Privacy Policy

Introduction

At 3LI Global, we take your privacy seriously and are committed to safeguarding the personal data you share with us. This Privacy Policy outlines how we collect, use, store, and protect your personal information, ensuring compliance with global data protection standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

By providing clear and transparent information about our data handling practices, we aim to empower you with control over your personal data. This document serves as a guide to understand:

• What personal data we collect (refer to Section 4: Information We Collect).
• How we process and store your data (refer to Section 7: Purposes of Data Processing and Section 10: Data Retention).
• Your rights under GDPR, CCPA, and other regulations (refer to Section 11: Your Rights as a Data Subject and Section 12: Your Rights Under CCPA).

Purpose of the Privacy Policy

The purpose of this Privacy Policy is to provide transparency about how 3LI Global processes personal data and to:

1. Explain the types of personal data we collect, the reasons for collection, and how it is used.
2. Outline your rights and how you can exercise them, including rights to access, rectify, or erase your data.
3. Reassure you of the technical and organizational measures we implement to keep your data secure (refer to Section 14: Security Measures).
4. Establish our commitment to compliance with GDPR, CCPA, and other applicable data protection regulations.

Our Commitment to Protecting Your Personal Data

We are committed to the highest standards of data privacy and security. This includes:

• Transparency: Ensuring you have access to clear and accurate information about how we handle your data.
• Accountability: Taking full responsibility for protecting your data and complying with legal obligations.
• Proactive Measures: Continuously improving our data protection policies and practices to address evolving regulatory and technological landscapes.

This Privacy Policy applies to all interactions with 3LI Global, including when you:

• Visit our website.
• Communicate with us via email, phone, or other channels.
• Use our services or interact with our team members.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you have any questions or concerns about how your data is handled, please contact us (refer to Section 20: Contact Information).

Definitions

This Privacy Policy includes the following key terms to ensure clarity and consistency. Understanding these terms will help you navigate our data protection practices and your rights effectively:

1. Personal Data

Any information relating to an identified or identifiable individual (the "Data Subject"). This includes, but is not limited to:

• Basic identifiers such as name, email address, phone number, or physical address.
• Digital identifiers such as IP addresses, device IDs, or cookie data.
• Any information that can be linked to an individual, either directly or indirectly.

2. Data Controller

The entity responsible for determining the purposes and means of processing Personal Data. In this context, 3LI Global acts as the Data Controller, ensuring compliance with relevant data protection laws while overseeing how your data is collected and processed.

3. Data Processor

A third party that processes Personal Data on behalf of the Data Controller. For instance, 3LI Global may engage cloud hosting services, analytics providers, or payment gateways to process data securely (refer to Section 8: Data Sharing and Disclosure).

4. Data Subject

The individual whose Personal Data is being processed. Examples include:

• Clients: Individuals using our services.
• Website Visitors: Individuals accessing our website or engaging with its features.

5. Processing

Any operation or set of operations performed on Personal Data, whether by automated means or not. Examples include:

• Collection, recording, or storage of data.
• Retrieval, consultation, or use of data.
• Disclosure, deletion, or destruction of data.

6. Consent

A freely given, specific, informed, and unambiguous indication of an individual’s agreement to the processing of their Personal Data. Consent must be actively provided (e.g., by ticking a box or completing a form) and can be withdrawn at any time (refer to Section 11: Your Rights as a Data Subject).

7. Special Categories of Data (Sensitive Data)

Data requiring additional protection under GDPR and other privacy laws. This includes, but is not limited to:

• Data revealing racial or ethnic origin, political opinions, or religious beliefs.
• Genetic or biometric data for identification purposes.
• Health-related data or data concerning a person’s sexual orientation.

Note: 3LI Global does not process such data unless explicitly necessary and with your clear consent.

8. Data Breach

A security incident leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to Personal Data. Examples include:

• A cyberattack exposing sensitive information.
• Loss of data due to hardware theft or system errors.

Our breach management practices are detailed in Section 14: Security Measures.

9. Cookies

Small files placed on your device when you visit our website. Cookies enable functionalities such as:

• Improving your browsing experience.
• Analyzing website traffic.
• Delivering personalized content. For more details, refer to Section 16: Cookies and Tracking Technologies.

10. Third Parties

Organizations or individuals outside of 3LI Global with whom we may share your data under specific circumstances. These include:

• Service Providers: Partners assisting in service delivery, such as payment processors or cloud providers.
• Regulatory Authorities: Entities requiring data for legal compliance.

11. Supervisory Authority

A public body responsible for overseeing compliance with data protection laws. For EU residents, this refers to the relevant authority in their member state. For more information, refer to Section 20: Contact Information.

12. Anonymization and Pseudonymization

• Anonymization: Irreversible transformation of data to prevent identification of an individual.
• Pseudonymization: Processing of data to obscure direct identifiers, which can only be reversed with additional information.

These methods enhance privacy while allowing us to analyze trends and improve services securely.

These definitions form the foundation of this Privacy Policy, ensuring transparency in our data protection practices. Should you require clarification on any of these terms, feel free to contact us (refer to Section 20: Contact Information).

Data Controller and Contact Information

Who is the Data Controller?

The Data Controller is the entity that determines the purposes and methods of processing Personal Data and bears responsibility for its secure handling in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other global regulations. For the purposes of this Privacy Policy, 3LI Global is the Data Controller.

As the Data Controller, 3LI Global:

• Ensures the lawful, fair, and transparent processing of your Personal Data.
• Implements appropriate security measures to safeguard your data from unauthorized access, misuse, or loss.
• Addresses your rights as a Data Subject (refer to Section 11: Your Rights as a Data Subject).

Data Controller Details

3LI Global

Registered Address:

Business Center, Sharjah Publishing City, Sharjah, UAE

Contact Email:

privacy@3li.global

Role of the Data Controller

As the Data Controller, 3LI Global assumes the following responsibilities:

1. Collecting and processing Personal Data for legitimate purposes, as outlined in this Privacy Policy (refer to Section 7: Purposes of Data Processing).
2. Ensuring data processing activities comply with applicable laws and regulations.
3. Facilitating the exercise of your data protection rights, such as the rights to access, rectification, erasure, and data portability (refer to Section 11: Your Rights as a Data Subject).

Data Protection Officer (DPO)

In accordance with the GDPR and other applicable regulations, 3LI Global has appointed a Data Protection Officer (DPO) to oversee data protection activities and ensure compliance. The DPO serves as a point of contact for all data protection-related queries or concerns.

You may contact the DPO at:

Email: dpo@3li.global

If a formal DPO appointment is not required under applicable laws, all data protection matters are handled by our privacy team, which is fully committed to upholding the highest standards of data protection.

How to Contact Us

If you have any questions, concerns, or requests about how we collect, store, use, or protect your Personal Data, please do not hesitate to reach out to us:

Contact Email: privacy@3li.global

Mailing Address: Business Center, Sharjah Publishing City, Sharjah, UAE

We strive to address your queries promptly and transparently.

Supervisory Authorities

If you are located within a jurisdiction where a Supervisory Authority oversees data protection compliance, you have the right to contact your local authority for complaints or concerns about our data processing practices. For example:

• European Union Residents: Contact the Supervisory Authority in your EU member state.
• UK Residents: You can reach out to the Information Commissioner’s Office (ICO).
• Other Jurisdictions: Please refer to your local or regional data protection authority.

