Privacy Policy

Introduction

Trollishly ("we", "us", or "our") operates as an online service provider offering social media growth services through our website at trollishly.com (the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. It also outlines your rights regarding your data and how to exercise them.

By using our Service, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

We collect several types of information to provide and improve our Service:

What We DO NOT Collect

• Social Media Passwords: We never ask for or store your social media account passwords
• Full Payment Details: Credit card information is processed by Stripe/PayPal and never stored on our servers
• Sensitive Personal Data: We do not collect race, religion, political views, health data, or biometric information
• Children's Data: We do not knowingly collect data from anyone under 18 without parental consent

How We Use Your Information

We use the collected information for the following purposes:

Service Delivery

• Process and fulfill your orders
• Deliver social media engagement services to the correct profiles
• Track order progress and completion
• Send order confirmations and status updates

Customer Support

• Respond to inquiries, complaints, and support requests
• Troubleshoot technical issues
• Process refund and refill requests
• Collect feedback and improve service quality

Platform Operations

• Maintain and improve website functionality
• Prevent fraud, spam, and unauthorized access
• Monitor for security threats and system errors
• Analyze usage patterns to optimize user experience

Marketing & Communication (Optional)

• Send service updates and feature announcements (you can opt out)
• Request feedback via post-purchase surveys (you can decline)
• Share promotional offers (you can unsubscribe anytime)

Legal & Compliance

• Comply with legal obligations and law enforcement requests
• Enforce our Terms of Service and policies
• Protect against legal liability and disputes
• Maintain records for audit and compliance purposes

How We Share Your Information

We do NOT sell your personal data to third parties. We only share data in the following limited circumstances:

Service Providers

We share data with trusted third-party service providers who help us operate our business:

• Payment Processors: Stripe, PayPal (PCI-DSS compliant)
• Email Services: For sending order confirmations and support responses
• Hosting Providers: Secure servers for storing encrypted data
• Analytics Tools: Google Analytics (anonymized data)
• Customer Support Tools: Live chat, WhatsApp Business API

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Law enforcement requests (with valid legal authority)
• Protection of our legal rights or property
• Prevention of fraud, illegal activity, or security threats
• Protection of user safety or public interest

Business Transfers

If Trollishly is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or prominent website notice before your data is transferred and becomes subject to a different privacy policy.

Data Security & Protection

We implement industry-standard security measures to protect your personal information:

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted
• PCI-DSS Compliance: Payment processing meets Payment Card Industry Data Security Standards
• Secure Servers: Data stored on encrypted servers with restricted access
• Firewall Protection: Network-level security to prevent unauthorized access
• Regular Security Audits: Periodic vulnerability assessments and penetration testing

Organizational Safeguards

• Access Controls: Data access limited to authorized personnel only
• Employee Training: Team members trained on data privacy and security protocols
• Incident Response Plan: Procedures for detecting and responding to data breaches
• Vendor Due Diligence: Third-party service providers evaluated for security practices

Your Privacy Rights (GDPR & Global)

Depending on your location, you have the following rights regarding your personal data:

1. Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format.

2. Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request corrections or updates.

3. Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal obligations (e.g., tax records, dispute resolution). We will comply within 30 days unless legally required to retain data.

4. Right to Object

You can object to processing of your data for marketing purposes, profiling, or automated decision-making.

5. Right to Data Portability

You can request your data in a machine-readable format (e.g., CSV, JSON) to transfer it to another service provider.

6. Right to Withdraw Consent

Where processing is based on consent (e.g., marketing emails), you can withdraw consent at any time without affecting prior processing.

7. Right to Lodge a Complaint

If you believe we have not complied with data protection laws, you have the right to file a complaint with your local data protection authority.

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality (login, checkout, security)
• Performance Cookies: Analytics to understand how users interact with our site (Google Analytics)
• Functional Cookies: Remember your preferences (language, currency, region)
• Marketing Cookies: Track visits across websites for targeted advertising (you can opt out)

Managing Cookies

You can control cookies through your browser settings:

• Block all cookies (may affect site functionality)
• Block third-party cookies only
• Delete cookies after each session
• Opt out of Google Analytics: Google Analytics Opt-Out

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy:

Retention Periods

• Account Data: Retained while your account is active + 1 year after last activity
• Order History: Retained for 3 years for refund/refill purposes and tax compliance
• Support Communications: Retained for 2 years for quality assurance and dispute resolution
• Payment Records: Retained for 7 years to comply with financial regulations
• Marketing Consent: Retained until you withdraw consent or 2 years of inactivity
• Analytics Data: Anonymized and retained for 26 months (Google Analytics default)

After retention periods expire, data is securely deleted or anonymized. You can request early deletion by contacting us, subject to legal obligations.

Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children without verifiable parental consent.

If you are under 18, you may browse our website only with the supervision of a parent or legal guardian. To make a purchase, you must be at least 18 years old or have explicit parental permission.

If we discover that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information as quickly as possible. Parents or guardians who believe we may have collected data from their child should contact us immediately at [email protected].

International Data Transfers

Trollishly operates as an online service provider accessible globally. Your information may be transferred to and processed in countries where our servers or service providers are located. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Service providers with adequate data protection certifications
• Encryption during transmission and storage
• Regular compliance audits

By using our Service, you acknowledge and consent to the transfer of your data as described in this Privacy Policy.

Third-Party Links

Our website may contain links to external sites (e.g., social media platforms, payment processors, review platforms). These third-party sites have their own privacy policies, and we are not responsible for their practices.

We strongly advise you to review the privacy policy of every site you visit. Clicking on third-party links means you are leaving Trollishly.com and are subject to the privacy practices of those sites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we will:

• Update the "Last Updated" date at the bottom of this page
• Send email notifications to registered users (for material changes)
• Display a prominent notice on our website homepage
• Provide a summary of key changes

Continued use of our Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of our Service and contact us to delete your account.

Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected] (Subject: "Privacy Inquiry")
• WhatsApp: +1 442 226 4045
• Live Chat: Available 24/7 on trollishly.com

We aim to respond to all privacy inquiries within 30 days. For urgent matters (e.g., data breaches, unauthorized access), we will respond within 72 hours.

Related Policies