Privacy Policy

1.Introduction

BAAL Labs Inc. ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (baalu.to) and interact with our services. By accessing this website, you consent to the data practices described in this policy.

This Privacy Policy should be read in conjunction with our Terms of Service.

2.Information We Collect

2.1 Information You Provide Directly

When you register interest, request access to our whitepaper, or interact with our services, we collect:

• Full name
• Email address
• Company name (if applicable)
• Legal status (individual, company, or association)
• Country of residence
• Date of birth
• Area of interest
• Investor qualification status and attestations
• Any other information you voluntarily provide in communications with us

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device information
• Referring website addresses (URL referrers)
• Pages viewed, navigation paths, and time spent on pages
• Access times, dates, and frequency of visits
• Clickstream data and website usage patterns

2.3 Geographic Restriction Verification

To enforce our Terms of Service and comply with legal requirements, we collect and analyze IP addresses and other location indicators to verify that users are not accessing from prohibited jurisdictions, particularly the United States.

3.How We Use Your Information

We use the information we collect for the following purposes:

• Access Control: To process and verify whitepaper access requests
• Compliance: To verify eligibility and enforce geographic restrictions and Terms of Service
• Communication: To respond to inquiries and communicate updates about the BAAL protocol
• Legal Obligations: To comply with applicable laws, regulations, and regulatory requirements
• Security: To prevent fraudulent activity, unauthorized access, and enhance website security
• Analytics: To understand website usage patterns and improve our services
• Record Keeping: To maintain records as required for legal and regulatory compliance
• Risk Assessment: To conduct due diligence and risk assessments

5.Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you voluntarily provide information through registration forms
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To operate our website, prevent fraud, and enforce our Terms of Service
• Contractual Necessity: To fulfill our obligations under agreements with you

6.Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following limited circumstances:

• Service Providers: Third-party vendors who assist with website hosting, email delivery, data storage, compliance verification, and identity verification
• Legal and Regulatory Requirements: When required by law, regulation, court order, subpoena, legal process, or governmental/regulatory request
• Protection of Rights: To enforce our Terms of Service, protect our legal rights, property, or safety
• Fraud Prevention: To investigate, prevent, or take action regarding suspected fraud, illegal activities, or violations of our policies
• Business Transfers: In connection with any merger, acquisition, financing, sale of assets, or other business transaction
• With Your Consent: When you explicitly authorize us to share your information

7.Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, destruction, or loss. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Secure hosting infrastructure
• Employee training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You acknowledge and accept this inherent risk.

8.Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Registration Data: Retained for up to 7 years for regulatory compliance purposes
• Access Logs: Retained for up to 2 years for security and compliance purposes
• Communications: Retained as necessary for business operations and legal compliance

After the retention period expires, we will securely delete or anonymize your personal information in accordance with applicable data protection laws.

9.Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request confirmation of whether we process your personal data and obtain a copy of such data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal information, subject to legal retention requirements
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Object: Object to processing of your personal information for certain purposes
• Right to Data Portability: Request transfer of your data to another service provider in a structured, commonly used format
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us at info@baalu.to

We will respond to your request within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

10.International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including countries that may have different data protection laws.

When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by competent data protection authorities
• Binding corporate rules or other recognized transfer mechanisms

11.Children's Privacy

Our services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 18. If you are under 18, you must not use this website or provide any personal information. If we become aware that we have collected personal information from someone under 18 without parental consent, we will take steps to delete such information immediately. If you believe we may have collected information from a child under 18, please contact us immediately.

12.Do Not Track Signals

Some web browsers incorporate "Do Not Track" (DNT) features. Because there is not yet a common understanding of how to interpret DNT signals, our website does not currently respond to DNT signals. As noted above, we do not use cookies or tracking technologies on this website.

13.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending email notification for significant changes (if we have your email address)

We encourage you to review this Privacy Policy periodically. Your continued use of the website after changes are posted constitutes your acceptance of the revised Privacy Policy.

14.Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make every effort to respond to your inquiry promptly and address any concerns you may have about how we process your personal information.