Should you need assistance in identifying the appropriate Supervisory Authority, feel free to contact us for guidance.

Third-Party Collaboration

While 3LI Global acts as the primary Data Controller, we may collaborate with third-party service providers who act as Data Processors to process your Personal Data on our behalf (refer to Section 8: Data Sharing and Disclosure). In these cases:

• Third parties are contractually obligated to process your data securely and in accordance with our instructions.
• Data transfers, including those to entities outside your jurisdiction, are conducted with appropriate safeguards to ensure compliance with GDPR and other regulations (refer to Section 9: International Data Transfers).

Commitment to Transparency and Accountability

As part of our commitment to transparency, 3LI Global:

• Regularly reviews and updates our data protection practices to ensure compliance with evolving laws.
• Maintains records of processing activities as required by GDPR Article 30.
• Encourages you to exercise your rights as a Data Subject to ensure you remain in control of your Personal Data.

Information We Collect

At 3LI Global, we are committed to collecting only the data necessary to provide and enhance our services while ensuring transparency in how we handle your information. Below is an outline of the categories of information we collect, how it is obtained, and its purposes.

1. Categories of Personal Information

We may collect the following types of Personal Data, either directly from you or through automated processes:

1.1 Contact Information

• Details Collected: Name, email address, phone number, mailing address, job title, and company name.
• Purpose: To communicate with you, respond to inquiries, and provide tailored services.

1.2 Account and Billing Information

• Details Collected: Payment details (e.g., bank account or credit card information), billing address, VAT/GST information, and transaction history.
• Purpose: To process payments, manage subscriptions, and maintain accurate financial records.

1.3 Professional Information

• Details Collected: Job title, company details, industry, and business needs.
• Purpose: To tailor our services to your specific business context and requirements.

1.4 Communication Data

• Details Collected: Information you provide when contacting us, such as inquiries, feedback, and service requests.
• Purpose: To ensure high-quality customer support and resolve your concerns efficiently.

1.5 Sensitive Personal Data

• Details Collected: We do not intentionally collect sensitive data (e.g., health information, biometric data, or political opinions) unless explicitly required and authorized for specific services.
• Purpose: If required, only collected with your explicit consent and handled with the highest level of security.

2. Categories of Non-Personal Information

In addition to Personal Data, we may collect non-identifiable information to improve our services and enhance your user experience:

2.1 Usage Data

• Details Collected: IP address, browser type, operating system, referring URL, pages visited, session duration, and interaction data.
• Purpose: To analyze website performance, optimize content, and improve user experience.

2.2 Device Information

• Details Collected: Device type, model, operating system version, and unique device identifiers.
• Purpose: To ensure compatibility with our services and diagnose technical issues.

2.3 Cookies and Similar Technologies

• Details Collected: Cookie IDs, browsing patterns, preferences, and interactions with website features.
• Purpose: To personalize your browsing experience, track analytics, and manage website functionality (refer to Section 16: Cookies and Tracking Technologies).

2.4 Aggregated Data

• Details Collected: Statistical or anonymized data derived from Personal Data but not linked to identifiable individuals.
• Purpose: To identify usage trends and improve service offerings.

3. How We Collect Information

We collect Personal and Non-Personal Data through the following methods:

3.1 Direct Interactions

• Examples: Filling out forms, subscribing to services, or contacting us via email or phone.

3.2 Automated Technologies

• Examples: Using cookies, server logs, and third-party analytics tools (e.g., Google Analytics) to gather technical and usage data.

3.3 Third-Party Sources

• Examples: Data from partners, resellers, or public sources to enrich our understanding of your business needs.

4. Purposes of Collection

We collect and process data for the purposes outlined in Section 7: Purposes of Data Processing. Key purposes include:

• Providing and personalizing our services.
• Ensuring secure transactions and communications.
• Complying with legal and regulatory requirements.

5. Your Control Over Information

You have the right to:

• Access and rectify your Personal Data (refer to Section 11: Your Rights as a Data Subject).
• Opt out of cookies or tracking (refer to Section 16: Cookies and Tracking Technologies).
• Withdraw consent for data processing where applicable.

How We Collect Information

At 3LI Global, we collect information through a variety of methods, ensuring transparency and compliance with applicable data protection regulations. Below is an overview of how we gather Personal and Non-Personal Data:

1. Direct Interactions

We collect Personal Data that you provide directly to us when you engage with our services or communicate with us. Examples include:

1.1 Filling Out Forms

• Examples: Contact forms, service inquiry forms, or event registration forms on our website.
• Data Collected: Name, email address, phone number, company name, and inquiry details.

1.2 Communications

• Examples: Emails, phone calls, live chat, or other communication channels.
• Data Collected: Content of your messages, preferences, and any additional details you provide.

1.3 Account Setup and Transactions

• Examples: When you create an account, subscribe to our services, or make a payment.
• Data Collected: Account details, billing information, and transaction history.

2. Automated Technologies

We use automated tools to collect Non-Personal Data and some technical information to improve your experience and optimize our services.

2.1 Cookies and Similar Technologies

• Examples: Cookies, web beacons, and tracking pixels on our website.
• Data Collected: Browser type, session duration, pages visited, and user preferences.
• Purpose: To personalize your browsing experience, analyze website performance, and deliver relevant content. For more details, see Section 16: Cookies and Tracking Technologies.

2.2 Analytics Tools

• Examples: Tools such as Google Analytics or other analytics software.
• Data Collected: Aggregated data on user behavior, traffic patterns, and interactions with website features.
• Purpose: To monitor and improve the functionality and usability of our website.

2.3 Log Files

• Examples: Server logs and system monitoring tools.
• Data Collected: IP addresses, timestamps, and error reports.
• Purpose: To diagnose technical issues and ensure website security.

3. Third-Party Sources

We may also collect information about you from trusted third-party sources to enrich your experience and improve our services.

3.1 Business Partners

• Examples: Data shared by partners, resellers, or affiliates during joint collaborations or transactions.
• Data Collected: Professional details such as company size, industry, and business needs.

3.2 Social Media Platforms

• Examples: Interactions with our social media accounts on platforms like LinkedIn, Facebook, or Twitter.
• Data Collected: Publicly shared profile information, posts, or comments.
• Purpose: To understand customer engagement and improve communication strategies.

3.3 Publicly Available Data

• Examples: Information from business directories or public records.
• Data Collected: Business-related contact information and demographic details.
• Purpose: To identify potential clients and enhance outreach efforts.

4. Combined Data Sources

In some cases, we may combine data from multiple sources (e.g., direct interactions, automated technologies, and third-party providers) to create a more complete profile of your preferences and needs. This ensures that we provide you with the most relevant and personalized services.

5. Your Rights

You have the right to:

• Control how we collect data, including opting out of cookies and tracking technologies (refer to Section 16: Cookies and Tracking Technologies).
• Access or rectify data collected through direct or third-party sources (refer to Section 11: Your Rights as a Data Subject).

Legal Basis for Processing Personal Data

At 3LI Global, we process Personal Data in accordance with the principles set forth in the General Data Protection Regulation (GDPR) and other applicable privacy laws. These principles require that every data processing activity is justified by a valid legal basis. Below, we explain the legal grounds for our data processing activities:

1. Contractual Necessity

We process Personal Data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes situations such as:

• Service Provision: Delivering the services you have subscribed to, such as CRM implementation, IT consulting, or support.
• Account Creation and Management: Setting up and maintaining your user accounts.
• Transactions and Payments: Processing payments, invoices, and other financial activities required to fulfill our contractual obligations.

