BayoSys legal document

Addendum B - Privacy Compliance

Additional privacy compliance terms, data rights, processing responsibilities, and compliance handling.

Addendum B — Privacy Compliance & Extended Rights
20. Additional Privacy Rights (GDPR-Style)
If you are located in certain jurisdictions (including the European Economic Area, United Kingdom, or similar regions), you may have the following rights:
Right to Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete data.
Right to Erasure
You may request deletion of your personal data, subject to legal and operational requirements.
Right to Restrict Processing
You may request that we limit how your data is used.
Right to Data Portability
You may request your data in a structured, commonly used format.
Right to Object
You may object to certain processing activities, including direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.

21. Legal Bases for Processing (GDPR Context)
Where applicable, BayoSys processes data under the following legal bases:
Performance of a contract (e.g., providing platform services)
Legitimate interests (e.g., improving services, fraud prevention, operations)
Legal obligations (e.g., tax, accounting, compliance requirements)
Consent (e.g., marketing communications where required)

22. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have the following rights:
Right to Know
You may request:
Categories of personal data collected
Sources of data
Purpose of collection
Categories of third parties data is shared with
Right to Delete
You may request deletion of your personal data, subject to legal exceptions.
Right to Correct
You may request correction of inaccurate personal data.
Right to Opt-Out of Sale/Sharing
BayoSys does not sell personal data in the traditional sense.
However, certain data sharing (e.g., analytics or integrations) may be considered “sharing” under California law.
Non-Discrimination
We will not discriminate against you for exercising your rights.
Requests can be submitted to:
support@bayosys.com

23. Cookie & Tracking Categories
We use cookies and similar technologies categorized as follows:
Essential Cookies
Required for:
Platform functionality
Login sessions
Security and authentication
Performance & Analytics Cookies
Used to:
Understand user behavior
Improve platform performance
Monitor system usage
Functional Cookies
Used to:
Remember preferences
Customize user experience
Marketing / Tracking Cookies
May be used to:
Support advertising or outreach
Measure campaign performance
Users can manage cookies via browser settings or applicable consent tools.

24. Data Breach & Security Incident Response
BayoSys maintains procedures to respond to security incidents.
In the event of a data breach:
We will investigate and take appropriate corrective action
We will notify affected parties where required by law
We will work with service providers to mitigate impact
However:
No system can guarantee absolute security
Users acknowledge inherent risks in data transmission and storage

25. Data Retention Clarification
We retain personal data only as long as necessary for:
Providing services
Maintaining operational records
Complying with legal obligations
Resolving disputes
Enforcing agreements
After retention periods expire:
Data may be deleted, anonymized, or archived

26. “Do Not Track” Signals
Some browsers offer “Do Not Track” (DNT) signals.
At this time:
The Platform may not respond to DNT signals
Users should use cookie controls and browser settings for tracking preferences

27. Third-Party Links & External Services
The Platform may contain links to third-party websites or services.
BayoSys is not responsible for:
Privacy practices of external sites
Content or policies of third-party services
Users should review third-party privacy policies independently.

28. Business Transfers
In the event of:
A merger
Acquisition
Asset sale
Business restructuring
User data may be transferred as part of the transaction, subject to applicable protections.

29. Contact for Privacy Requests
All privacy-related requests, including rights requests, should be directed to:
support@bayosys.com
We may require identity verification before fulfilling requests.

30. Effective Date
This Addendum forms part of the BayoSys Privacy Policy.
Effective as of: April 1st 2026