OmaxTelecom

OMAX GROUP LTD ("OMAX," "we," "us," or "our") is committed to protecting your privacy and safeguarding your personal data. We are a private limited company registered in England and Wales (Company No. 16125244), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you interact with our website, platform, and services. We process personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy applies to personal data collected and processed in connection with:

• Your use of our website and platform at omaxtelecom.com
• Our provision of services, including eSIM, SMS, VoIP, and other telecommunications services
• Business communications, inquiries, and correspondence
• Recruitment and employment activities

In most cases, OMAX acts as the data controller, determining the purposes and means of processing your personal data.

In certain B2B contexts, OMAX acts as a data processor when processing end users' personal data on behalf of our business customers. In such cases, the business customer is the data controller, and separate contractual processing terms govern our processing activities.

We may collect and process the following categories of personal data:

We process your personal data for the following purposes:

• Service deliveryTo provide, maintain, and improve our telecommunications services
• Billing and paymentsTo process transactions, manage accounts, and issue invoices
• Quality assuranceTo monitor service quality and resolve technical issues
• Legal complianceTo meet our regulatory, tax, and legal obligations
• MarketingTo send promotional communications where you have given consent
• SecurityTo detect, prevent, and respond to fraud, abuse, or security incidents

We rely on the following legal bases under UK GDPR:

• Contract performanceProcessing necessary to fulfil our contractual obligations to you
• Legitimate interestsProcessing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring network security
• ConsentWhere you have given explicit consent, such as for marketing communications
• Legal obligationProcessing required to comply with applicable laws and regulations

We may share your personal data with the following categories of recipients:

• AffiliatesCompanies within the OMAX Group for internal administration and service delivery
• Service providersThird-party vendors who assist with hosting, payment processing, analytics, and customer support
• Telecom partnersNetwork operators and wholesale partners necessary for service provisioning
• Legal and regulatory authoritiesWhere required by law, court order, or regulatory request

We do NOT sell your personal data to third parties.

OMAX is headquartered in the United Kingdom. Your personal data may be processed in countries outside the UK where our service providers or telecom partners operate.

When transferring data internationally, we implement appropriate safeguards including:

• Transfers to countries with an adequacy decision from the UK Secretary of State
• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
• Other lawful transfer mechanisms as required under UK GDPR

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Active accountsData is retained for the duration of your use of our services
• Financial records6–7 years as required by tax and accounting regulations
• Telecommunications logsRetained in accordance with applicable telecommunications law
• Job applicant data6–12 months after the recruitment process concludes

We take appropriate technical and organisational measures to protect your personal data, including:

• TLS encryption for data in transit
• Access controls and role-based permissions
• Regular security assessments and vulnerability testing
• Incident response plans and breach notification procedures

Under UK GDPR, you have the following rights regarding your personal data:

• Right of accessRequest a copy of the personal data we hold about you
• Right to rectificationRequest correction of inaccurate or incomplete data
• Right to erasureRequest deletion of your data where there is no compelling reason for continued processing
• Right to restrict processingRequest that we limit how we use your data
• Right to data portabilityReceive your data in a structured, machine-readable format
• Right to objectObject to processing based on legitimate interests or direct marketing
• Right to withdraw consentWhere processing is based on consent, withdraw it at any time
• Right to complainLodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date above.