Failure to provide the necessary data may prevent us from delivering the requested services or entering into a contract.

2. Legitimate Interest

We process Personal Data where it is necessary for the purposes of our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. Examples include:

• Improving Services: Conducting analytics to optimize our offerings and enhance user experience.
• Customer Support: Resolving inquiries, troubleshooting issues, and maintaining service quality.
• Marketing and Business Development: Sending relevant updates, promotional materials, and event invitations (where permitted by law without explicit consent).
• Fraud Prevention and Security: Detecting and mitigating fraudulent activities and ensuring the security of our systems and data.
• Operational Efficiency: Streamlining internal processes, resource allocation, and vendor management.

You have the right to object to processing based on legitimate interests (refer to Section 11: Your Rights as a Data Subject).

3. Consent

Where required by law, we process Personal Data based on your explicit consent. This applies to activities such as:

• Marketing Communications: Sending newsletters, promotional emails, and updates (when explicit consent is required under local regulations).
• Cookies and Tracking: Using cookies and similar technologies to analyze user behavior, improve website functionality, or deliver personalized content (refer to Section 16: Cookies and Tracking Technologies).
• Sensitive Data: Collecting and processing special categories of data (e.g., health information) in limited circumstances with your explicit consent.

You may withdraw your consent at any time, without affecting the lawfulness of processing conducted before the withdrawal (refer to Section 11: Your Rights as a Data Subject).

4. Compliance with Legal Obligations

We process Personal Data to comply with our legal and regulatory obligations. Examples include:

• Taxation and Financial Reporting: Maintaining records for audit and regulatory compliance.
• Regulatory Filings: Complying with local, national, and international laws related to employment, contracts, and anti-fraud measures.
• Responding to Legal Requests: Providing information to authorities as required by court orders, subpoenas, or other legal processes.

Processing under this basis is non-negotiable as it ensures compliance with applicable laws.

5. Combination of Legal Bases

In certain situations, a single data processing activity may be supported by multiple legal bases. For example:

• Processing your data for contractual purposes (e.g., service delivery) while ensuring compliance with legal obligations (e.g., financial record-keeping).
• Using analytics for legitimate interests (e.g., improving services) with your explicit consent for tracking technologies.

6. Your Control and Rights

As a Data Subject, you have the right to:

• Request information about the legal basis for any specific processing activity.
• Withdraw your consent where it is the basis for processing.
• Object to processing based on legitimate interests.

For detailed instructions on exercising your rights, refer to Section 11: Your Rights as a Data Subject.

Purposes of Data Processing

At 3LI Global, we process Personal Data responsibly and transparently to ensure the effective delivery of services, compliance with legal requirements, and the protection of your data. Below, we outline the specific purposes for which we process your information:

1. Providing and Enhancing Services

We process Personal Data to deliver our services effectively, ensure their quality, and improve user experience. Examples include:

• Service Delivery: Implementing and managing CRM solutions, IT services, and other professional offerings tailored to your business needs.
• Customer Support: Addressing inquiries, troubleshooting technical issues, and resolving service requests promptly.
• Customization and Optimization: Personalizing your experience, including tailoring our services to match your preferences and requirements.
• Data Analytics: Using aggregated and anonymized data to analyze trends, monitor performance, and refine our service offerings.

2. Marketing Communications (with Consent)

We use your Personal Data to keep you informed about our latest updates, offerings, and events, provided you have given explicit consent where required by law. Examples include:

• Newsletters and Updates: Sharing relevant information about new products, features, or company news.
• Event Invitations: Inviting you to webinars, workshops, and other events related to our services.
• Promotional Materials: Sending special offers or campaigns designed to add value to your business.

Opt-Out Option: You can withdraw your consent or unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us (refer to Section 11: Your Rights as a Data Subject).

3. Fraud Prevention

To protect both you and 3LI Global, we process data to prevent, detect, and mitigate fraudulent activities or security risks. Examples include:

• Authentication: Verifying your identity to prevent unauthorized access to our systems.
• Monitoring: Tracking unusual or suspicious activities to safeguard data integrity.
• Risk Management: Assessing and managing potential security vulnerabilities or threats.

4. Legal Compliance

We process Personal Data to meet our obligations under applicable laws and regulations. Examples include:

• Regulatory Requirements: Complying with tax, financial, and reporting laws.
• Legal Disputes: Providing data as necessary in connection with legal claims or investigations.
• Government Requests: Responding to lawful requests from regulatory authorities or enforcement agencies.

5. Combined Purposes

In some cases, we may process Personal Data for multiple purposes. For example:

• Providing a service (e.g., CRM implementation) while using analytics to improve its delivery.
• Managing transactions (e.g., invoicing) while complying with legal obligations (e.g., tax filing).

Your Control and Transparency

You remain in control of your data, and we ensure that our processing activities are:

• Purpose-Limited: Used only for the purposes outlined in this Privacy Policy.
• Minimized: Limited to the data strictly necessary to achieve these purposes.

For more details about your rights regarding the purposes of data processing, refer to Section 11: Your Rights as a Data Subject.

Data Sharing and Disclosure

At 3LI Global, we are committed to ensuring that your Personal Data is only shared when necessary, and always in compliance with applicable data protection laws. This section outlines the categories of third-party recipients with whom we may share your data and the specific scenarios under which data sharing occurs.

1. Categories of Third-Party Recipients

1.1 Service Providers

We may share your Personal Data with trusted service providers who assist us in delivering our services. These providers act as Data Processors on our behalf and are contractually obligated to handle your data securely and only for the purposes specified by 3LI Global. Examples include:

• Cloud Hosting Providers: For data storage and application hosting.
• Payment Processors: For managing transactions and invoicing.
• Analytics and Marketing Tools: For analyzing user behavior and sending promotional communications (with your consent).

1.2 Business Partners

In certain cases, we collaborate with business partners to provide integrated or co-branded services. These partners may process your data as independent Data Controllers under their privacy policies.

1.3 Legal Authorities and Regulators

We may disclose Personal Data to law enforcement agencies, regulatory bodies, or government authorities when required to:

• Comply with legal obligations.
• Respond to lawful requests, subpoenas, or court orders.
• Protect our rights, property, or safety, as well as those of our users or the public.

1.4 Professional Advisors

We may share your Personal Data with auditors, legal advisors, consultants, or other professionals to ensure regulatory compliance or address legal matters.

1.5 Affiliates and Subsidiaries

We may share your Personal Data with affiliated entities or subsidiaries within the 3LI Global group for business continuity, internal reporting, or operational purposes.

2. Specific Scenarios for Data Sharing

2.1 Service Delivery

To fulfill our contractual obligations, we may share your Personal Data with third parties who assist in delivering our services. For example:

• Sharing project details with subcontracted IT consultants.
• Providing access to client data for CRM integration services.

2.2 Marketing Campaigns

If you have opted in, we may share your contact details with marketing platforms to send targeted campaigns, newsletters, or event invitations.

2.3 Legal Compliance

We may disclose data when required to:

• File mandatory financial or tax reports.
• Cooperate with law enforcement investigations.
• Address legal claims or defend against potential litigation.

2.4 Business Transfers

In the event of a merger, acquisition, or sale of company assets, your Personal Data may be transferred to the new entity. If such a transfer occurs, you will be notified, and your data rights will remain protected.

