REGION-SPECIFIC ADDENDA

A—European Union (GDPR) addendum (for EU/EEA visitors)

When to show: to users with EU IPs or accounts flagged as EU. The GDPR requires transparent notices that include legal bases and data subject rights. See official text. GDPR+1

Addendum wording (append to the Master Privacy Policy)

Legal basis & lawful grounds: For EU residents we rely primarily on: performance of a contract for service delivery (Art. 6(1)(b) GDPR), our legitimate interests (Art. 6(1)(f) GDPR) for security and anti-abuse, and consent where necessary (Art. 6(1)(a)) for cookies and marketing. You may withdraw consent at any time. Eur-Lex

Data subject rights (GDPR): You have the right to access, rectify, erase (“right to be forgotten”), restrict processing, object to processing, data portability, and to lodge a complaint with a supervisory authority. To exercise these rights, contact admin@tmailinbox.com. You may also contact your supervisory authority. ICO

International transfers: For transfers outside the EEA, we use appropriate safeguards (e.g., Standard Contractual Clauses or adequacy decisions). See our DPA for SCC text. European Data Protection Board

B—United Kingdom (UK GDPR & ICO guidance)

Key additions: follow ICO guidance on privacy notice content and cookies; include the ICO contact if you are UK-based or regularly process data of UK residents. ICO+1

For UK residents, the lawful bases are as set out in the UK GDPR. Contact our UK privacy contact: admin@tmailinbox.com. You can complain to the Information Commissioner’s Office (ICO)—http://ico.org.uk—if unsatisfied. ICO

C—California (CCPA/CPRA) addendum—(for California residents)

When required: If your service targets Californians or meets thresholds under CCPA/CPRA, you must provide a California privacy policy with certain disclosures (categories collected, categories sold/shared, consumer rights, “Do Not Sell or Share My Personal Information” link). See CA Attorney General guidance. California DOJ+1

Wording (required elements):

• “Shine the Light” / Notice at collection: We disclose categories of personal information we collect and the purposes.
• Categories of personal information collected in the last 12 months: [list categories used above]
• Do Not Sell or Share: We do not sell personal information. If you wish to opt out of sale/sharing, click [link].
• Consumer rights: Right to know, right to delete, right to opt out of sale/sharing, and right to non-discrimination for exercising rights. To exercise rights: email admin@tmailinbox.com or call [phone if available]. (Business must verify request.) California Privacy Protection Agency

D—Canada (PIPEDA/OPC) addendum

Key points: meaningful consent, openness about purposes, identification of third parties, retention, and breach reporting to the OPC where required. Provide contact details of a Canadian agent if offering services there. Office of the Privacy Commissioner+ 1

We process personal data in accordance with the principles of PIPEDA. You may withdraw consent, access your personal data, or ask for corrections by contacting admin@tmailinbox.com. For formal complaints, you may contact the Office of the Privacy Commissioner of Canada. Office of the Privacy Commissioner

E—Australia (Privacy Act/APPs) addendum

Key points: APP-based notice/assist people in accessing their information; the privacy policy must be accessible and available in the form requested. Provide OAIC contact guidance. OAIC+1

Wording: We comply with the Australian Privacy Principles. For Australian users, contact our privacy team at admin@tmailinbox.com for access and correction requests; you may also contact the OAIC.