Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, disclosed, and protected in connection with our services. It is intended to meet the requirements of applicable data protection laws, including the General Data Protection Regulation (GDPR). It applies to all customers in the relevant area and to all individuals whose personal data is processed in connection with our services.

1. Scope of This Policy

This Privacy Policy applies to all customers in area and to any person whose personal data is processed when using our services, interacting with our business, or otherwise engaging with us. It covers data collected directly from individuals, data collected automatically through systems and devices, and data received from third parties where permitted by law.

We are committed to processing personal data in a fair, lawful, and transparent manner. Privacy, security, and accountability are central to our data protection practices.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data such as name, title, and similar identifiers.
Contact data such as address, email address, telephone number, or other communication details.
Transaction data relating to purchases, service requests, billing, payments, or account activity.
Technical data such as device information, browser type, operating system, time zone setting, and similar system data.
Usage data including information about how services are accessed and used.
Communication data containing records of correspondence and support interactions.
Preference data relating to marketing choices, communication settings, and service preferences.

We do not intentionally collect special category data unless it is necessary for a lawful purpose and permitted by data protection law. Where such data is collected, it is handled with additional safeguards and only where appropriate.

3. How We Collect Personal Data

Personal data may be collected in several ways, including:

When you provide information directly to us.
When you use our services, systems, or related features.
When you communicate with us by email, forms, or other channels.
When we receive information from service providers, business partners, or publicly available sources, where lawful.
Through automated technologies such as logs, cookies, analytics tools, and device identifiers, where permitted.

Where we use automated technologies, the information collected is limited to what is necessary for service operation, performance monitoring, security, and improvement. Any use of such technologies is managed in line with applicable consent and legitimate interest requirements.

4. Lawful Basis for Processing

We only process personal data where we have a valid lawful basis under GDPR. Depending on the purpose, we may rely on one or more of the following bases:

Contract: processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legal obligation: processing is necessary to comply with laws, regulations, tax requirements, accounting rules, or lawful requests from public authorities.
Legitimate interests: processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Consent: processing is based on your consent where required by law, including certain forms of marketing or optional data use.
Vital interests: in limited cases, processing may be necessary to protect someone’s life or physical safety.
Public interest: where processing is necessary for tasks carried out in the public interest or under official authority, if applicable.

When we rely on legitimate interests, we assess the necessity and balance the impact on your privacy. When we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Purposes of Processing

We may process personal data for the following purposes:

To provide, manage, and improve our services.
To communicate with customers and respond to enquiries or requests.
To administer accounts, orders, payments, and related records.
To personalize user experience and service delivery.
To maintain security, prevent fraud, and detect misuse.
To meet legal, accounting, regulatory, and compliance obligations.
To analyze service performance and improve operations.
To send marketing communications where permitted by law and where appropriate consent or lawful basis exists.

We process data only for specific, explicit, and legitimate purposes and do not use it in ways that are incompatible with those purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, tax, contractual, and regulatory requirements. Retention periods depend on the nature of the data, the purpose of processing, and any legal obligation to keep the data.

In determining retention periods, we consider:

Whether the data is still required to provide services or support.
Whether retention is necessary to comply with legal obligations.
Whether there is a legitimate business reason to retain the data.
Whether the data is required to resolve disputes or enforce agreements.

When personal data is no longer needed, it is securely deleted, anonymized, or otherwise rendered unreadable where appropriate. We do not keep personal data indefinitely without a lawful reason.

7. Processors and Data Sharing

We may share personal data with third-party processors and service providers that support our operations. These may include providers of hosting, IT support, data storage, analytics, payment processing, communications, compliance services, and professional advisory services.

All processors act only on our documented instructions and are required to protect personal data through appropriate technical and organizational measures. We ensure that data processing agreements are in place where required by GDPR. These agreements require processors to:

Process personal data only for authorized purposes.
Maintain confidentiality and security.
Assist with data subject rights and compliance obligations.
Notify us of relevant data incidents where required.

We may also disclose personal data where necessary to comply with law, enforce legal rights, protect safety, or respond to legitimate public authority requests. Any disclosure is limited to what is necessary and proportionate.

8. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure an appropriate legal transfer mechanism is in place. This may include adequacy decisions, standard contractual clauses, or other lawful safeguards permitted under GDPR. We take steps to ensure that transferred data receives a level of protection consistent with applicable standards.

9. Data Security

We use suitable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction. These measures may include access controls, encryption, secure storage, staff confidentiality obligations, monitoring, and incident response procedures.

Although we work to protect personal data, no system can be guaranteed to be completely secure. We therefore maintain risk-based security practices and review our safeguards regularly. Security controls are updated as needed to address evolving risks.

10. Your Rights Under GDPR

Subject to legal limitations, you have the following rights regarding your personal data:

Right of access: to obtain confirmation of whether your data is processed and receive a copy of it.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data in certain circumstances.
Right to restriction: to request limited processing in certain situations.
Right to data portability: to receive data you provided in a structured, commonly used, machine-readable format and, where feasible, transmit it to another controller.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.
Right to lodge a complaint: to complain to a supervisory authority if you believe your rights have been infringed.

To exercise your rights, you may make a request using the appropriate service channel. We may need to verify your identity before responding. We will respond within the time limits required by law, usually within one month, subject to lawful extensions where necessary.

11. Automated Decision-Making

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless such processing is lawful and appropriate safeguards are in place. If this position changes, the relevant information and rights will be provided as required by law.

12. Children’s Data

Our services are not intended for children unless otherwise stated. We do not knowingly collect personal data from children without appropriate authorization where required. If we become aware that personal data has been collected from a child in breach of applicable requirements, we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service developments. Any updated version will apply from the effective date stated in the revised policy. We encourage customers to review this policy periodically to remain informed about how we process personal data.

14. Core Principles We Follow

Our approach to privacy is based on the following principles:

Lawfulness, fairness, and transparency.
Purpose limitation and data minimization.
Accuracy and up-to-date information.
Storage limitation and secure disposal.
Integrity, confidentiality, and accountability.

We aim to process only the information that is necessary, keep it only as long as needed, and protect it with appropriate safeguards. This policy applies to all customers in area and governs all relevant processing activities.

Final Note

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy, subject always to your rights under applicable law. We remain committed to lawful, transparent, and responsible data handling in accordance with GDPR.