Privacy Policy

This Privacy Policy explains how personal data is collected, used, shared, stored, and protected when services are provided to customers in the area. This policy applies to all customers in the area and is intended to meet the requirements of the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using the services, customers acknowledge that their personal data may be processed in accordance with this policy.

1. Data We Collect

We collect only the personal data that is necessary for lawful, specific, and legitimate purposes. The categories of data collected may include:

Identity data: name, title, and similar identifiers.
Contact data: address, email address, telephone number, and related communication details.
Transaction data: records of purchases, payments, invoices, and service history.
Account data: account credentials, preferences, and settings.
Technical data: IP address, device identifiers, browser type, operating system, and usage logs.
Communication data: correspondence, feedback, complaints, and support requests.

We do not intentionally collect special categories of personal data unless such processing is required or expressly permitted by law and appropriate safeguards are in place. If any sensitive information is provided voluntarily, it will be processed only where a valid GDPR condition applies.

2. How We Use Personal Data

Personal data is used for the following purposes:

to provide, operate, and maintain services;
to manage customer accounts and fulfill requests;
to process payments, billing, and related administration;
to communicate service updates, notices, and support information;
to improve service quality, security, and user experience;
to detect, prevent, and investigate fraud, misuse, or unlawful activity;
to comply with legal, regulatory, tax, and accounting obligations.

We process data in a way that is fair, transparent, and limited to what is necessary for the stated purposes.

3. Lawful Basis for Processing

Under GDPR, personal data must be processed on a lawful basis. Depending on the context, we rely on one or more of the following bases:

3.1 Contract

We process personal data where it is necessary to enter into or perform a contract with a customer, including delivering services, managing accounts, and handling payments.

3.2 Legal Obligation

We may process personal data to comply with legal requirements, including tax, accounting, anti-fraud, and record-keeping obligations.

3.3 Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by the rights and freedoms of the individual. This may include service improvement, network security, internal administration, and business operations.

3.4 Consent

Where required by law, we rely on consent for specific processing activities. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.

3.5 Vital Interests and Public Interest

In rare cases, we may process personal data to protect vital interests or where processing is necessary for tasks carried out in the public interest or under official authority, as permitted by applicable law.

4. Data Sharing and Processors

We may share personal data with third parties only where necessary, lawful, and proportionate. These third parties may act as processors or independent controllers depending on the relationship and purpose of the processing.

Processors are engaged to perform services on our behalf and only process personal data according to our instructions and contractual safeguards. Such processors may include:

IT and cloud hosting providers;
payment service providers;
customer support and communication platforms;
analytics and security service providers;
professional advisers, including legal, accounting, and audit providers.

We require processors to implement appropriate technical and organizational measures to protect personal data. They are not permitted to use personal data for their own independent purposes unless they are acting as separate controllers and have informed customers accordingly.

We may also disclose personal data where required by law, court order, regulatory request, or to protect the rights, property, or safety of customers, staff, or others.

5. International Transfers

If personal data is transferred outside the European Economic Area or the United Kingdom, appropriate safeguards will be used to ensure a level of protection essentially equivalent to that required under GDPR. These safeguards may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

6. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.

Account and transaction records may be retained for the duration of the relationship and a further period required by law.
Communication records may be kept for as long as needed to manage queries, disputes, or service matters.
Technical logs may be retained for a limited period for security, analytics, and operational purposes.

When personal data is no longer needed, it will be securely deleted, anonymized, or otherwise disposed of in a lawful and safe manner. Retention is reviewed periodically to ensure data is not kept longer than necessary.

7. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption, secure storage, staff training, and monitoring systems. While no system can be guaranteed completely secure, we take reasonable steps to reduce risk and maintain confidentiality and integrity.

8. Data Minimization and Accuracy

We aim to collect only the personal data that is relevant and necessary. Customers are encouraged to provide accurate and up-to-date information. Where appropriate, we may take steps to verify or correct data to ensure it remains reliable for the purposes of processing.

9. User Rights Under GDPR

Customers in the area have rights in relation to their personal data. Subject to applicable law and verification of identity, these rights may include:

Right of access: to obtain confirmation of whether personal data is being processed and receive a copy of it.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restriction: to request limited processing in specific situations.
Right to data portability: to receive personal data in a structured, commonly used, machine-readable format where applicable.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: to withdraw consent where processing is based on consent.
Right not to be subject to automated decision-making: to avoid decisions based solely on automated processing where such decisions have legal or similarly significant effects, except where permitted by law.

Where a request is made, we may need to retain certain information to comply with legal obligations or to establish, exercise, or defend legal claims.

10. Children’s Data

Our services are not intended for children unless stated otherwise for a specific service. We do not knowingly collect personal data from children without appropriate authorization or consent where required by law. If we become aware that data has been collected in violation of this policy, we will take steps to delete it or seek the necessary legal basis.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service developments. When updates are made, the revised policy will apply from the effective date stated in the updated version. Customers are encouraged to review this policy periodically to remain informed about how personal data is processed.

12. Complaints and Supervisory Authorities

If a customer believes their data protection rights have been violated, they may have the right to lodge a complaint with the relevant data protection supervisory authority in their jurisdiction. We encourage customers to raise concerns promptly so that we can address them in a timely and appropriate manner.

Summary of our commitment: we process personal data lawfully, fairly, and transparently; we collect only what is needed; we retain data only as long as necessary; we use processors under contract and safeguards; and we respect the rights of all customers in the area.