1. Introduction
Chargeback Defense Solutions LLC (“we,” “our,” “us,” or “the Company”) is committed to protecting the privacy and security of the personal data we collect from our customers, users, and visitors to our website located at https://chargebackdefense.com (“Website”). This GDPR Policy explains how we comply with the General Data Protection Regulation (GDPR) concerning the personal data of individuals within the European Union (EU) and the European Economic Area (EEA).

2. Principles of Data Processing
Our practices around the collection, use, and management of personal data are grounded in the following principles:

1. Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a transparent manner.
2. Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes and do not process it in a way that is incompatible with those purposes.
3. Data Minimization: We ensure that the personal data we process is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
4. Accuracy: We keep personal data accurate and up to date.
5. Storage Limitation: We retain personal data in a form that permits identification of data subjects for no longer than necessary.
6. Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security of the personal data, using appropriate technical or organizational measures.

3. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:

• Consent: We may process data if you have given us explicit consent to use your personal data for a specific purpose.
• Contract: The processing is necessary for a contract you have with us, or because you have asked us to take specific steps before entering into a contract.
• Legal Obligation: The processing is necessary for us to comply with the law (not including contractual obligations).
• Vital Interests: The processing is necessary to protect someone’s life.
• Public Task: The processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
• Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data that overrides those legitimate interests.

4. Data Subject Rights
Under GDPR, data subjects have the following rights:

• Access: You have the right to request access to your personal data and to obtain information about how we process it.
• Rectification: You have the right to request that we correct any inaccuracies in the personal data we hold about you.
• Erasure (“Right to be Forgotten”): You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
• Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
• Data Portability: You have the right to receive the personal data we hold about you in a structured, commonly used, and machine-readable format.
• Objection: You have the right to object to the processing of your personal data under certain circumstances, including direct marketing.
• Withdraw Consent: Where we rely on consent for processing, you have the right to withdraw your consent at any time.

5. Data Transfers
Personal data may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Website, you understand that your data may be transferred to countries outside of your country of residence, which may have data protection rules that are different from those of your country.

6. Data Security
We implement suitable security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the data. We also undertake to conduct assessments and evaluations to ensure compliance with GDPR.

7. Changes to this Policy
We may update this GDPR Policy from time to time in response to legal, technical, or business developments. When we update our GDPR Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

8. Contact Information
If you have any questions or concerns about our use of your personal information, please contact us at [email protected].