Policy
Data Privacy

Scope of application:

• Software outsourcing services.
• Software solutions/products provided by Feaon (e.g., GTS, AUTOTMS, VAMS).
• Consulting and technical support services.
• Information collected through Feaon websites, applications, or official communication channels.

Purposes of data collection, storage, and processing:

• Execution of contracts and related operations.
• Delivery of notices and operational communications between parties.
• Prevention of fraud, abuse, or account compromise.
• Research and development of new services and suitable recommendations.
• Identity verification and security assurance.
• Record retention and compliance with legal and tax obligations.
• Other lawful purposes as required by regulations over time.

Feaon will not:

• Process, retain, use, or disclose personal data beyond what is necessary for contractual performance or legal requirements.
• Sell personal data to any third party.
• Disclose data outside the direct business relationship unless requested by the data subject or required by law.

Where the customer/partner is not the data subject:

• Clear consent has been obtained from the data subject for collection, sharing, and use under the contract.
• The data subject has been informed and has clearly consented to any cross-border processing (if applicable).
• If acting as controller or controller-processor, the customer/partner confirms legal authorization when appointing Feaon as another processor.

• Lawful, fair, and transparent: all processing activities have a clear legal basis.
• Purpose limitation: data is used only for stated and notified purposes.
• Data minimization: only necessary and relevant data is collected.
• Accuracy and updates: data is maintained correctly and updated when required.
• Storage limitation: data is retained only as long as necessary unless otherwise agreed by law.
• Integrity and confidentiality: technical and organizational measures are applied to prevent unauthorized access, loss, or damage.

• Right to know how data is collected, processed, and used.
• Right to access and request correction of inaccurate information.
• Right to withdraw consent at any time (unless otherwise required by law).
• Right to request deletion of unnecessary or unlawfully processed data.
• Obligation to provide accurate information and protect personal data responsibly.

• Comply with ISO 27001 standards for information security management.
• Apply encryption, firewall, and IDS/IPS technologies for system protection.
• Maintain strict internal procedures for access control, backup, and recovery.
• Conduct periodic staff training on security and compliance.
• Require partners/vendors to follow equivalent security standards.

Data deletion does not apply when:

• The law does not permit deletion.
• Data is processed by competent state authorities for regulatory functions.
• Data has been lawfully made public.
• Data is required for legal obligations, research, or statistical purposes.
• Emergency situations related to national defense, security, public order, disasters, epidemics, or crime prevention under law.
• Emergency response to threats against life, health, or safety of the data subject or others.

• Form data may be sent through a transactional email provider or a server-side lead intake/CRM system configured by Feaon.
• The website may use Cloudflare Turnstile to verify anti-spam protection and protect forms from automated abuse.
• The website may use analytics tools such as Google Analytics when configured to measure traffic, content performance, and user experience.
• Secret keys, server tokens, and sensitive configuration values are not exposed to the browser.