Respect for the information you share.

Effective scope: This policy explains how Myralen Technologies (“Myralen”, “we”, “us” or “our”) collects, uses, protects and shares personal data when providing digital solutions, technology systems, websites, data-management services, hosting and technical support to organisations, including non-profits, ministries, foundations, schools and community organisations.

1. What data we may collect

Depending on the service and your relationship with us, we may process:

• Identity and contact details, such as your name, phone number, email address, organisation and role.
• Account and user information needed to authenticate users and manage system access.
• Information a client supplies for a system, including beneficiary, volunteer, donor, project, staff or participant records, where the client has authority to provide it.
• Technical information such as device and browser details, IP address, logs and system activity where needed for security, troubleshooting or service operation.
• Communications, support requests, training records and other service-related information.
• Payment, invoicing and contract information needed to administer a client relationship.
• Special-category or sensitive information only where necessary, lawful and appropriately safeguarded.

2. Why we process personal data

We may process personal data to provide, operate, secure, maintain and support contracted services; set up user accounts, permissions, workflows, reports and integrations; communicate with clients and respond to enquiries; meet contractual, legal, regulatory, security or audit requirements; and improve services, troubleshoot issues and monitor system performance with appropriate safeguards. We use personal data for direct marketing only where legally permitted and with the required consent or other lawful basis.

3. Lawfulness, fairness and transparency

We aim to collect and process personal data fairly and lawfully, for specific and legitimate purposes, and only to the extent adequate, relevant and not excessive. Where consent is required, we will seek it before processing. Where another lawful basis applies, we will identify and document that basis as appropriate.

4. Notices when data is collected

Before or when personal data is collected, the relevant privacy notice should explain the type of data collected, the responsible organisation, the purpose, whether providing the data is mandatory or optional, the consequences of not providing it, recipients, applicable rights and expected retention period.

5. Your data protection rights

Subject to applicable law, you may be able to:

• Request access to your personal data and information about how it is used.
• Request correction of inaccurate or incomplete information.
• Object to or request that processing be stopped in circumstances provided by law.
• Object to direct marketing.
• Request deletion where applicable, subject to lawful retention requirements.
• Raise a privacy complaint with Myralen or the relevant data protection authority.

We will handle requests promptly and within applicable statutory periods. Some requests may be subject to legal conditions, verification requirements or lawful retention obligations.

6. Children’s data

We will not knowingly collect or process personal data relating to a child except where permitted by law, including with prior consent from a parent, guardian or other authorised person where required.

7. Sharing and third parties

We may disclose personal data to authorised personnel, contracted processors, hosting providers, integration providers or other recipients where necessary to deliver the agreed service and permitted by law. Third-party access should be controlled through appropriate contracts, permissions and security requirements.

8. International processing

If personal data is processed or stored internationally, we will apply appropriate safeguards and comply with applicable cross-border data-transfer requirements.

9. Retention and disposal

We aim not to retain personal data longer than necessary for the purpose for which it was collected and processed, unless a lawful exception applies. Retention periods may depend on the service, contract, client instructions, security or audit needs, and applicable legal requirements. When data is no longer needed, it should be securely deleted, destroyed or de-identified, subject to lawful retention obligations and applicable backup cycles.

10. Security

We apply appropriate technical and organisational safeguards based on the service and risks. These may include unique accounts and role-based access, strong passwords and multi-factor authentication where supported and appropriate, secure transmission using HTTPS/TLS, appropriate protection of sensitive data at rest, backups and restoration testing where applicable, controlled production changes, software updates, security logging and monitoring, supplier safeguards, data minimisation, and privacy/security training for personnel with access to personal data. No method of storage or transmission can be guaranteed to be completely secure.

11. Security incidents

If a personal-data security incident occurs, we will take appropriate steps to investigate, contain and remediate it, preserve relevant evidence, assess the data and people affected, and document the incident. We will make notifications to the PDPO/Authority, affected clients and/or individuals where required by applicable law, and cooperate with required remedial measures.

12. Client-managed information

When a client engages Myralen to process personal data on its behalf, the client may determine the purposes and essential means of processing. In that case, Myralen will process the client’s data according to documented instructions, the applicable service agreement and data-processing terms, and applicable law. The client is responsible for ensuring it has authority to provide the data and for giving any notices or obtaining any permissions required of it.

13. Contact and complaints

For privacy requests, questions or concerns, contact Myralen Technologies:

• Email: myralentechnologies@gmail.com or info@myralentech.com
• Website: www.myralentech.com