2.5 Protecting Rights and Security

We may share data to:

• Detect and prevent fraud or security breaches.
• Enforce our terms and conditions.
• Safeguard the safety of users or the public.

3. Safeguards for Data Sharing

When sharing your Personal Data, we ensure:

• Data Minimization: Only the data necessary for the specified purpose is shared.
• Legal Agreements: Third-party recipients are bound by data protection agreements that enforce strict confidentiality and security standards.
• International Transfers: For data shared across borders, we implement safeguards such as Standard Contractual Clauses (SCCs) to ensure compliance with GDPR and other regulations (refer to Section 9: International Data Transfers).

4. Your Rights

You have the right to:

• Request details about third parties with whom we share your data.
• Object to data sharing in certain circumstances (refer to Section 11: Your Rights as a Data Subject).
• Withdraw consent for data sharing, where applicable.

International Data Transfers

As a global organization, 3LI Global may process and transfer Personal Data to countries outside of your jurisdiction. This section explains how we handle cross-border data transfers and the measures we implement to ensure compliance with international data protection laws, including the General Data Protection Regulation (GDPR).

1. Explanation of Cross-Border Data Transfers

To provide our services, your Personal Data may be transferred to, stored in, or processed by 3LI Global, its affiliates, or third-party service providers in countries that may not have the same data protection laws as your country of residence. These transfers typically occur under the following scenarios:

• Service Delivery: Sharing data with global service providers (e.g., cloud hosting, CRM platforms) to support seamless operations.
• Internal Operations: Centralizing data management across our global offices to improve service quality and efficiency.
• Third-Party Processing: Collaborating with partners, vendors, or consultants located in different countries.

2. Safeguards for Compliance

To ensure your Personal Data is adequately protected during international transfers, 3LI Global implements the following safeguards:

2.1 Adequacy Decisions

For transfers to countries recognized by the European Commission or other relevant authorities as providing an adequate level of data protection, your Personal Data is treated with the same level of protection as required within your jurisdiction.

2.2 Standard Contractual Clauses (SCCs)

For transfers to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. These legally binding clauses establish specific obligations for protecting your data during cross-border transfers.

2.3 Binding Corporate Rules (BCRs)

Where applicable, we implement Binding Corporate Rules (BCRs) to ensure compliance within the 3LI Global group, providing robust data protection standards for intra-organizational transfers.

2.4 Additional Technical Measures

In some cases, we may implement additional measures to protect your data, such as:

• Encryption of data during transmission and storage.
• Anonymization or pseudonymization of data where feasible.
• Regular audits of third-party vendors to verify compliance with security standards.

2.5 Privacy Shield (Historical Reference)

While the EU-U.S. Privacy Shield Framework has been invalidated, 3LI Global ensures that transfers to the United States are conducted under alternative lawful mechanisms, such as SCCs or BCRs.

3. Data Subject Rights in Cross-Border Transfers

When your Personal Data is transferred internationally, you retain all rights under applicable data protection laws, including:

• Right to Information: Requesting details about the countries where your data is processed and the safeguards in place.
• Right to Object: Objecting to international transfers in certain circumstances, subject to legal and contractual obligations.
• Access to Agreements: Requesting a copy of the relevant SCCs or other contractual safeguards, where applicable.

4. How We Ensure Transparency

We remain committed to providing transparency about our cross-border data transfers. If you have concerns about how your data is handled internationally, you can contact us at privacy@3li.global.

5. Ongoing Compliance

As global data transfer mechanisms evolve, 3LI Global continuously monitors regulatory developments to ensure compliance. We update our safeguards and policies as needed to align with new legal requirements or best practices.

Data Retention

At 3LI Global, we are committed to retaining your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal, regulatory, and contractual obligations. This section explains our data retention practices, including the retention periods for different types of data and the criteria used to determine retention duration.

1. Retention Periods for Various Data Types

We categorize data retention based on the type of data collected and its purpose. Below are the general retention periods for each category:

1.1 Account and Service Data

• Data Included: Contact details, account credentials, service usage history.
• Retention Period: Retained for the duration of the service agreement and up to 7 years after termination for legal, accounting, or reporting purposes.

1.2 Transaction and Billing Data

• Data Included: Payment information, billing details, and transaction history.
• Retention Period: Retained for 7 years to comply with financial and tax regulations.

1.3 Communication Data

• Data Included: Emails, inquiries, and support tickets.
• Retention Period: Retained for up to 3 years after the resolution of your query or request, unless longer retention is required by law.

1.4 Marketing Data

• Data Included: Email addresses, marketing preferences, and engagement history.
• Retention Period: Retained until you withdraw your consent or opt out of marketing communications, with data anonymized or deleted within 12 months after the opt-out.

1.5 Technical and Usage Data

• Data Included: IP addresses, cookies, and analytics data.
• Retention Period: Retained for 1-2 years, depending on the tool or platform used, unless anonymized for long-term analysis.

1.6 Legal and Compliance Data

• Data Included: Records of disputes, investigations, or legal claims.
• Retention Period: Retained for the duration of the legal process and up to 10 years after resolution, depending on applicable statutes of limitations.

2. Criteria for Determining Retention Duration

The retention periods mentioned above are based on the following criteria:

• Legal and Regulatory Requirements: Retention is determined by the laws and regulations applicable in your jurisdiction, such as tax laws, GDPR, and other compliance obligations.
• Contractual Obligations: Data is retained to fulfill the terms of contracts and service agreements.
• Purpose of Processing: Data is retained for as long as necessary to achieve the original purpose for which it was collected, such as providing services or resolving disputes.
• Consent: For data processed based on your consent, retention depends on whether you have withdrawn consent or requested deletion.
• Risk and Security Considerations: Data may be retained for a reasonable period to protect against fraud, unauthorized access, or other security risks.

3. Secure Deletion and Anonymization

When the retention period for your Personal Data expires, or the data is no longer needed:

• Secure Deletion: We permanently delete or destroy data using secure methods to prevent unauthorized recovery.
• Anonymization: In cases where deletion is not feasible, we anonymize the data to ensure it is no longer associated with an identifiable individual, allowing us to use it for research or statistical purposes without compromising your privacy.

4. Exceptions to Retention Periods

In certain cases, we may retain data longer than the periods outlined above, such as:

• Ongoing Legal Proceedings: When data is required for litigation, arbitration, or regulatory inquiries.
• Vital Business Interests: To preserve data critical to operational continuity or historical analysis.
• Explicit Consent: When you have agreed to extended retention for specific purposes.

5. Your Rights Regarding Retention

You have the right to:

• Request Deletion: Ask for the deletion of your Personal Data once the retention period has expired or if processing is no longer necessary.
• Access Retention Details: Request specific information about how long your data is stored and why.

For more information on exercising these rights, refer to Section 11: Your Rights as a Data Subject.

Your Rights as a Data Subject (GDPR)

Under the General Data Protection Regulation (GDPR), individuals (referred to as Data Subjects) are granted specific rights regarding the collection, use, and processing of their Personal Data. At 3LI Global, we are committed to upholding these rights, ensuring transparency, and enabling you to exercise control over your data.

1. Right to Access

You have the right to request access to the Personal Data we hold about you. This includes:

• Confirmation of whether your data is being processed.
• A copy of your Personal Data.
• Details about the purposes of processing, categories of data processed, data recipients, and retention periods.

