GDPR Compliance for European Customers

The General Data Protection Regulation (GDPR) is a European Union law designed to protect the personal data and privacy of individuals within the European Economic Area (EEA). It applies to any business that collects, processes, or stores personal data of EU residents—regardless of where the company is located.

This statement outlines how Fuinss Software Solutions Pvt Ltd (the developer and provider of Prime MLM Software) ensures compliance with GDPR for our customers, partners, and users based in the EEA.

Our Commitment to GDPR Compliance

At Fuinss Software Solutions Pvt Ltd, data privacy is not treated as an afterthought—it is built into the architecture of our platform.

We follow core GDPR principles by:

• Collecting only the minimum necessary personal data
• Establishing a clear legal basis for all data processing
• Implementing strict data retention policies
• Ensuring secure storage and encrypted data handling
• Providing full transparency and user control

Our systems are designed to align with GDPR requirements while maintaining the flexibility needed for modern MLM operations.

What Personal Data We Collect

We collect and process personal data only where necessary to deliver our services effectively.

This may include:

• Contact information (name, email, phone number)
• Account and login details
• Business and transaction-related data
• Communication records (demo requests, support queries)

For a detailed breakdown, users are encouraged to review our Privacy Policy, which explains how data is collected and used.

How Long We Retain Personal Data

We apply strict retention timelines to ensure compliance and minimize risk:

• Demo / Inquiry Data: Retained for up to 12 months after last interaction
• Customer Data: Retained only for the duration of the business relationship and a limited period afterward
• Payment Information: Removed after processing unless legally required to retain
• Support Communications: Typically deleted within a few months after resolution

We avoid unnecessary data storage and ensure that outdated or unused data is securely deleted or anonymized.

Legal Basis for Processing

For users located in the EEA, Fuinss Software Solutions Pvt Ltd processes personal data based on:

• Legitimate business interests
• Contractual necessity
• User consent (where applicable)

All processing activities are aligned with GDPR’s requirement for lawful, fair, and transparent data handling.

Data Controller and Processor Roles

Depending on how our platform is used:

• Fuinss Software Solutions Pvt Ltd acts as a Data Controller when processing data for our own marketing, sales, and CRM purposes.
• We act as a Data Processor when providing Prime MLM Software infrastructure and hosting to our clients, processing their distributor and transaction data solely on their documented instructions.

Use of Subprocessors

To deliver our services efficiently, we engage trusted third-party service providers (subprocessors), including:

• Cloud Infrastructure: Hetzner Cloud, Cloudflare (for secure hosting and network routing).
• Analytics & Advertising: Google LLC (for Google Analytics, Google Ads remarketing, and reCAPTCHA spam prevention).
• Operations: Payment gateways and CRM communication tools.

All subprocessors are carefully selected and bound by strict data protection agreements that meet or exceed GDPR standards.

International Data Transfers

As a global company, your data is transferred across borders. We ensure all transfers comply with GDPR:

• Transfers to India: Because Fuinss Software Solutions Pvt Ltd is headquartered in India (a country without an EU “adequacy decision”), we safeguard data transfers to our headquarters using Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to the United States: Data processed by our subprocessor, Google LLC, may be transferred to servers in the US. Google safeguards these transfers in accordance with the EU-U.S. Data Privacy Framework (DPF).

Security Measures

We implement advanced technical and organizational measures to protect personal data, including:

• TLS (Transport Layer Security) encryption for all data in transit across our websites.
• AES-256 encryption for sensitive data at rest in our databases.
• Role-based access control (RBAC) to ensure only authorized personnel can access client data.
• Secure, monitored cloud infrastructure.

Updates to This GDPR Statement

We may update this GDPR statement periodically to reflect changes in regulations, technology, or our services. Users are encouraged to review this page regularly to stay informed.

Contact Us

If you have any questions about this GDPR statement, or if you wish to submit a Data Subject Access Request (DSAR) to exercise your privacy rights, please contact us directly at: