1. Scope and Personal Information Controller
8LIMA8 5UCCESS Lifestyle Inc. acts as the Personal Information Controller for personal data processed through this platform. This policy applies to website visitors, customers, prospective and registered members, representatives, employees, authorized portal users, and individuals who contact our support channels.
This policy should be read together with our Terms of Use and any transaction-specific notice or consent form presented when information is collected.
2. Personal Data We Collect
Identity and account information
- Name, birthday, address, contact number, email address, member or representative code, account role, rank, and profile picture.
- Sponsor, genealogy, direct-recruit, promotion, and breakaway information needed to administer the business structure.
Transaction and financial-operation information
- Orders, sales, receipts, payment method, purchase history, inventory activity, commission records, payouts, adjustments, void requests, fund transfers, and accounting references.
- Payment proofs, deposit slips, cheque-processing records, expense receipts, and bank-account details required for authorized company transactions. Sensitive bank information is restricted to authorized roles and protected in storage.
Support and website information
- Contact inquiries, feedback, complaints, supporting references, preferred contact method, and correspondence.
- Device and browser information, masked network address, session activity, authentication events, security logs, and audit records.
- Representative-directory details where the representative and the company have approved public display.
3. Purposes and Lawful Bases
We process personal data when necessary for one or more of the following:
- Registering and administering accounts, memberships, roles, ranks, and authorized access.
- Processing orders, payments, inventory, commissions, payouts, adjustments, accounting, and audit requirements.
- Responding to product, business, support, payment, delivery, and management inquiries.
- Authenticating users, preventing fraud and abuse, protecting company funds, and investigating security events.
- Complying with applicable tax, accounting, corporate, employment, regulatory, and lawful government requirements.
- Improving services and maintaining operational reports using data that is limited to what is necessary for the stated purpose.
Depending on the activity, processing may be based on consent, performance of a contract or requested service, compliance with a legal obligation, protection of lawful rights, or legitimate interests that do not override the rights and freedoms of the data subject.
5. Retention and Secure Disposal
| Record category | General retention approach |
|---|---|
| Account and membership records | While the account is active and for a reasonable period after closure to address legal, audit, fraud-prevention, and dispute requirements. |
| Sales, accounting, commission, inventory, and financial records | For the period required by applicable tax, accounting, corporate, and audit laws and any longer period needed for a pending claim or investigation. |
| Contact and support inquiries | Normally up to two years after resolution, unless a longer period is needed for a complaint, legal obligation, or formal investigation. |
| Authentication, device, and security logs | Normally up to one year, or longer where required to investigate or document a security incident. |
| Backups | Retained according to the protected backup cycle and deleted or overwritten securely when the cycle expires. |
When data is no longer required, it is securely deleted, anonymized, blocked, or archived where continued retention is legally required.
6. How We Protect Personal Data
We use role-based access, strong authentication, multi-factor authentication for employee portals, encrypted transport, secure password hashing, protected session cookies, restricted uploads, audit records, rate limiting, security monitoring, database safeguards, and backup controls. Access to financial and operational data is limited according to assigned duties.
No online system can guarantee absolute security. Users must protect their passwords, authenticator codes, recovery codes, devices, and email accounts and must promptly report suspected unauthorized access.
7. Your Data-Privacy Rights
Subject to applicable law and valid limitations, you may exercise the rights to:
- Be informed about the processing of your personal data.
- Access personal data held about you.
- Object to certain processing or withdraw consent where consent is the applicable basis.
- Correct inaccurate or incomplete information.
- Request erasure, blocking, or restriction where legally available.
- Receive portable data where the right to portability applies.
- File a complaint with the National Privacy Commission and seek damages where permitted by law.
We may verify your identity before acting on a request. Some records cannot be deleted immediately when retention is required by law, necessary to establish or defend legal claims, or needed to protect other persons and company records.
9. Privacy Requests and Policy Updates
Send privacy questions or data-subject requests to info@5uccesslifestyle.com with the subject “Data Privacy Request.” You may also use our Contact & Support Center and select the most appropriate concern category.
We may update this policy when our services, legal obligations, or processing practices change. Material changes will be identified by a revised effective date and, when appropriate, an account or website notice.