How to Exercise: You can submit an access request by contacting us at privacy@3li.global. We will provide the requested information within one month, unless extended under exceptional circumstances.

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete Personal Data. This ensures that your data remains accurate and up-to-date.

How to Exercise: Contact us with the details of the inaccurate or incomplete data and provide the correct information.

3. Right to Erasure ("Right to be Forgotten")

You have the right to request the deletion of your Personal Data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent (where processing was based on consent).
• You object to the processing, and there are no overriding legitimate grounds.
• The data was unlawfully processed.
• Deletion is required to comply with legal obligations.

Exceptions: We may deny your request if processing is necessary for legal compliance, the establishment or defense of legal claims, or for public interest reasons.

How to Exercise: Submit a deletion request to privacy@3li.global, and we will respond within one month.

4. Right to Restrict Processing

You can request that we restrict the processing of your Personal Data in the following situations:

• You contest the accuracy of the data (processing is restricted until accuracy is verified).
• Processing is unlawful, but you oppose deletion and request restriction instead.
• We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims.
• You have objected to processing, and we are assessing whether our legitimate interests override your rights.

How to Exercise: Contact us with details of your request, and we will confirm any restriction measures implemented.

5. Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format, and to request the transfer of that data to another Data Controller. This right applies when:

• Processing is based on your consent or a contract.
• Processing is carried out by automated means.

How to Exercise: Submit a data portability request specifying the data and the receiving entity. We will fulfill your request within one month where technically feasible.

6. Right to Object

You can object to the processing of your Personal Data in certain circumstances, such as:

• Processing based on legitimate interests (unless we demonstrate compelling grounds).
• Direct marketing purposes (you can opt out at any time).
• Processing for research or statistical purposes (unless it is in the public interest).

How to Exercise: Notify us of your objection, and we will cease processing unless there are overriding legitimate grounds.

7. Rights in Relation to Automated Decision-Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. Exceptions apply where:

• Automated decision-making is necessary for a contract.
• Explicit consent has been provided.
• It is authorized by law with suitable safeguards.

How to Exercise: Contact us if you believe your data is being subjected to such processing, and we will review the process to ensure compliance.

8. Exercising Your Rights

To exercise any of your rights under GDPR, you can contact us via:

• Email: privacy@3li.global
• Mail: Business Center, Sharjah Publishing City, Sharjah, UAE.

We may require additional information to verify your identity before processing your request. We aim to respond to all requests within one month, with possible extensions for complex or high-volume cases.

9. Complaints to Supervisory Authorities

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local Supervisory Authority. For residents of the European Union, this is the authority in your member state. UK residents can contact the Information Commissioner’s Office (ICO).

Your Rights Under the California Consumer Privacy Act (CCPA)

If you are a resident of California, the California Consumer Privacy Act (CCPA) grants you specific rights regarding the collection, use, and sharing of your Personal Data. 3LI Global is committed to upholding these rights and providing transparency in how we handle your information.

1. Right to Know

You have the right to request information about the Personal Data we have collected, used, disclosed, or sold in the past 12 months. This includes:

• Categories of Personal Data collected.
• Sources from which the data was collected.
• Purposes for which the data was collected or shared.
• Third parties with whom the data was shared or sold.

How to Exercise: Submit a verifiable consumer request to privacy@3li.global with "CCPA Right to Know" in the subject line. We will provide the requested information within 45 days unless an extension is required.

2. Right to Delete

You have the right to request the deletion of your Personal Data that we have collected and retained, subject to certain exceptions. We may deny your request if retaining the data is necessary for:

• Completing a transaction or fulfilling a contract.
• Detecting security incidents, protecting against malicious activity, or prosecuting wrongdoers.
• Complying with legal obligations.
• Enabling internal uses aligned with your expectations, such as improving our services.

How to Exercise: Submit a verifiable consumer request to privacy@3li.global with "CCPA Right to Delete" in the subject line. We will confirm the deletion or explain why your request cannot be fulfilled.

3. Right to Opt Out of the Sale of Personal Information

You have the right to opt out of the sale of your Personal Data to third parties. 3LI Global does not sell Personal Data in the traditional sense; however, if any of our data-sharing practices are considered a "sale" under the CCPA, you can opt out.

How to Exercise: Visit our Do Not Sell My Personal Information page or contact us directly at privacy@3li.global. We will process your opt-out request promptly.

4. Non-Discrimination Rights

We will not discriminate against you for exercising your rights under the CCPA. This means:

• No Denial of Services: You will not be denied goods or services.
• No Price or Quality Penalties: We will not charge different prices or provide a different level of service based on your choices.
• Financial Incentives: If we offer any financial incentives related to your Personal Data, we will clearly explain the terms and seek your explicit consent to participate.

5. Verifiable Consumer Requests

To protect your data, we require that all requests under the CCPA be verifiable. This means:

• You may need to provide sufficient information to confirm your identity (e.g., email address, transaction history).
• If you are making a request on behalf of another individual, we may require proof of authorization.

We will respond to verifiable requests within 45 days and provide updates if an extension is needed.

6. Data Categories and Sources

For detailed information about the categories of data we collect and their sources, refer to:

• Section: Information We Collect.
• Section: How We Collect Information.

7. Complaints and Contact

If you have concerns about our compliance with the CCPA or wish to exercise any of your rights, you can contact us via:

• Email: privacy@3li.global
• Mail: Business Center, Sharjah Publishing City, Sharjah, UAE.

How to Exercise Your Rights

At 3LI Global, we value your privacy and are committed to making it easy for you to exercise your rights under applicable data protection laws, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Below, we outline the procedure for submitting requests and the steps we take to verify your identity to protect your Personal Data.

1. Submitting a Request

You can exercise your rights by contacting us through any of the following methods:

1.1 Email

• Send your request to privacy@3li.global.
• Specify the type of request (e.g., access, deletion, rectification, opt-out) in the subject line.
• Example: "GDPR Right to Access Request" or "CCPA Right to Delete Request."

1.2 Online Form

• Visit our Privacy Rights Request Form and fill in the required fields.
• Provide the details of your request along with any supporting information.

1.3 Mail

• Send your written request to:
• 3LI Global Business Center, Sharjah Publishing City,

Sharjah, UAE.

2. Information Required in Your Request

To process your request efficiently, please include:

• Full Name: To identify your records in our system.
• Contact Details: Email address and, if applicable, phone number.
• Nature of Request: Clearly describe the right you wish to exercise (e.g., access, deletion, rectification, data portability, etc.).
• Additional Information: Provide any relevant details, such as the timeframe for the data you are requesting or specific services you interacted with.

3. Verification Process

To ensure the security of your Personal Data, we follow a verification process for all rights requests. This helps us confirm your identity and prevent unauthorized access to your data.

3.1 Steps for Verification

• Primary Verification: We may ask for details such as:
• Email address used in your interactions with us.
• Details of recent transactions or communications.
• Secondary Verification (if necessary):
• For sensitive or high-risk requests (e.g., deletion or data portability), we may request additional information, such as government-issued identification or proof of authorization.

3.2 Third-Party Requests

If you are submitting a request on behalf of another individual:

• Proof of Authorization: Provide a signed authorization letter or a valid Power of Attorney document.
• Verification of Data Subject: The individual on whose behalf the request is made may also need to confirm their identity.

