4. Legal Basis for ProcessingWe process personal data only where we have a lawful basis under applicable law, including Article 6 GDPR:
Consent – when you submit a form or opt into communications
Contractual necessity – when processing is required to provide requested services
Legal obligation – when required to comply with regulatory or legal requirements
Legitimate interest – including improving services, fraud prevention, business operations, and marketing performance
Where processing is based on consent, you may withdraw consent at any time.