Privacy Policy

FluxUnlock ("we", "us", "our") operates the FluxUnlock website and iPhone unlocking service. This Privacy Policy describes how we collect, use, and protect personal information when you use our website or services. By using our services, you agree to the collection and use of information in accordance with this policy.

We use the information we collect to:

• Process and fulfil your unlock orders
• Send order confirmations, status updates, and delivery notifications
• Respond to your support enquiries
• Process payments and issue refunds
• Detect and prevent fraud, abuse, and violations of our Terms
• Improve our website, services, and user experience
• Comply with applicable legal obligations

We do not use your information for automated profiling, advertising targeting, or sale to data brokers or third-party marketers.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Unlock processing partners: Your IMEI and carrier information is shared with our network of licensed unlock processing partners solely to fulfil your order
• Payment processors: Paystack and cryptocurrency payment networks receive transaction data necessary to process payments
• Infrastructure providers: Hosting, email delivery, and analytics providers who process data on our behalf under strict confidentiality obligations
• Legal requirements: When required by law, court order, or to protect the rights, property, or safety of FluxUnlock, our users, or the public

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained until you request deletion or your account is inactive for more than 24 months
• Order data (including IMEI records) is retained for 5 years for fraud prevention and legal compliance
• Support communications are retained for 2 years
• Log data is retained for up to 12 months

You may request deletion of your account and associated data at any time (see Section 8 for your rights).

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Bcrypt hashing for passwords — we never store passwords in plain text
• Access controls limiting who within our organisation can access customer data

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

We use cookies and similar tracking technologies to maintain your session and remember your preferences. Specifically:

• Essential cookies: Required for authentication and session management. These cannot be disabled without breaking core functionality
• Preference cookies: Store your UI preferences such as dark mode selection
• Analytics cookies: Aggregate, anonymised usage data to help us understand how the site is used

You can control or disable non-essential cookies through your browser settings. Blocking cookies may affect the functionality of our website.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to our legal retention obligations
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us via our Contact page. We will respond within 30 days. We may require you to verify your identity before processing your request.

FluxUnlock serves customers globally. Your information may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place, such as contractual clauses that require recipients to protect your data to the same standard as this policy.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly.

Our website may contain links to third-party websites, including payment processors and social media platforms. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently. The inclusion of a link does not imply our endorsement of the linked site.

We may update this Privacy Policy periodically. We will notify you of any material changes by posting a notice on the Site and, where appropriate, by sending an email to the address associated with your account. The effective date at the top of this page will always reflect when the policy was last updated.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us:

• Via our Contact page
• Via WhatsApp Chat (link in the footer)

We will acknowledge your request within 72 hours and aim to resolve it within 30 days.