Privacy Policy

thelasting.page is owned and operated by Sara Imran Khan, referred to in this Privacy Policy as the Owner. For privacy requests, support requests, account requests, content removal requests, complaints, legal notices, and other communications, contact: team@thelasting.page

This Privacy Policy applies to personal data processed through thelasting.page and related services. This Privacy Policy does not apply to third-party websites, payment providers, social media platforms, browsers, search engines, internet archives, hosting providers, analytics providers, or other third-party services that may process data under their own terms and privacy policies. By using the Website, creating an account, making a payment, claiming a mark, uploading content, publishing a page, or contacting the Owner, you acknowledge this Privacy Policy.

thelasting.page is built around public digital marks and public pages. If you upload an image, message, name, link, caption, or other content for display, that content may become publicly visible. Public content may be viewed, copied, screenshotted, downloaded, indexed, cached, shared, quoted, archived, or otherwise used by other users, search engines, social media platforms, browsers, internet archives, and third parties. Do not upload content that you want to keep private. Do not upload another person's personal data, image, name, likeness, message, or private information unless you have permission and lawful authority to do so.

The Owner may collect and process the following types of personal data, depending on how you use the Website. 4.1 Account data — This may include your email address, username, login details, authentication information, account status, account settings, and account activity. 4.2 Public page and mark data — This may include your selected or allocated mark, mark number, ring or placement details, public page URL, uploaded image, message, caption, name, display name, link, date of claim, publication status, edit history, moderation status, and related public display information. 4.3 Payment and transaction data — This may include order ID, payment ID, payment status, transaction amount, currency, payment date, refund status, chargeback status, invoice or receipt information, tax-related information if applicable, and payment provider references. The Owner does not intentionally collect or store full card numbers, UPI credentials, net banking credentials, CVV numbers, or other sensitive payment instrument details. Payments are processed by third-party payment providers, such as Razorpay or other providers used by the Website. 4.4 Technical and usage data — This may include IP address, browser type, device type, operating system, approximate location derived from IP address, pages viewed, clicks, referring URLs, session information, timestamps, error logs, security logs, cookie identifiers, analytics identifiers, and similar technical information. 4.5 Communications data — This may include emails, support requests, complaints, refund requests, privacy requests, content reports, legal notices, screenshots, attachments, and other communications you send to the Owner. 4.6 Moderation, safety, fraud, and compliance data — This may include reports about content, suspected policy violations, payment disputes, suspicious transactions, fraud indicators, chargeback information, money laundering risk indicators, sanctions risk indicators, abuse reports, ... (line truncated to 2000 chars)

The Owner may collect personal data directly from you when you create an account, claim a mark, make a payment, upload content, publish a page, edit content, contact support, submit a complaint, report content, or otherwise interact with the Website. Personal data may also be collected automatically when you use the Website, including through cookies, logs, analytics, security tools, and similar technologies. The Owner may receive limited data from third parties such as payment processors, authentication providers, hosting providers, analytics providers, email providers, security providers, and other service providers used to operate the Website.

The Owner may process personal data for the following purposes: 1. to provide, operate, maintain, and improve the Website; 2. to create and manage user accounts; 3. to allocate, display, manage, and preserve digital marks and public pages; 4. to process payments, refunds, disputes, chargebacks, receipts, and transaction records; 5. to display User Content publicly as part of the Service; 6. to generate shareable links, previews, thumbnails, public pages, and wall displays; 7. to provide customer support and respond to requests; 8. to moderate content and enforce the Terms and Conditions; 9. to detect, prevent, investigate, and respond to fraud, payment abuse, chargeback abuse, money laundering, terrorist financing, sanctions risk, suspicious transactions, security incidents, and unlawful activity; 10. to protect the rights, safety, property, reputation, and security of the Owner, users, payment providers, hosting providers, service providers, and the Website; 11. to comply with applicable laws, legal requests, payment provider requirements, tax obligations, reporting obligations, regulatory requirements, and dispute processes; 12. to send service-related notices, account notices, payment notices, policy updates, security alerts, and support messages; 13. to analyze Website usage, performance, errors, traffic, and feature effectiveness; 14. to improve design, usability, accessibility, security, moderation, and service quality; 15. to market or promote thelasting.page, including by displaying public pages, public marks, screenshots, examples, or publicly submitted content where permitted by the Terms and Conditions; 16. to preserve records needed for legal, operational, payment, safety, audit, dispute, and compliance purposes.

