Privacy Policy

Google User Data and the 3C Control Tower Email Monitor

When an authorized merchant administrator connects a Google account to the 3C Control Tower Email Monitor, the service requests read-only Gmail access through the gmail.readonly scope. We access the connected Gmail address and matching messages needed to identify settlement, payout, pay-in, compliance, dispute, KYC, failure, and action-required events. This may include message identifiers, thread identifiers, sender, subject, snippet, received time, and relevant message text. We do not retrieve attachments.

Google user data is used only to provide merchant-authorized payment operations monitoring: classifying relevant messages, creating merchant-specific alerts and reminders, preventing duplicate processing, supporting reconciliation, and maintaining an operational audit trail. The service cannot send, delete, label, or modify Gmail messages.

We store encrypted authorization credentials and the minimum operational records needed to provide and secure the service. These records may include message metadata, short excerpts, classification results, extracted settlement or action details, timestamps, and acknowledgement history. Google user data is not sold, used for advertising, or used to determine creditworthiness. It is not transferred except to infrastructure and notification providers acting on our behalf, when an authorized user requests support, or when disclosure is required for security or legal compliance.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. See the Google API Services User Data Policy.

A merchant administrator may pause or remove a mailbox connection in the 3C Control Tower portal and may revoke access at any time through the Google Account permissions page. Authorization credentials are retained only while the connection remains active or as needed to complete deletion and security procedures. Operational records are retained according to the applicable merchant agreement and legitimate legal, security, and audit requirements. To request access, correction, or deletion, contact info@bellarivia.com.

1. Introduction

Bellarivia Limited ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bellarivia.com or use our services.

This policy complies with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and other applicable data protection regulations.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form
• Subscribe to our newsletter
• Request information about our services
• Engage with us via email or phone

This information may include your name, email address, phone number, company name, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To send you information about our services that you have requested
• To improve our website and services
• To analyze website usage and trends
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

When personal data is no longer required, we will securely delete or anonymize it in accordance with our data retention policies.

5. Disclosure of Your Information

We may share your information in the following circumstances:

• Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, and customer service.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• Affiliate Companies: We may share information with our affiliated companies, including Bellarivia Global FZCO, for business purposes.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Under the Hong Kong Personal Data (Privacy) Ordinance, you have the following rights:

• Right of Access: You may request access to your personal data held by us.
• Right of Correction: You may request correction of any inaccurate personal data.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided below.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our website. You can control cookie settings through your browser preferences.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: