PRIVACY POLICY

Last Updated: 24.01.2026

1. GENERAL INFORMATION

This Privacy Policy (the “Policy”) governs how Social media 03 (the “Company”, “we”, “us”, “our”) collects, uses, stores, discloses, and otherwise processes personal data in connection with the website located at xlifterlab.com (the “Website”) and all related digital products and services (the “Services”).

This Policy forms an integral part of the Terms and Conditions. By accessing, registering on, or using the Website or Services, you (“User”, “Subscriber”, “you”) confirm that you have read, understood, and agreed to the processing of your personal data in accordance with this Policy.

If you do not agree with this Policy, you must immediately discontinue use of the Website and Services.

2. DATA CONTROLLER

For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable data protection laws, Social media 03 acts as the Data Controller.

Company details:
Company Name: Social media 03
Address: default default
Country: United Kingdom
Company Number: default
Contact Email: [email protected]

3. DEFINITIONS

For the purposes of this Policy:

·       “Personal Data” means any information relating to an identified or identifiable natural person.

·       “Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, restriction, or deletion.

·       “Subscriber” means any individual who has registered and/or paid for access to the Services.

·       “Account” means a registered user profile created using a unique email address and password.

·       “Cookies” means small text files and similar technologies stored on a user’s device to enable functionality, analytics, and other purposes described below.

4. CATEGORIES OF PERSONAL DATA COLLECTED

The Company may collect and process the following categories of Personal Data:

4.1 Identification Data

First name and last name.

4.2 Contact Data

Email address, phone number, postal address.

4.3 Account and Subscription Data

Encrypted login credentials, subscription status, plan type, account activity.

4.4 Billing and Transaction Data

Billing address, country, postal code, transaction identifiers, payment status.

Important: The Company does not store full payment card numbers or CVV codes. Payments are processed by certified third-party payment providers.

4.5 Technical and Usage Data

IP address, browser type, operating system, device identifiers, timestamps, pages visited, interaction data.

4.6 Communication Data

Customer support requests, emails, complaints, feedback, and correspondence.

5. SOURCES OF PERSONAL DATA

Personal Data is collected when you:

·       create an Account

·       purchase or manage a Subscription

·       communicate with customer support

·       interact with the Website or Services

·       browse the Website (via cookies and similar technologies)

Data may also be obtained from trusted service providers strictly for operational and contractual purposes.

6. PURPOSES OF PROCESSING

Personal Data is processed for the following purposes:

·       creating and managing Accounts

·       providing access to the Services

·       managing Subscriptions, billing, and payments

·       processing refunds

·       authenticating users and preventing fraud

·       delivering customer support

·       sending transactional and service-related communications

·       improving Website functionality and performance

·       ensuring security and system integrity

·       complying with legal and regulatory obligations

The Company does not process Personal Data for purposes incompatible with those listed above.

7. LEGAL BASIS FOR PROCESSING

Personal Data is processed on one or more of the following legal bases:

·       Contractual necessity – to perform the Terms and deliver the Services

·       Consent – where explicitly provided (e.g. non-essential cookies)

·       Legal obligation – compliance with applicable laws

·       Legitimate interests – where such interests do not override user rights

Consent may be withdrawn at any time without affecting prior lawful processing.

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What Cookies Are

Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit the Website. Cookies allow the Website to recognize your device and store information about your preferences, session, and usage.

The Website may also use similar technologies such as pixels, local storage, and session storage.

8.2 Categories of Cookies Used

The Website uses the following categories of cookies:

(a) Strictly Necessary Cookies

Required for Website operation, security, authentication, and subscription functionality.

·       Legal basis: Contractual necessity

·       Consent required: No

(b) Functional Cookies

Used to remember preferences such as language, region, and interface settings.

·       Legal basis: Legitimate interest or consent

·       Consent required: Where required by law

(c) Analytics and Performance Cookies

Used to analyze Website usage and improve performance. Data is aggregated and not used to directly identify users.

·       Legal basis: Consent

·       Consent required: Yes

(d) Marketing and Advertising Cookies

Used to measure advertising effectiveness and deliver relevant content.

·       Legal basis: Consent

·       Consent required: Yes

8.3 Purposes of Cookie Use

Cookies are used to:

·       enable core Website functionality

·       manage login sessions

·       remember user preferences

·       analyze traffic and usage

·       improve Services

·       prevent fraud and abuse

·       support marketing activities where permitted

8.4 Cookie Management and User Instructions

You may manage or disable cookies at any time through your browser settings.

Common browsers:

·       Google Chrome → Settings → Privacy and security → Cookies

·       Mozilla Firefox → Settings → Privacy & Security

·       Safari → Preferences → Privacy

·       Microsoft Edge → Settings → Privacy, search, and services

You may also use industry tools such as:

·       https://www.allaboutcookies.org

·       https://www.youronlinechoices.com

Disabling cookies may limit Website functionality or access to Services.

9. DATA SHARING AND DISCLOSURE

The Company does not sell, rent, or trade Personal Data.

Personal Data may be shared only with:

·       payment processors

·       hosting and cloud infrastructure providers

·       IT, analytics, and security service providers

·       professional advisors (legal, accounting)

·       public authorities when legally required

All third parties act under contractual confidentiality and GDPR-compliant obligations.

10. INTERNATIONAL DATA TRANSFERS

Where Personal Data is transferred outside the European Economic Area, appropriate safeguards are applied, including:

·       Standard Contractual Clauses

·       GDPR-compliant transfer mechanisms

·       contractual data protection commitments

11. DATA RETENTION

Personal Data is retained only for as long as necessary, including:

·       Account and Subscription data: contract duration + 5 years

·       Billing and transaction data: 7–10 years (tax and accounting laws)

·       Customer support communications: up to 24 months

·       Technical and security logs: up to 12 months

Data is securely deleted or anonymized once retention periods expire.

12. DATA SECURITY

The Company applies appropriate technical and organizational measures, including:

·       access controls

·       encryption and hashing where appropriate

·       secure infrastructure

·       regular security reviews

·       staff confidentiality obligations

No system can guarantee absolute security.

13. DATA BREACH MANAGEMENT

In the event of a Personal Data breach:

·       risks are promptly assessed

·       supervisory authorities are notified where required

·       affected Users are informed when legally necessary

14. USER RIGHTS

Under applicable data protection laws, you have the right to:

·       access your Personal Data

·       rectify inaccurate or incomplete data

·       request erasure (“right to be forgotten”)

·       restrict or object to processing

·       request data portability

·       withdraw consent at any time

·       lodge a complaint with a supervisory authority in your country of residence or in United Kingdom

Requests should be submitted to [email protected].

15. AUTOMATED DECISION-MAKING

The Company does not engage in fully automated decision-making producing legal or similarly significant effects without human involvement.

16. CHILDREN’S DATA

The Website and Services are intended for individuals 18 years of age or older.

The Company does not knowingly collect Personal Data from minors. If such data is identified, it will be deleted without undue delay upon request by a parent or legal guardian.

17. CHANGES TO THIS PRIVACY POLICY

The Company reserves the right to update this Policy at any time.

Changes become effective upon publication on the Website. Continued use of the Website and Services constitutes acceptance of the updated Policy.

18. CONTACT INFORMATION

For privacy-related inquiries, requests, or complaints:

Email: [email protected]
Phone: +0000000000000000

19. COMPANY INFORMATION

Website: xlifterlab.com
Company Name: Social media 03
Address: default default
Country: United Kingdom
Company Number: default
Director: default
VAT: default