Privacy Policy

Mal Flow respects your privacy. This policy explains how we collect, use and protect your data when you use the Mal Flow website and app — a service provided and operated by Mal Flow.

• Account data: full name, email address, phone number and password (stored encrypted — we never see it).
• Identity verification data: a photo of your ID document and a selfie, processed by our approved verification provider.
• Data you share with us: your messages to customer care and any files you attach.
• Usage and device data: IP address, device and browser type, language settings and login history.
• Notification data: the device identifier needed to send you notifications, if you allow them.

• To create your account, run the service and provide its features to you.
• To verify your identity and protect your account from unauthorized use and fraud.
• To contact you about your account and requests, and to answer your questions.
• To send notifications and important security alerts.
• To improve and develop the service and understand how it is used.
• To comply with applicable laws and legal requirements.

We never sell your personal data. We share only the minimum necessary with:

• Service providers who help us run the platform — such as hosting, identity verification, messaging and notifications — under obligations that keep your data confidential.
• Official and legal authorities, where required by law or to protect our rights and those of our users.

We keep your data for as long as your account is active, and for an additional period after closure where legal or regulatory requirements demand it. After that, we delete it or make it no longer identifiable to you.

We apply technical and organizational safeguards to protect your data, including encryption of sensitive data, two-step verification, new-device verification and a security activity log for your account. No system can guarantee absolute security, so please keep your login details confidential.

• View and update your account data from the "My account" page.
• Request a copy of your data or ask us to correct it.
• Request deletion of your account and data, subject to what the law requires us to keep.
• Control notifications and marketing messages from your account settings.

The service is not intended for anyone under 18, and we do not knowingly collect their data. If we learn that an account belongs to a minor, we will close it and delete its data.

We may update this policy from time to time and will notify you of any material change through the platform or by email, updating the last-updated date at the top of the page.

For any questions about your data privacy, email our customer care team at [email protected], or by phone at 0112920989, or through our page on Facebook.