GDPR Data Protection Policy

Effective Date: March 18, 2025

At Teloom, we are committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, process, store, and protect personal data when you use our services.

1. Data Controller

Teloom acts as the data controller for any personal data collected through our website and services.
For data protection inquiries, contact us.

2. What Personal Data We Collect

We may collect and process the following personal data:

  • Full name, email address, phone number
  • Billing and payment information
  • Consultation history and communication records
  • Technical data (IP address, browser type, usage behavior)

3. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Consent: When you voluntarily provide information (e.g., subscribing to a newsletter)
  • Contract: To deliver booked consultations and related services
  • Legal Obligation: For accounting or compliance purposes
  • Legitimate Interest: To improve user experience and secure our platform

4. How We Use Your Data

We use your personal data to:

  • Deliver and manage consultation services
  • Process payments and issue invoices
  • Send confirmations, updates, and notifications
  • Improve our website and service offerings
  • Comply with legal requirements

5. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, or as required by applicable law. After that period, data is securely deleted or anonymized.

6. Your GDPR Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time

7. Data Sharing and Transfers

We do not sell or rent your personal data. We may share data with trusted third-party service providers (e.g., payment processors) under strict data protection agreements.

We do not transfer your data outside the European Economic Area (EEA) unless adequate safeguards are in place.

8. Data Security

We implement technical and organizational measures to protect your personal data, including secure servers, encrypted communications (SSL), and restricted access protocols.

9. Cookies and Tracking

We use cookies to enhance your experience. For more information, see our Cookie Policy.

10. Policy Updates

We may update this GDPR Data Protection Policy from time to time. Updates will be posted on this page with the updated effective date.