4. Timeline for Responses

We aim to respond to your request within the following timeframes:

• GDPR Requests: 1 month from the date of receipt of the request. In cases of complexity, this period may be extended by an additional 2 months, and we will notify you of the extension.
• CCPA Requests: 45 days, with the option of a 45-day extension if necessary. You will be informed if an extension is required.

5. Exceptions to Fulfillment

While we strive to fulfill all valid requests, there are certain exceptions where we may decline or partially fulfill a request, such as:

• Legal Obligations: Retaining data for regulatory compliance or legal defense.
• Overriding Legitimate Interests: When your request conflicts with critical business or security needs.
• Unverifiable Identity: If we are unable to confirm your identity after reasonable effort.

6. Contacting Us for Assistance

If you have questions about your rights, the request process, or need help submitting your request, please contact us:

• Email: privacy@3li.global
• Mail: Business Center, Sharjah Publishing City, Sharjah, UAE.

We are here to ensure your rights are respected and your data is handled with the utmost care.

Security Measures

At 3LI Global, safeguarding your Personal Data is a top priority. We implement a combination of technical and organizational measures to ensure the confidentiality, integrity, and availability of the data we process. This section outlines the robust steps we take to protect your information and our approach to managing and reporting data breaches.

1. Technical Measures

We deploy advanced technical solutions to protect your data against unauthorized access, loss, or misuse. These measures include:

1.1 Data Encryption

• In Transit: Data transmitted between you and our systems is encrypted using TLS (Transport Layer Security) protocols.
• At Rest: Sensitive data stored in our databases is encrypted using AES-256 or equivalent standards.

1.2 Access Controls

• Role-Based Access: Only authorized personnel with a legitimate need have access to your data.
• Two-Factor Authentication (2FA): Used for accessing critical systems and sensitive information.

1.3 Network Security

• Firewalls and Intrusion Detection Systems (IDS): Protect our networks against unauthorized access and potential threats.
• Regular Vulnerability Scans: To identify and mitigate potential security risks.

1.4 Backup and Disaster Recovery

• Regular Backups: Data is backed up periodically to ensure recoverability in case of incidents.
• Disaster Recovery Plans: Systems are designed for high availability and rapid recovery in case of failure.

1.5 Secure Software Development

• Code Reviews: Rigorous testing and peer reviews of software to identify and fix vulnerabilities.
• Penetration Testing: Regular security audits by third-party experts.

2. Organizational Measures

We enforce strict policies and procedures to ensure all employees, contractors, and partners handle data securely and responsibly.

2.1 Staff Training

• Data Protection Training: Employees are trained regularly on data protection practices and their responsibilities under regulations like GDPR and CCPA.
• Phishing Awareness: Specialized training to mitigate risks from social engineering attacks.

2.2 Data Minimization

• We only collect and retain the data necessary for the purposes outlined in our Privacy Policy, reducing the risk of exposure.

2.3 Incident Response Plans

• We have documented procedures to respond promptly and effectively to security incidents, minimizing potential impact.

2.4 Third-Party Management

• Vendor Risk Assessments: All third-party service providers are vetted for their security practices.
• Data Protection Agreements: Contracts with vendors include stringent data security requirements.

3. Responsibilities for Reporting Breaches

Despite robust measures, data breaches can occur. In such cases, 3LI Global is committed to swift and transparent actions:

3.1 Internal Reporting

• Employees are required to report potential breaches immediately to our Data Protection Officer (DPO) or designated security team.

3.2 Notification of Authorities

• For breaches under GDPR, we notify the relevant Supervisory Authority within 72 hours of becoming aware of the breach, unless it is unlikely to result in a risk to individuals' rights and freedoms.

3.3 Notification of Affected Individuals

• If the breach poses a high risk to your rights and freedoms, we will notify you promptly with:
• A description of the breach.
• Details of the type of data involved.
• Steps you can take to protect yourself.
• Measures we are taking to resolve the issue.

3.4 Root Cause Analysis and Mitigation

• After containing the breach, we conduct a thorough investigation to:
• Identify the root cause.
• Implement corrective measures to prevent future incidents.

4. Your Role in Data Security

While we take extensive steps to secure your data, your actions also play a critical role in maintaining security:

• Protect Your Credentials: Do not share your account passwords or login information.
• Enable Security Features: Utilize features like two-factor authentication (2FA) where available.
• Report Suspicious Activity: Notify us immediately if you suspect unauthorized access to your account.

5. Continuous Improvement

We continuously evaluate and update our security measures to address emerging threats and maintain compliance with global data protection standards. This includes regular audits, testing, and monitoring of our systems and processes.

Children’s Privacy

At 3LI Global, we prioritize the safety and privacy of children. Our services and platforms are not directed toward individuals under the age of 18, and we do not knowingly collect, use, or disclose Personal Data from minors without verified parental or guardian consent. This section outlines our policies regarding the collection, use, and safeguarding of minors' information in compliance with relevant laws, such as the Children's Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR).

1. Applicability of Children’s Privacy Policy

• Age Restriction: Our services are intended for individuals aged 18 and above. Users below this age are not permitted to access or use our services without explicit consent from a parent or legal guardian.
• Global Compliance: We comply with applicable laws concerning children’s privacy, including:
• COPPA: Protecting the privacy of children under the age of 13 in the United States.
• GDPR: Prohibiting the processing of data from children under 16 (or a lower age set by individual EU member states, but no less than 13) without parental consent.

2. Data Collection Practices

We do not knowingly collect or process Personal Data from minors. If you believe a minor has provided us with their data, please contact us immediately (refer to Section 5: Contact Us). Examples of data we actively avoid collecting include:

• Identifiable information such as names, email addresses, or phone numbers.
• Behavioral data from minors using our services or platforms.

3. Steps Taken to Protect Children’s Privacy

• Parental Consent Verification: If we become aware that a minor has submitted Personal Data, we will:
• Attempt to obtain verifiable parental or guardian consent.
• Delete the information if consent cannot be verified or if the parent or guardian requests deletion.
• Access Restrictions: We implement measures to prevent minors from accessing age-restricted services, including screening processes and age verification where applicable.
• Educational Content: If educational content or services are directed toward younger audiences, we ensure compliance with applicable children’s privacy regulations.

4. Reporting Unintentional Data Collection

If we inadvertently collect Personal Data from a minor:

• Immediate Action: Upon notification or discovery, we will delete the data promptly unless retaining it is required for legal reasons.
• Contact Point: Notify us at privacy@3li.global with details of the suspected data collection, including the name of the minor (if known) and any associated user account or communication.

5. Third-Party Services

Some third-party tools integrated with our services may inadvertently collect data from minors. While we take care to partner with reputable providers, we recommend reviewing their privacy policies independently. 3LI Global is not responsible for the practices of third-party services in this context.

6. Parental and Guardian Rights

Parents or guardians have the right to:

• Access Data: Request details about any Personal Data collected from their child.
• Withdraw Consent: Revoke previously granted permission for data collection.
• Request Deletion: Ask for the removal of their child’s data from our systems.

How to Exercise These Rights: Contact us at privacy@3li.global or via mail at: 3LI Global

Business Center, Sharjah Publishing City,

Sharjah, UAE.

7. Educational Services or Content

If we offer educational tools or services targeted toward users under 18, they will be explicitly designed to comply with children’s privacy regulations. These services will:

• Limit data collection to the minimum necessary for functionality.
• Clearly indicate parental consent requirements.
• Provide detailed privacy policies tailored for younger users.

