Privacy Policy
This Privacy Policy informs users about the type, scope, and purpose of the processing of personal data within the Cardynex platform and website, in compliance with Iranian laws and regulations.
Policy Sections
General Information
The protection of personal data is of the highest priority for Cardynex.
This Privacy Policy informs users about the type, scope, and purpose of the processing of personal data within the Cardynex platform and website, in compliance with Iranian data protection regulations including the E-Commerce Law and Cyber Crime Law.
Cardynex is a service of نوآوران تدبیرپرداز پارسه
Data Controller
Contact Information
نوآوران تدبیرپرداز پارسه
ایران، شیراز، صفایی شمالی،کوچه 5، پ150، واحد2
info@cardynex.ir
Types of Data Collected
In the context of using Cardynex, the following personal data may be processed in particular:
Personal Information
Technical Data
Content Data
Security and Fraud Prevention Data
To protect the platform and its users from abuse, we process the following additional technical data:
| Data Type | Purpose | Retention Period |
|---|---|---|
| IP Address | Security monitoring, fraud detection | 90 days (then anonymized) |
| Device Fingerprint | Prevention of multi-account abuse | 12 months |
| Hashed Email/Phone | Prevention of trial/refund abuse | 24 months |
| Hashed Card Identifier | Payment fraud prevention | 24 months |
Purposes of Processing
Processing is carried out particularly for:
Payment Providers
Iranian Payment Gateways
Payment processing through authorized Iranian payment service providers (PSPs) and the Shetab banking network.
Bank Transfers
Personal data may be transmitted to Iranian banking institutions for payment verification and processing.
User Content
Users can publish and upload content, reviews, comments, images, videos, or files in both Persian and English languages.
Users are solely responsible for the legality of their content according to Iranian Cyber Crime Law and Islamic Republic regulations.
Cardynex reserves the right to remove illegal content or content violating Iranian laws and regulations.
Hosting and Server Location
The platform is operated on secure servers with data protection measures compliant with Iranian regulations. Data may be hosted on servers within Iran or in jurisdictions with adequate data protection standards recognized by Iranian authorities.
Cookies and Tracking
We use different types of cookies:
| Type | Purpose |
|---|---|
| Essential | Technically necessary cookies for the provision of the platform |
| Analytics/Marketing | Additional analysis or marketing tools are used exclusively based on explicit consent, using privacy-compliant alternatives suitable for Iranian users |
Data Subject Rights
In accordance with Iranian E-Commerce Law and applicable data protection regulations, users have the right to:
Right to Access
Request information about your personal data
Right to Rectification
Correct inaccurate personal data
Right to Deletion
Request deletion of your personal data
Right to Data Portability
Receive your data in a structured, commonly used format
Data Security
کاردینکس® implements enterprise-grade security measures in compliance with Iranian cybersecurity requirements:
Encryption
Technical and organizational security measures including SSL/TLS encryption for data protection
Access Controls
Strict access controls ensuring data confidentiality and integrity
Monitoring
Regular security audits, updates, and continuous monitoring systems
Changes to this Privacy Policy
Users will be notified of significant changes via email or through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.