Official Privacy Policy

At **Buy AV Yours**, powered by **Advan Hong Kong Technology Limited**, we treat data privacy as a core component of our cybersecurity ethos. This policy outlines how we collect, process, and protect your information in full compliance with global standards, including **GDPR** and Hong Kong’s **PDPO**. Your digital trust is our priority.

1. Information We Collect

We collect essential information to deliver a secure, efficient, and tailored cybersecurity experience:

• **Personal Identification Data**: Name, email, contact number, and billing details provided during service subscription or account creation.
• **Service Configuration Data**: Information related to your Endpoint Detection & Response (EDR) setup, security platform license, and network topology.
• **Usage & Analytics Data**: Technical information such as IP addresses, device identifiers, browser type, and interaction patterns used solely for service optimization and threat analysis.
• **Communication Data**: Records of correspondence when you contact our Security Operations Center (SOC) or support teams.

2. How We Utilize Your Information

We use your data strictly to power and improve our security offerings and services:

• **Service Delivery**: To process your purchase, activate your security licenses, and manage the deployment of our solutions.
• **Personalized Security**: To provide tailored recommendations, threat intelligence alerts, and customized configurations based on your protected endpoints.
• **Platform Enhancement**: Improving our website, security platforms, and user experience through aggregated, anonymized usage analytics.
• **Legal Compliance**: Ensuring adherence to all necessary legal obligations and proactively protecting against digital fraud.

3. Our Data Protection Protocols

Security is not just our product, it's our practice. We employ industry-leading, multi-layered security measures:

• **Cryptographic Encryption**: All sensitive data is secured both in transit (SSL/TLS) and at rest using AES-256 encryption standards.
• **Zero-Trust Access Controls**: Access to personal information is highly restricted, relying on role-based permissions and mandatory Multi-Factor Authentication (MFA).
• **Continuous Audits**: We adhere to **ISO 27001** standards and conduct regular third-party penetration tests to validate our security integrity.
• **Data Minimization**: We follow a strict policy of collecting only necessary data and anonymizing it wherever feasible.

4. Data Sharing and Transfer

We guarantee that we **do not sell or rent** your personal data for marketing purposes. Data sharing is limited to the following essential activities:

• With certified third-party partners (e.g., payment gateways, enterprise software vendors) necessary to fulfill your contracted security services.
• When legally mandated, such as responding to a court order or regulatory inquiry.
• To protect the rights, property, or safety of **Buy AV Yours**, our clients, or the public.

As an international company, we may transfer data globally. We ensure all such transfers are protected by mechanisms like **Standard Contractual Clauses (SCCs)** or equivalent legal frameworks.

5. Your Data Subject Rights (GDPR/PDPO)

You maintain full control over your personal data and may exercise the following rights at any time:

• **Right to Access**: Request confirmation and a copy of the data we hold about you.
• **Right to Rectification**: Correct any data that is inaccurate or incomplete.
• **Right to Erasure ('Right to be Forgotten')**: Request the deletion of your data, subject to legal retention obligations.
• **Right to Object/Opt-Out**: Unsubscribe from marketing communications instantly via email links or contact us directly.
• **Right to Portability**: Receive your data in a machine-readable format for transfer.

To exercise these rights, please contact our Data Protection Officer at: support@buyavyours.xyz. We commit to a response time of **30 days**.

6. Cookies and Digital Tracking

We use first and third-party cookies strictly to improve site functionality and performance. These technologies help us measure traffic, understand user preferences, and secure your browsing session. You maintain the ability to manage or disable optional cookies via our consent manager or your browser settings.

7. Policy Updates and Contact

This policy may be updated periodically to reflect legislative changes or service enhancements. The effective date is provided below. We will notify you of any material changes via email or prominent website notification.

**Last Updated**: October 8, 2025

For questions regarding this policy, please contact us: