LEGAL INSTRUMENT v1.0.0
Global Privacy & Data Governance Policy
Effective: February 01, 2026•Jurisdiction: Kuwexa Private Limited
Notice to Patrons & Merchants:This document contains binding contractual provisions for Kuwexa Global Commerce. Specific terms are subject to mandatory consumer protections and commercial dispute laws in your local jurisdiction.
1. Scope & Regulatory Compliance
This Privacy Notice applies to all patrons and merchants using Kuwexa services globally in compliance with GDPR (EU), CCPA/CPRA (California), and PDPA (Singapore).
2. Data Collection & Tokenization
We process personal identifiable data (names, verified physical addresses, contact records) exclusively to fulfill cross-border orders. Payment card numbers are processed via Level 1 PCI-DSS tokenization; Kuwexa servers never ingest or store unencrypted PANs or CVVs.
3. Data Minimization & Security Controls
All stored records are encrypted at rest using AES-256 and transmitted via TLS 1.3 encryption. You retain the unconditional right to request erasure or export of your personal data.