PRIVACY POLICY Last Updated: February 24, 2026 | Effective Date: February 24, 2026 1. INTRODUCTION This Privacy Policy describes the policies and procedures of Global Staylas LLC (“Company,” “we,” “us,” or “our”) on the collection, use, and disclosure of your information when you use our services. We use your Personal Data to provide and improve our Digital Consulting and Platform Management services. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. This policy adheres to international standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). 2. INTERPRETATION AND DEFINITIONS Account: A unique account created for You to access our Service. Company: Global Staylas LLC, located at 1111B S Governors Ave, STE 48471, Dover, DE 19904, United States. Personal Data: Any information that relates to an identified or identifiable individual. Service: Refers to the website (https://globalstaylas.com) and all digital consulting and platform management services provided by the Company. Usage Data: Data collected automatically, generated by the use of the Service (e.g., page visit duration). 3. TYPES OF DATA COLLECTED A. Personal Data While using Our Service, We may ask You to provide Us with certain personally identifiable information, including but not limited to: Identity Data: First name, last name, and professional title. Contact Data: Email address, mailing address, and verified mobile phone number. Business Criteria: Project requirements, digital service preferences, and operational goals submitted to our Strategic Consulting Team. Financial Data: Partial payment details (last 4 digits) processed securely via Stripe. We do not store full credit card numbers. B. Usage Data Device Information: Hardware model, operating system, and unique device identifiers. Log Data: IP address, browser type, and referral URLs. Mobile Privacy: No mobile information will be shared with third parties for marketing purposes. 4. USE OF YOUR PERSONAL DATA The Company may use Personal Data for the following purposes: To provide and maintain our Service: Including managing your projects and monitoring service usage. To manage Your Account: To give You access to different functionalities available to registered clients. To contact You: For updates regarding consulting services, project milestones, or security alerts via email or SMS. For Business Transfers: To evaluate or conduct a merger or transfer of assets where Personal Data is among the transferred assets. 5. DISCLOSURE OF YOUR PERSONAL DATA We share Your personal information only with trusted Service Providers: Authentication: Twilio and Google Firebase for secure login. Payment Processing: Stripe (PCI-DSS Level 1 compliant). Hosting: Cloudways/Vultr for secure data storage. Legal Requirements: We may disclose data if required by law or in response to valid requests by public authorities (e.g., a court or government agency). 6. DATA RETENTION & INTERNATIONAL TRANSFER Retention: We retain Personal Data only as long as necessary for business and legal compliance (e.g., transaction records for tax purposes). Transfer: Our servers are primarily hosted in the United States. By using our service, you consent to the transfer of information to the U.S. and other regions where our cloud providers operate. 7. DATA SECURITY PROTOCOLS Encryption: All sensitive data is encrypted using industry-standard TLS/SSL protocols. Manual Security: We use secure cloud infrastructure with firewalls to protect our internal databases. Disclaimer: While we strive for absolute security, no method of transmission over the internet is 100% secure. 8. PAYMENTS AND REFUND POLICY Payment Processors: We use Stripe. We do not store your full card details. No Automatic Renewal: Payments are handled on a manual basis per project or subscription cycle. STRICT NO REFUND POLICY: As we provide digital consulting and professional services (Digital Goods) that are consumed upon delivery, ALL PURCHASES ARE FINAL. We do not offer refunds once the service or access has been granted. 9. YOUR PRIVACY RIGHTS (GDPR & CCPA) Access & Deletion: You have the right to request a copy of your data or request account deletion via support@globalstaylas.com. Do Not Sell: We do not sell your personal information to data brokers. Children’s Privacy: Our Service does not address anyone under the age of 18. 10. CONTACT US If you have any questions about this Privacy Policy, please contact us: By Email: admin@globalstaylas.com By Mail: Global Staylas LLC, 1111B S Governors Ave, STE 48471, Dover, DE 19904, United States By Website: https://globalstaylas.com/contact