Privacy & Data Protection Policy
Last Updated: September 2026 | Global Standards for Information Security
1. Commitment to Privacy
Rexto Global respects and safeguards the personal privacy of all visitors, service clients, and verified providers. This privacy policy describes the types of personal data we collect, how it is safeguarded, and how you can exercise your statutory privacy rights under the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Information Collected & Processing Scope
Names, email addresses, contact phone numbers, and location details submitted during account registration or direct quote requests.
Business names, category specializations, government verification badges, and uploaded portfolios for service providers.
Referral linkages, reward point transactions, booking discounts applied, and sponsored listing activation timestamps.
IP addresses, browser signatures, session cookies, and geolocation telemetry used solely to present regional currencies and nearby experts.
3. Lawful Grounds for Processing
Your information is processed under explicit legal foundations:
- To coordinate bookings between clients and assigned local service technicians.
- To maintain wallet balances, compute referral point distribution, and prevent duplicate account creation.
- To deliver automated two-factor authentication tokens (OTP) and booking status notifications.
- We do not sell, rent, or trade your personal data to third-party advertising brokers.
4. Bank-Grade Data Security & Encryption
All platform network traffic is encrypted via Transport Layer Security (TLS 1.3 / 256-bit SSL). Passwords are cryptographically salted and hashed using industry-standard BCRYPT algorithms. Access to administrative databases is strictly restricted by role-based access controls.
5. Your Privacy Rights
Under international data protection regulations, users retain the right to request a full copy of their stored personal data, request corrections of outdated information, or submit a request for permanent account and data deletion ("Right to be Forgotten"). Such requests can be submitted through our contact channels.
6. Cookies & Session Management
Rexto Global employs strictly necessary cookies to keep you authenticated, retain language selections, and prevent CSRF cross-site forgery. You may disable non-essential cookies via browser settings at any time without disrupting core site navigation.