GDPR Privacy Policy

Last updated: 20 February 2026

Xaltocron ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect information about you in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

1. Data Controller

Xaltocron acts as the data controller for personal data collected through bf-v4.com and related services. You may contact us regarding any data protection matter at:

11 Clark Cl Spence ACT 2615, Australia
Email: help@bf-v4.com
Phone: +61 7 4944 3200

2. Personal Data We Collect

We collect personal data only to the extent necessary to provide our services. The categories of data we may collect include:

Identity data: first name, last name, username or similar identifier
Contact data: email address, telephone number, postal address
Technical data: IP address, browser type and version, device identifiers, time zone, operating system
Usage data: information about how you interact with our platform, pages visited, session duration
Communications data: messages, feedback, and support enquiries you send to us
Transaction data: details of services you have purchased or registered for

3. How We Collect Personal Data

We collect data through the following means:

Directly from you when you register an account, complete a form, or contact us
Automatically through cookies, server logs, and similar tracking technologies when you use our website
From third-party services where you have given consent for data to be shared

4. Legal Basis for Processing

We process your personal data only where a valid legal basis exists. The bases we rely on are:

Consent: where you have given clear consent for a specific purpose
Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering a contract
Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights
Legal obligation: where we are required to process data to comply with applicable law

5. Purposes of Processing

We use your personal data for the following purposes:

Providing, maintaining, and improving our platform and services
Managing your account and processing registrations
Sending service-related communications, including confirmations and notifications
Responding to enquiries and providing customer support
Sending marketing communications where you have opted in to receive them
Analysing usage patterns to improve user experience
Ensuring the security and integrity of our platform
Complying with legal obligations

6. Cookies and Tracking Technologies

6.1 What We Use

We use cookies and similar technologies to operate our website, remember your preferences, and analyse traffic. Cookies may be session-based (deleted when you close your browser) or persistent (retained for a set period).

6.2 Your Choices

You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our services. Where required by law, we will request your consent before placing non-essential cookies.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

Service providers: third parties who process data on our behalf under data processing agreements, including hosting, analytics, payment processing, and email delivery providers
Professional advisers: lawyers, auditors, and insurers where necessary
Authorities: regulators, law enforcement, or courts where required by law or to protect our legal rights
Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant third party

All third parties with whom we share data are required to handle it securely and in accordance with applicable data protection law.

8. International Data Transfers

Where personal data is transferred outside the jurisdiction in which it was collected, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, or equivalent mechanisms that provide an adequate level of protection for your data.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When data is no longer required, it is securely deleted or anonymised. The specific retention period depends on the type of data and the purpose of processing.

10. Your Rights Under GDPR

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate or incomplete data
Right to erasure: to request deletion of your personal data in certain circumstances
Right to restriction: to request that we limit how we use your data in certain circumstances
Right to data portability: to receive your data in a structured, commonly used, machine-readable format
Right to object: to object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing
Right to lodge a complaint: to submit a complaint to the relevant supervisory authority in your jurisdiction

To exercise any of these rights, please contact us at help@bf-v4.com. We will respond within the timeframe required by applicable law, generally within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encryption, access controls, and regular security assessments. While we take reasonable steps to protect your data, no transmission over the internet is entirely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such data.

13. Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, unless we have your explicit consent or are permitted to do so by applicable law, in which case we will inform you accordingly.

14. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

15. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you directly. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this policy or our data processing practices, please contact us:

Xaltocron
11 Clark Cl Spence ACT 2615, Australia
Email: help@bf-v4.com
Phone: +61 7 4944 3200
Website: bf-v4.com