8. Compliance and Updates

We periodically review and update our policies to ensure alignment with evolving laws and industry standards regarding children’s privacy. Any material changes to this policy will be communicated clearly through our website or other appropriate channels.

Cookies and Tracking Technologies

3LI Global uses cookies and similar tracking technologies to enhance your experience on our website, analyze performance, and support targeted advertising. This section outlines the types of cookies we use, their purposes, and how you can manage your preferences.

1. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit our website. They help us recognize your device and collect information about your interactions with our services. Similar tracking technologies, such as pixels, web beacons, and tags, may also be used for similar purposes.

2. Types of Cookies We Use

We classify cookies into the following categories based on their function:

2.1 Essential Cookies

• Purpose: These cookies are necessary for the operation of our website. They enable core functionalities such as navigating pages and accessing secure areas.
• Examples:
• Session management.
• Fraud prevention.
• Lifespan: Typically expire after the session ends.

2.2 Analytics and Performance Cookies

• Purpose: These cookies help us understand how visitors interact with our website, enabling us to improve functionality and user experience.
• Examples:
• Tracking the number of visitors.
• Analyzing navigation patterns and identifying popular content.
• Tools Used: Google Analytics, Matomo, or similar services.
• Lifespan: Ranges from session-based to persistent cookies (e.g., up to 2 years).

2.3 Functional Cookies

• Purpose: These cookies enable enhanced functionality and personalization by remembering your preferences, such as language or region.
• Examples:
• Remembering login details.
• Storing user preferences for a more customized experience.
• Lifespan: Persistent cookies (e.g., up to 1 year).

2.4 Advertising and Targeting Cookies

• Purpose: These cookies deliver relevant advertisements based on your interests and measure the effectiveness of ad campaigns.
• Examples:
• Displaying personalized ads on third-party platforms.
• Tracking interactions with our ads.
• Tools Used: Google Ads, Facebook Pixel, or similar services.
• Lifespan: Persistent cookies (e.g., up to 6 months).

2.5 Third-Party Cookies

• Purpose: These cookies are set by external platforms or partners and may collect data about your browsing habits across different websites.
• Examples:
• Social media sharing tools (e.g., Twitter, LinkedIn, Facebook).
• Payment processors or embedded content providers.
• Lifespan: Varies based on third-party provider policies.

3. Consent Management for Cookies

We respect your privacy and provide tools to manage your cookie preferences:

3.1 Cookie Banner

When you first visit our website, you will see a cookie banner that:

• Explains the types of cookies we use.
• Seeks your consent for non-essential cookies (e.g., analytics, advertising).
• Provides a link to this Cookies Policy for more information.

3.2 Cookie Settings

You can manage your cookie preferences at any time by:

• Clicking on the “Manage Cookies” or “Cookie Preferences” link at the bottom of our website.
• Selecting which categories of cookies you wish to enable or disable.

3.3 Withdrawing Consent

You can withdraw your consent for cookies at any time by revisiting the cookie settings or clearing cookies from your browser.

4. Managing Cookies in Your Browser

You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

Common Browsers:

• Google Chrome: Manage Cookies
• Mozilla Firefox: Manage Cookies
• Microsoft Edge: Manage Cookies
• Safari: Manage Cookies

5. Third-Party Tools and Opt-Out Options

We use third-party services for analytics and advertising. You can opt out directly through their platforms:

• Google Analytics: Opt-Out Tool
• Google Ads: Ad Settings
• Facebook Ads: Ad Preferences

6. Updates to This Policy

We may update this Cookies and Tracking Technologies Policy periodically to reflect changes in our practices or regulations. Updates will be posted on this page, and significant changes will be highlighted in a banner or notification.

Third-Party Links

At 3LI Global, our website and services may include links to third-party websites, applications, or services. These links are provided for your convenience and to enhance your experience; however, we do not have control over the content, policies, or practices of these external sites. This section explains our approach to third-party links and the associated disclaimers.

1. Scope of Third-Party Links

• Types of Links: Our website may feature links to:
• Partner platforms or tools.
• Social media channels.
• Resources, blogs, or articles.
• External service providers for integrations or additional functionality.
• Purpose of Links: These links are offered to provide supplementary information or facilitate the use of integrated services.

2. No Endorsement or Responsibility

• Content Disclaimer: 3LI Global does not endorse, approve, or take responsibility for the accuracy, legality, or appropriateness of content found on third-party websites.
• Independent Policies: Third-party sites operate independently of 3LI Global and may have their own privacy policies, terms of use, and data collection practices. We strongly encourage you to review their policies before interacting with these sites.

3. Risks of External Links

When you click on third-party links and leave our website, please be aware that:

• Your interactions with external websites are not governed by our Privacy Policy or Terms of Service.
• We cannot guarantee the security of your Personal Data or the safety of your browsing experience on external websites.

4. User Responsibility

By choosing to follow third-party links, you:

• Accept full responsibility for any risks or outcomes associated with visiting external websites.
• Agree to review and adhere to the third-party site’s terms and conditions.

5. Liability Disclaimer

3LI Global is not liable for:

• Loss or Damage: Any loss, damage, or harm arising from your use of third-party websites, including unauthorized use of your data.
• Data Handling: The data protection practices or policies of external websites.
• Errors or Omissions: Inaccurate or misleading content on third-party platforms.

6. Third-Party Integrations

Some third-party links may relate to tools or services integrated with our offerings (e.g., CRM platforms, analytics tools). For these integrations:

• Shared Data: Limited data may be shared with these third-party services to enable functionality (e.g., logins, service optimizations).
• Privacy Policies: Such interactions are subject to both our Privacy Policy and the respective third-party's policies.

7. Reporting Issues

If you encounter a third-party link that appears inappropriate, broken, or harmful, please notify us at:

• Email: privacy@3li.global

We will review the issue and take appropriate action to ensure a safe user experience.

8. Updates to Third-Party Links Policy

This disclaimer may be updated periodically to reflect changes in our use of third-party links or our broader policy framework. Updates will be highlighted in our Privacy Policy or communicated through other appropriate channels.

Changes to the Privacy Policy

At 3LI Global, we are committed to keeping our Privacy Policy transparent, accurate, and up to date with changes in our practices, services, or legal requirements. This section outlines how we communicate updates to our Privacy Policy and the importance of staying informed about these changes.

1. Notification of Changes

We reserve the right to update or modify this Privacy Policy at any time to reflect:

• Changes in our data processing practices or services.
• Updates in applicable laws, regulations, or standards.
• Feedback or recommendations from users, regulators, or legal advisors.

When we make significant updates, we will:

• Notify you via prominent notices on our website (e.g., banners or pop-ups).
• Send email notifications to users who have provided consent to receive communications.
• Include a summary of key changes for clarity.

For minor or non-material updates, we will revise the Privacy Policy directly on our website without additional notification.

2. Your Responsibility

We encourage you to:

• Regularly review this Privacy Policy to stay informed about how we protect and manage your data.
• Note the "Last Updated" date at the bottom of this policy to identify recent changes.

By continuing to use our services after updates to the Privacy Policy, you acknowledge and agree to the changes.

3. Effective Date

The updated Privacy Policy becomes effective:

• Immediately upon posting for new users.
• 30 days after posting for existing users unless otherwise stated or required by law.

