Privacy Policy (GDPR)
How we process personal data under EU data protection law, including lawful bases, retention, transfers, and user rights.
Last updated: March 3, 2026
1. Data Controller
Controller: Bang Origin Media Ltd. (placeholder). Registered address: Insert registered office address. Privacy contact: bangorigin.official@gmail.com. DPO contact (if applicable): dpo@bangorigin.com.
2. Categories of Data
We may process account data, technical identifiers, security logs, moderation records, consent records, support communications, anti-fraud indicators, and uploader verification records required by law or policy.
3. Purposes and Legal Bases
Processing is based on contract performance, legal obligations, legitimate interests (security, abuse prevention, platform integrity), and consent where required (for optional cookies and specific marketing).
4. Data Sharing
Data may be shared with vetted service providers, hosting/security vendors, legal advisors, payment partners, and competent authorities where legally required or risk-justified.
5. International Transfers
Where data is transferred outside the EEA, we apply GDPR-compliant safeguards such as SCCs and supplemental risk controls where appropriate.
6. Retention and Security
Data is retained only as long as necessary for defined purposes, legal obligations, and defense of legal claims. We apply proportionate technical and organizational security measures.
7. Data Subject Rights
You may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable by contacting bangorigin.official@gmail.com.
You may lodge a complaint with: Insert competent EU data protection authority.
8. Adult-Only Environment
The platform is strictly for adults. We do not knowingly provide services to minors and apply immediate escalation where minor-related concerns arise.