Privacy

Thank you for being part of the Omnifi Foundation community (legally registered as Omnifi oks, and hereby referred to as "we", "us", and "our").

We are committed to protecting individual rights to privacy unconditionally. Our products, services, websites, and applications do not use trackers or invasive analytics as a matter of conscience.

This privacy notice outlines how we may gather or use your data if you:

• visit the omnifi.foundation web site; and / or
• engage with us in other ways, (such as through sales, marketing, or events).

In this privacy notice, if we refer to:

• "website", we are referring to any website of ours that references or links to this policy;
• "services", we are referring to our website, and any other related services or events.

Contents

1. What We Collect
2. Accounts
3. Analytics
4. Usage
5. Sharing Information
6. Security
7. Rights
8. Cookies
9. Data Collection
10. Third Parties

What We Collect

We collection personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products and services, and when you participate in activities on our website, (such as posting messages), or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the website, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Personal information provided be you, including names, email addresses, mailing addresses, authentication data, and other similar information.
• Payment data, including data necessary to process your payment if you make purchases, such as payment instrument number, (such as credit card number), and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy notice here: stripe.com/privacy.

Accounts

If you would like to review, change, or delete your account information you may do so by logging into your account and selecting the appropriate option.

Upon your request to terminate your account we will deactivate and delete your account from all data sources. We may retain information related to transactions or in compliance with regional laws, but we will not retain data for our own use.

Analytics

Occasionally we may wish to provide analytics to better improve our products and services. In such a situation we will explicity ask for approval to do so, in a manner that does not impede or negatively affect the human experience of our products and services. We will assume a default position that you have chosen to opt-out and ensure a full-featured and functional service is provided without the need for a response.

Usage

We use personal information collected on our website for a variety of operational purposes, descried below. We process your personal information for these purposes in reliance to your legitimate interests, in order to enter into, or perform a contract with you, with your consent, and for compliance with our legal obligations. We indicate the specific processing grounds next to each purpose listed below:

We use the information we collect or receive:

• to facilitate account registration or longon process, we only store your email address as necessary to sign-in, and not any personal information is required otherwise. That email address is encrypted at-rest and is not used for marketing or sales unless explicitly requested. You may be notified of issues with your account by the specific email address as necessary only;
• fulfill and manage orders, including payments, remuneration, and reimbursement. Such order information will be retained to ensure the order is met satisfactorly and to provide you with a full history of the orders you have made. We will not use this for marketing, analytics, or any other purpose, and beyond order fulfilment, we will have no access to this data directly;
• to respond to enquiries or offer support, including solving potential issues with our services. We have no access to your account itself and have provided a self-service account management solution to ensure we do not need to access any details within your account.

Sharing Information

We do not share your information with any other parties, at any time. In the event of a transfer or property, services, or solutions, your information is non-transferrable and will be deleted. Your information is not an asset and we do not intend to treat it as such.

In the event that your information is requested as part of a legal process we have ensured your data is systematically protected through automated infrastructure and is not accessable by any members of this organisation.

Security

We have implemented appropriate technical and organisational security measures designed to protect the security of your personal information.

All personal information stored by us is protected with high-quality security methods, including modern encryption, and is not accessible directly by humans. It is stored for as long as needed, and then erased as soon as possible.

However, no digital system is 100% safe and we recommend only using our services in a secure environment. We will do our best to ensure you are protected.

Rights

In some regions (like the EEA and UK) you have certain rights under the applicable data protection laws. These may include the right i) to request access and obtain a copy of your personal information, ii) to request rectification or erasure, iii) to restrict the processing of your information; and iv) if applicable, to data portability. In certain circumstances you may have the right to object to the processing of your information. We believe these rights are universal and the absolute minimum you should be entitled to. If you wish for any of the above, regardless of region, or something beyond these rights, then please contact us and we will help.

If we are relying on your consent to process your information, you may withdraw your consent at any time.

If you are in the EEA or UK you may also have the right to complain to your local supervisory data protection authority.

If you have any questions about your privacy rights, or how we can help you, then email us at privacy@omnifi.foundation.

Cookies

We all enjoy a good cookie every now and then, and sometimes they may even be necessary. For example, we need cookies to be able to keep you logged in to our services. This type of good is termed a "necessary cookie". We will use this explicitly on signing in to our services and not before. For all other "optional cookies" we will assume you have chosen not to allow them until you explicitly decide otherwise. We will not prompt, or explicitly change the experience of our services, until you make a decision; we will simply assume you have chosen not to opt-in, until you actively choose otherwise through the service settings.

Data Collection

We will not, at any time, arbitrarily collect data unnecessarily, and without explicit approval. At any time you may request a full record of your data

Third-Parties

Through the use of third-party components we acknowledge the risk that some dependencies and services we use as delivery mechnisms and tools may attempt to collect data implicitly through our services. However, we do not enable or subscribe to this as an acceptable situation and would request that any discovery of implicit tracking, data collection, analytics, or monitoring that is discovered in any service we provide be reported immediately to enable us to correct this as soon as possible. As a recourse to such an event we will publish an article acknowledging the issue once we have confirmed the situation, and detail the actions taken to mitigate it.