The Owner processes personal data only where there is a lawful reason to do so. Depending on your location and the applicable law, this may include: 1. providing the Service you requested; 2. processing your payment and delivering your digital purchase; 3. your consent, where consent is required; 4. compliance with legal, regulatory, tax, payment, fraud-prevention, or security obligations; 5. legitimate or permitted uses, such as operating the Website, preventing abuse, improving the Service, responding to support requests, enforcing terms, and protecting the Website; 6. establishing, exercising, or defending legal claims. Where consent is legally required, you may withdraw consent by contacting team@thelasting.page. Withdrawal of consent may affect your ability to use certain features and may not affect processing already completed or processing required for legal, payment, security, dispute, or compliance reasons.

Public pages are intended to be visible to the public. If you submit content for public display, the Owner may display it on the Website and in related public views, previews, thumbnails, search or discovery features, share links, examples, screenshots, product demos, and promotional materials relating to thelasting.page, subject to the Terms and Conditions. You are responsible for the personal data and content you choose to publish. You must not publish personal data about another person unless you have the legal right and permission to do so. The Owner may remove, hide, restrict, edit formatting, reject, or moderate public content where the Owner reasonably believes it violates the Terms and Conditions, this Privacy Policy, applicable law, third-party rights, payment provider rules, safety standards, or the intended operation of the Website. Removing content from the Website may not remove copies that have already been cached, indexed, archived, copied, screenshotted, downloaded, shared, or stored by third parties.

The Website may use cookies, local storage, pixels, tags, SDKs, analytics tools, security tools, and similar technologies. These technologies may be used to: 1. keep you signed in; 2. remember preferences; 3. process checkout and security checks; 4. prevent fraud and abuse; 5. understand Website usage and performance; 6. detect errors and technical issues; 7. improve the Website; 8. support analytics, security, and operational features. You may be able to control cookies through your browser settings. Blocking cookies may affect Website functionality, login, checkout, security, analytics, or other features.

Payments are processed by third-party payment providers, such as Razorpay or other providers used by the Website. When you make a payment, the payment provider may collect and process payment information under its own terms and privacy policy. The Owner may receive transaction references, payment status, amount, currency, refund status, chargeback information, fraud signals, and other payment-related information needed to operate the Service and maintain records. The Owner may share information with payment providers, banks, card networks, regulators, law enforcement, or other competent authorities where reasonably necessary to process payments, prevent fraud, investigate suspicious activity, respond to disputes, comply with law, or enforce the Terms and Conditions.

The Owner may share personal data in the following circumstances: 11.1 Public sharing — Public pages, marks, images, messages, names, captions, links, and related display information may be visible to anyone who accesses the Website or related public links. 11.2 Service providers — The Owner may share data with service providers who help operate the Website, including hosting providers, storage providers, payment processors, email providers, analytics providers, security providers, content delivery networks, authentication providers, customer support tools, and technical contractors. 11.3 Payment, fraud, AML, and compliance partners — The Owner may share data with payment processors, banks, financial institutions, card networks, fraud-prevention providers, AML or sanctions screening providers, regulators, law enforcement, or other competent authorities where needed for payment processing, fraud prevention, suspicious transaction review, legal compliance, dispute resolution, or risk control. 11.4 Legal and safety reasons — The Owner may disclose data where reasonably necessary to comply with law, court orders, legal process, regulatory requests, law enforcement requests, tax obligations, payment provider requirements, or to protect rights, safety, property, reputation, security, users, service providers, or the Website. 11.5 Business or service transfer — If the Website, domain, assets, operations, data, rights, or services are sold, transferred, assigned, merged, reorganized, migrated, outsourced, or otherwise transferred, personal data may be disclosed or transferred as part of that process, subject to applicable law. 11.6 With your direction or consent — The Owner may share data where you direct, request, authorize, or consent to the sharing.

The Owner keeps personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain public pages, preserve claimed marks, process payments, maintain records, resolve disputes, enforce terms, prevent abuse, comply with law, and protect the Website. Because claimed marks and public pages are intended to remain publicly accessible indefinitely, public content connected to a claimed mark may be retained and displayed for as long as the Website operates, unless removed under the Terms and Conditions, this Privacy Policy, applicable law, or the Owner's moderation processes. Account data may be retained while your account is active and for a reasonable period afterward for legal, operational, payment, dispute, fraud-prevention, security, backup, audit, and compliance purposes. Payment records, refund records, chargeback records, fraud records, AML-related records, tax-related records, and legal records may be retained for longer where required or appropriate for compliance, dispute handling, risk management, legal claims, or payment provider requirements. Deleted or removed content may remain in backups, logs, caches, archives, moderation records, legal records, payment records, security records, or other temporary or necessary repositories for a limited or legally necessary period.

