services after the effective date of any revised statement indicates your acceptance of those changes. If you disagree with the updated terms, please stop using our services and contact us to close any account you may have created. For any questions about this Privacy Statement or to exercise your rights, you can reach us at [email protected]. We will respond within a reasonable timeframe, always aiming for less than 30 days.