3- Legal Basis & Purpose

• We process your data under the following legal bases:

  • Article 6(1)(b) GDPR (contractual necessity): To administer the competition, verify eligibility, and distribute prizes.

  • Article 6(1)(a) GDPR (consent): To create early-access user profiles and pre-upload video submissions to our app.

  • Legitimate Interest (where applicable): To improve competition operations and prevent fraud.

  • CCPA (California Users): Users can opt out of data collection or request data deletion.

  • User Recognition: Displaying Elite Creator Badges and Featured Creators in the app.

4- Data Retention

• All Participants: As all valid submissions receive rewards (vouchers or in-app points), all participants are considered winners.

• Personal Data: Retained for 3 years for tax/audit compliance.

• Videos: All submitted videos will be stored and published in the app unless a removal request is made.

• Low-Quality/Rejected Videos: Participants will still have app accounts but their videos will not be preloaded. These videos will be permanently deleted within 30 days of submission.

5- Your Rights

• Under GDPR, CCPA, and other global privacy laws, you have the right to:

  • Access a copy of your data.

  • Correct any inaccurate information.

  • Request deletion of your personal data or videos.

  • Restrict processing under certain conditions.

  • Withdraw consent (app users can request to remove their profiles/videos).

  • Opt-out of data processing under CCPA for US-based users.

  • To exercise these rights, contact: info@starrate.io

6- Data Sharing & Third Parties

• Huuray (Prize Fulfillment Provider): We share limited data (email, voucher amount) with Huuray to process rewards.

• Cloud Storage Providers: Secure video hosting.

• App Hosting & Analytics: To deliver early access experience.

• No Data Sales: StarRate Tech Ltd never sells user data.

• No Payment Details Collected: We do not process any payment transactions.

7- International Transfers

• We may transfer personal data outside the UK/EU, including to the US, under:

  • Standard Contractual Clauses (SCCs) for EU/UK compliance.

  • Adequacy Decisions where applicable (e.g., UK-US Data Bridge).

  • Other legally compliant mechanisms where required.

8- Security Measures

• We implement strict security controls to protect your data, including:

  • Encryption (TLS/SSL) for all data transfers.

  • Limited staff access to personal data (role-based access).

  • Regular security audits to prevent data breaches.

9- Contact & Complaints

• For privacy-related concerns or GDPR requests:

  📩 Email: info@starrate.io

  📞 Supervisory Authority: [UK ICO or your local DPA] (for EU/UK complaints).