Privacy Policy
This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in connection with our services. It applies to all customers in the area and is intended to provide clear information about our data practices in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Scope of This Policy
This Policy applies to personal data processed in relation to our customers, prospective customers, and other individuals whose information we may process in the course of providing our services. It applies to all customers in the area where our services are offered and used. By interacting with our services, you acknowledge that your personal data may be processed as described in this Policy.
2. Information We Collect
We collect and process personal data that is necessary for delivering our services, managing our relationship with you, maintaining security, and meeting legal obligations. The categories of data we may collect include:
- Identity data such as your name or similar identifiers.
- Contact data such as address, email address, or telephone number, where provided.
- Transaction data such as records of services requested, purchased, or delivered.
- Technical data such as device type, browser type, and usage information.
- Communication data such as correspondence or feedback you send to us.
- Preference data such as choices relating to service settings or communication preferences.
We generally do not seek to collect special category data unless it is strictly necessary and permitted by law. If such data is ever processed, we will do so only where a valid legal basis exists and additional safeguards are in place.
3. How We Use Personal Data
We use personal data only for defined and legitimate purposes. These purposes may include:
- providing and managing our services;
- processing requests and transactions;
- communicating with you about service-related matters;
- improving our services, systems, and customer experience;
- maintaining security, preventing misuse, and detecting fraud;
- meeting legal, regulatory, accounting, and tax obligations;
- handling complaints, disputes, and enforcement matters.
We will not use personal data in a way that is incompatible with the purposes described above unless we are required or permitted to do so by law.
4. Lawful Basis for Processing
Under the GDPR, we must have a lawful basis for processing personal data. Depending on the context, we may rely on one or more of the following bases:
Performance of a Contract
We process personal data where it is necessary to enter into or perform a contract with you, including delivering services, handling requests, and managing account or service-related matters.
Legal Obligation
We may process personal data where we are required to do so to comply with legal or regulatory obligations, such as accounting, tax, fraud prevention, or other lawful requests.
Legitimate Interests
We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include service improvement, security, internal administration, and prevention of misuse. Where we rely on legitimate interests, we assess the impact on your rights and apply appropriate safeguards.
Consent
In limited cases, we may rely on your consent. Where consent is used as the lawful basis, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Vital Interests and Public Interest
In rare situations, we may process personal data to protect vital interests or where processing is necessary for a task carried out in the public interest or in the exercise of official authority, if applicable.
5. Sharing and Processors
We may share personal data with trusted third parties that act as processors on our behalf. These processors only process personal data according to our instructions and are required to keep it secure and confidential. They may include:
- IT and hosting providers;
- customer support service providers;
- payment or transaction processing providers;
- professional advisers, including legal, accounting, or auditing professionals;
- security and fraud prevention providers;
- other service providers necessary to operate and support our business.
We may also share personal data with independent controllers where required by law, where necessary to protect rights and safety, or where a transfer is needed in connection with a corporate transaction or legal process. Where personal data is transferred outside the European Economic Area, we will ensure appropriate safeguards are in place as required by GDPR.
6. Retention of Personal Data
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods are determined based on:
- the nature and sensitivity of the data;
- the purposes of the processing;
- the risk of harm from unauthorized use or disclosure;
- applicable legal obligations and limitation periods;
- whether we need the data to establish, exercise, or defend legal claims.
When personal data is no longer required, we will take appropriate steps to delete, anonymize, or securely archive it in line with our retention practices and legal obligations.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, encryption where appropriate, security monitoring, and internal policies designed to reduce risk. While we work to protect personal data, no system can be guaranteed to be completely secure.
8. Your Rights Under GDPR
Depending on your location and the circumstances of processing, you may have the following rights in relation to your personal data:
- Right of access – to obtain confirmation of whether we process your data and receive a copy of it.
- Right to rectification – to request correction of inaccurate or incomplete data.
- Right to erasure – to request deletion of your data in certain circumstances.
- Right to restriction – to request limitation of processing in certain situations.
- Right to data portability – to receive certain data in a structured, commonly used format and, where feasible, have it transmitted to another controller.
- Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
- Right to withdraw consent – where processing is based on consent.
- Right to lodge a complaint – with your local data protection authority if you believe your rights have been infringed.
We may need to verify your identity before responding to a rights request. We will respond within the time limits required by law and may decline or limit a request where an exemption applies.
9. Children’s Data
Our services are not intended for children unless specifically stated otherwise. We do not knowingly collect personal data from children where prohibited by law. If we become aware that data has been collected inappropriately, we will take steps to delete it or obtain the necessary authorization where permitted.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any updated version will apply from the date it becomes effective. We encourage individuals to review this Policy periodically to stay informed about how personal data is processed.
This Privacy Policy is intended to provide a transparent overview of our personal data processing activities and the rights available to individuals under GDPR.
By using our services, you acknowledge that your personal data may be processed in accordance with this Policy and applicable law.
