EEA & UK Privacy Information (GDPR)

This section supplements our main Privacy Notice and applies specifically where the General Data Protection Regulation (EU GDPR) or the UK General Data Protection Regulation (UK GDPR) governs the processing of personal data.

1. Data Controllers and Reseller Roles

AGENTIUM LABS (OPC) PRIVATE LIMITED serves as the data controller for personal data collected through this website, customer inquiries, license fulfillment communications, and direct product support.

When you make a purchase, Paddle acts as the Merchant of Record and an independent data controller with respect to your payment processing, checkout information, tax calculation, and transaction security.

2. Lawful Bases for Processing

Under Article 6 of the GDPR, we process personal information under the following legal bases:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to fulfill your license purchase, generate and deliver your digital download link, verify edition entitlements, and provide the included one-month product support via email.
• Compliance with Legal Obligations (Art. 6(1)(c)): Retaining transaction summaries and business correspondence to comply with statutory accounting, taxation, and corporate governance laws.
• Legitimate Interests (Art. 6(1)(f)): Processing technical telemetry and fulfillment logs to prevent unauthorized source redistribution, detect fraudulent chargebacks, and protect our systems and infrastructure against security threats.
• Consent (Art. 6(1)(a)): Where processing relies upon your explicit consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

3. Your Data Protection Rights

Under European and UK data protection law, you have specific rights regarding your personal data:

• Right of Access (Art. 15): Request confirmation of whether we process your data and obtain a copy of that data.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data where statutory retention obligations do not apply.
• Right to Restriction of Processing (Art. 18): Request that we limit processing of your data under specific statutory circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.

4. Response Timelines and Inquiries

To exercise any of these rights, please contact our data team at care@agentiumlabs.com. We will respond without undue delay and at the latest within one (1) calendar month of receiving your verified request. In cases of complex requests, this period may be extended by two further months with prior notice explaining the reasons for the delay.

You also have the right to lodge a complaint with an appropriate data protection supervisory authority, such as your local EU/EEA data protection authority or the UK Information Commissioner’s Office (ICO).

5. Indian Digital Personal Data Protection Compliance

For users in India, our privacy and data practices are also designed to adhere to the applicable provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) and its implementing rules as notified by the Government of India.