4. Where to Find the Updated Privacy Policy

The most recent version of our Privacy Policy will always be available on our website at:

• Privacy Policy Page

5. Questions or Concerns

If you have questions about updates to this Privacy Policy or how they may affect you, please contact us:

• Email: privacy@3li.global
• Mail: Business Center, Sharjah Publishing City, Sharjah, UAE.

Contact Information

3LI Global is committed to maintaining transparency and accountability in how we manage your Personal Data. If you have any questions, concerns, or requests regarding our data practices, you can reach out to us through the following contact details. This includes contacting our Data Protection Officer (DPO), as required by applicable data protection laws.

1. General Inquiry Details

For general inquiries about our Privacy Policy or your rights under applicable regulations, please contact us at:

• Email: privacy@3li.global
• Mail:

3LI Global

Business Center, Sharjah Publishing City,

Sharjah, UAE

We strive to respond to all inquiries within five business days or sooner where possible.

2. Contacting Our Data Protection Officer (DPO)

To ensure compliance with global data protection laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), we have appointed a Data Protection Officer (DPO). The DPO is responsible for overseeing our privacy practices and ensuring the protection of your Personal Data.

You may contact our DPO for:

• Clarification on how your data is collected, used, or processed.
• Exercising your rights under GDPR, CCPA, or other applicable laws.
• Reporting concerns about data security or potential breaches.
• Requesting information about our compliance measures or safeguards.

DPO Contact Details:

• Email: dpo@3li.global
• Mail:

Data Protection Officer

Business Center, Sharjah Publishing City,

Sharjah, UAE

3. Reporting Concerns or Complaints

If you believe your privacy rights have been violated or have concerns about how we handle your data, you can:

• Contact our DPO directly using the details above.
• File a complaint with the relevant Supervisory Authority in your jurisdiction (for GDPR-related concerns) or your local regulatory body (for CCPA-related concerns).

4. Regional Support

For inquiries specific to your region, such as GDPR for EU residents or CCPA for California residents, our team is available to assist and guide you through the process of addressing your concerns.

5. Updates to Contact Information

We may update this section periodically to reflect changes in our contact details or personnel. Please refer to the most recent version of our Privacy Policy for current information.

Regulatory Information

At 3LI Global, we are dedicated to ensuring that your privacy rights are respected and upheld. In addition to the safeguards and processes outlined in this Privacy Policy, we provide information about the relevant regulatory authorities to assist you if you wish to raise a complaint or seek additional resources.

1. Relevant Supervisory Authorities

Depending on your location, you have the right to contact a supervisory authority to lodge a complaint about how your Personal Data is handled. Below are details of key supervisory authorities based on applicable regulations:

1.1 General Data Protection Regulation (GDPR) – European Union

If you are a resident of the European Union, you can lodge a complaint with the data protection authority in your country of residence or where the issue occurred.

• European Data Protection Board (EDPB): Visit EDPB Website

The EDPB provides links to the individual supervisory authorities for all EU member states.

For example:

• United Kingdom (ICO): www.ico.org.uk

Phone: +44 303 123 1113

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK

• Germany (BfDI): www.bfdi.bund.de

Phone: +49 228 997799-0

Address: Graurheindorfer Str. 153, 53117 Bonn, Germany

1.2 California Consumer Privacy Act (CCPA) – United States

If you are a resident of California and believe your rights under the CCPA have been violated, you can contact:

• California Attorney General’s Office

Submit a CCPA Complaint

Phone: +1 (800) 952-5225

1.3 United Arab Emirates (UAE)

For residents in the UAE, data protection is governed by local laws, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Complaints can be directed to:

• UAE Data Office: www.thedatalaw.ae

(More information is expected as the UAE Data Office continues to develop its resources.)

2. Links to Additional Resources

Below are helpful resources and rights portals that provide further information about privacy regulations and your rights:

2.1 GDPR Resources

• European Commission: Data Protection in the EU
• EU Charter of Fundamental Rights: Right to Privacy

2.2 CCPA Resources

• California Privacy Rights Act (CPRA) Details: Visit CPRA Page
• Consumer Privacy Rights: California Privacy Rights

2.3 General Privacy Resources

• OECD Privacy Guidelines: Visit OECD Website
• UN Data Protection Principles: UN Privacy Guidelines

3. Complaint Handling Process

If you wish to file a complaint directly with us before contacting a regulatory authority, please reach out to:

• Email: privacy@3li.global
• DPO Email: dpo@3li.global

We aim to resolve all complaints efficiently and transparently within 30 days of receipt.

4. Updates to Regulatory Information

This section may be updated periodically to reflect changes in relevant laws or the addition of new supervisory authorities. Always refer to the latest version of our Privacy Policy for current information.

Appendices

To provide additional clarity and transparency, this section contains detailed policies and agreements that supplement our Privacy Policy. These appendices outline specific practices related to cookies and data processing for business partnerships.

Appendix 1: Detailed Cookie Policy

1. Introduction

This Cookie Policy explains the types of cookies we use, why we use them, and how you can manage your preferences. It complements the "Cookies and Tracking Technologies" section of our Privacy Policy.

2. Types of Cookies

• Essential Cookies: Required for the core functionality of the website (e.g., login, security).
• Analytics Cookies: Help us understand website usage patterns to improve user experience.
• Functionality Cookies: Enable personalized experiences, such as remembering your preferences.
• Advertising Cookies: Deliver targeted ads based on your browsing behavior.
• Third-Party Cookies: Set by external platforms or providers, such as social media or payment processors.

3. How Cookies Are Used

Cookies are used for purposes including, but not limited to:

• Tracking user sessions and preferences.
• Improving website functionality and navigation.
• Delivering relevant advertisements on our website and third-party platforms.

4. Managing Your Preferences

You can manage your cookie preferences through:

• Website Settings: Click the "Cookie Preferences" link on our website.
• Browser Settings: Adjust your browser settings to block or delete cookies.
• Opt-Out Tools: Use third-party tools like Google Analytics Opt-Out.

For a complete list of the cookies we use, their purposes, and expiration periods, visit our Detailed Cookie Policy Page.

Appendix 2: Data Processing Agreement (DPA)

1. Purpose of the DPA

This agreement governs the processing of personal data when 3LI Global acts as a Data Processor on behalf of a business partner (the Data Controller) to ensure compliance with data protection laws such as GDPR and CCPA.

2. Roles and Responsibilities

• Data Controller: Determines the purposes and means of processing Personal Data.
• Data Processor: Processes Personal Data on behalf of the Controller as per documented instructions.

3. Key Provisions

• Scope of Processing: The Data Processor will only process data as specified in the contract.
• Confidentiality: Employees and sub-processors will maintain strict confidentiality.
• Data Security: Appropriate technical and organizational measures will be implemented to protect Personal Data.
• Sub-Processors: A list of sub-processors will be shared, and written consent will be obtained before engaging additional sub-processors.
• Data Subject Rights: The Processor will assist the Controller in fulfilling Data Subject requests (e.g., access, rectification, erasure).
• Data Breach Notification: The Processor will notify the Controller of any data breaches within 24 hours of discovery.
• Data Transfers: Transfers to third countries will comply with GDPR requirements (e.g., Standard Contractual Clauses).

4. Termination and Return of Data

Upon termination of the agreement, the Processor will delete or return all Personal Data as instructed by the Controller.

5 Indemnification and Liability

Both parties will agree on liability caps for breaches of the DPA, ensuring fair and balanced responsibilities.

For the full version of the DPA, including detailed terms, contact us at legal@3li.global.