1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and UK data protection laws, the Data Controller responsible for your personal information is FinalSim LLC (operating as LegitSMS).

2. Legal Basis for Processing

We process the personal data of individuals located in the European Economic Area (EEA) and the United Kingdom under the following legal bases:

• Contractual Necessity: Processing email addresses, account details, and transaction balances is necessary to deliver our digital phone verification services as requested by you.
• Legitimate Interests: Processing usage metrics via Google Analytics and Google Tag Manager helps us maintain site security, optimize platform performance, and prevent fraud.
• Legal Obligation: We may process transaction data to comply with statutory accounting and tax obligations.

3. International Data Transfers

FinalSim LLC is headquartered in the United States. If you are accessing LegitSMS from the EEA or UK, your data will be transferred to and processed in the United States. We safeguard these transfers using standard contractual clauses and data protection agreements with our third-party infrastructure processors (including Google and Cloudways).

4. Your Rights Under GDPR

If you are a resident of the EEA or UK, you possess specific rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to Erasure ("Right to Be Forgotten"): You can request that we permanently delete your account and associated personal data, subject to legal retention exceptions.
• Right to Restrict Processing: You may request that we limit the way we use your data under certain conditions.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to our processing of your personal data for analytics or legitimate business interest purposes.