The Owner uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. No website, internet transmission, payment flow, hosting system, storage system, or security measure is fully secure. The Owner cannot guarantee absolute security. You are responsible for protecting your device, browser, email account, login credentials, authentication methods, and access to your account. If you believe your account or data has been compromised, contact team@thelasting.page promptly.

The Website may be accessed globally. The Owner and service providers may process, host, store, transfer, or access personal data in India or other countries where infrastructure, hosting, payment, analytics, support, security, or service providers operate. Data protection laws in those countries may differ from the laws of your location. Where required, the Owner will take reasonable steps to protect personal data in connection with international processing and transfers.

Depending on applicable law, you may have rights to access, correct, update, delete, restrict, object to, withdraw consent, receive a copy of, or request information about personal data processed by the Owner. You may contact team@thelasting.page to make a privacy request. The Owner may need to verify your identity before responding. The Owner may refuse or limit requests where permitted or required by law, including where a request is fraudulent, abusive, impossible, disproportionate, affects another person's rights, conflicts with legal obligations, conflicts with payment or fraud-prevention requirements, or relates to data that must be retained for legal, security, dispute, tax, AML, or compliance reasons. If you request deletion of public content, the Owner may remove or hide it from active public display where appropriate, but deletion may not remove copies from search engines, browser caches, screenshots, third-party archives, social media, messages, backups, legal records, payment records, moderation records, or other third-party locations. A request to delete account data, remove content, or withdraw consent does not automatically entitle you to a refund.

You may request account deletion or content removal by contacting team@thelasting.page. The Owner may ask for information needed to verify ownership of the account, mark, public page, payment, or content. After account deletion, the Owner may retain certain data where reasonably necessary for payment records, refunds, disputes, chargebacks, fraud prevention, AML review, legal compliance, moderation records, security records, backups, tax records, enforcement of the Terms and Conditions, or protection of legal rights. If a claimed mark is connected to removed content or a deleted account, the Owner may hide the public page, keep the mark reserved, release the mark, anonymize the page, or take another reasonable action depending on the circumstances, applicable law, and the Terms and Conditions.

The Website is not intended for users under 18 years old. The Owner does not knowingly allow minors to create accounts, make payments, claim marks, or upload public content. If the Owner reasonably learns that a minor has provided personal data or used the Website, the Owner may delete, restrict, or disable the relevant account, mark, public page, or content. If you believe a minor has used the Website or submitted personal data, contact team@thelasting.page.

Public pages or user content may contain links to third-party websites or services. The Website may also link to payment providers, social platforms, support tools, analytics providers, or other third-party services. The Owner is not responsible for third-party websites, content, policies, security, data practices, or actions. You should review the privacy policies and terms of any third-party service you use.

The Owner may send service-related communications, including account notices, payment notices, purchase confirmations, security alerts, moderation notices, policy updates, support responses, and important Website updates. Where permitted by law, the Owner may also send promotional or informational emails about thelasting.page. You may opt out of promotional emails by using the unsubscribe method provided, if available, or by contacting team@thelasting.page. You may still receive essential service, legal, payment, and security communications.

Some browsers may send 'Do Not Track' signals. Because there is no uniform industry standard for responding to such signals, the Website may not respond to them. You can control certain tracking technologies through your browser or device settings where available.

If the Owner becomes aware of a data breach or security incident affecting personal data, the Owner may investigate, take remedial steps, notify affected users, notify regulators, notify payment providers, or take other action where required or appropriate under applicable law. The timing, content, and method of any notice will depend on the nature of the incident, applicable law, security considerations, and available contact information.

The Owner may update this Privacy Policy from time to time. The updated version will show the effective date or last updated date. For material changes, the Owner may take reasonable steps to notify users, such as by Website notice, account notice, email, or another appropriate method. Continued use of the Website after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy, except where applicable law requires additional consent.

For privacy requests, account requests, content removal requests, complaints, questions, or concerns, contact: team@thelasting.page. The Owner will review requests and respond within a reasonable time, subject to verification, applicable law, technical feasibility, payment provider requirements, legal obligations, and the rights of other people.

This Privacy Policy should be read together with the thelasting.page Terms and Conditions. If there is a conflict between this Privacy Policy and the Terms and Conditions about the processing of personal data, this Privacy Policy controls for that privacy issue. For all non-privacy issues, the Terms and Conditions control.