Privacy Policy -

This Privacy Policy explains how personal data is collected, used, retained and disclosed when you engage with our services. It applies to all customers in the area governed by the General Data Protection Regulation (GDPR) and to any natural persons whose data we process in connection with those services. By using our services, you acknowledge that you have read and understood this policy.

1. Data We Collect

We collect and process personal data necessary to provide, improve and secure our services. Types of data we collect include:

Identity and account data: name, username, account identifiers, profile information.
Contact data: email address, postal address, telephone numbers when provided.
Transactional data: records of services purchased, billing and invoicing information, payment confirmations.
Technical and usage data: IP address, device identifiers, browser type, operating system, log files, performance and usage analytics.
Communications: correspondence, support requests, feedback and other messages you send to us.
Marketing and preference data: communication preferences and marketing opt-ins or opt-outs.
Sensitive data: we do not routinely collect special categories of personal data (such as health, racial or ethnic origin, political opinions). If you voluntarily provide such data, we will treat it with heightened protection and only process it where we have a lawful basis and explicit consent, or where otherwise permitted by law.

2. Lawful Basis for Processing

We rely on one or more lawful bases under the GDPR to process your personal data. These include:

Contractual necessity: processing required to perform a contract with you or to take steps at your request prior to entering into a contract (for example, to provide services, manage your account and process payments).
Legal obligation: processing necessary to comply with legal obligations (for example, tax, accounting, anti-money laundering and regulatory requirements).
Consent: where required, we will ask for your consent to process personal data for specific purposes such as direct marketing and cookies that are not strictly necessary. You may withdraw consent at any time where relevant.
Legitimate interests: processing necessary for our legitimate interests, provided such interests are not overridden by your rights and freedoms (for example, to maintain and improve our services, detect fraud, ensure security and carry out business analytics).

3. How We Use Your Data

We use collected data for purposes including but not limited to:

Provision, operation and personalization of services.
Billing, payments and managing contractual obligations.
Customer support and communications related to service delivery.
Improving our products and performing aggregated analytics.
Security, fraud prevention and protecting the rights and property of users and the organization.
Marketing communications, where you have given consent or where permitted by applicable law.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Typical retention periods include:

Account and profile information: retained for the duration of the account and for a reasonable period thereafter to allow for reactivation or to meet legal obligations.
Transactional and financial records: retained as required by applicable financial, tax and regulatory laws, commonly up to seven years.
Support and correspondence: retained for the period needed to resolve issues and to maintain service quality, normally up to 3 years unless required longer for legal reasons.
Log and security data: retained for periods necessary to ensure operational security and investigate incidents, typically up to 24 months unless longer retention is needed for investigations.
Aggregated or anonymized data: retained indefinitely for research and statistical purposes when it cannot be used to identify an individual.

5. Processors and International Transfers

We engage third-party processors to perform services on our behalf, such as payment processing, hosting, analytics, customer support, email delivery and marketing automation. We require all processors to implement appropriate technical and organizational measures to protect personal data and to act only on our instructions.

Where data is transferred outside the European Economic Area or to jurisdictions without an adequacy decision, we implement appropriate safeguards such as standard contractual clauses, binding corporate rules, or rely on permitted transfer mechanisms under applicable law to ensure an adequate level of protection. We do not transfer personal data to countries that lack appropriate protections without implementing these safeguards.

Categories of processors

Cloud and hosting providers.
Payment and billing processors.
Analytics and performance monitoring providers.
Customer relationship management and support platforms.
Marketing and email distribution services.

6. Security

We implement administrative, technical and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration and destruction. These measures include access controls, encryption where appropriate, regular security assessments and staff training. No security measure is perfect, and we cannot guarantee absolute security, but we continually review and improve our protections.

7. User Rights

Under the GDPR you have rights in relation to your personal data. These rights include:

Right of access: request confirmation of the data we hold about you and obtain a copy.
Right to rectification: ask us to correct inaccurate or incomplete data.
Right to erasure (right to be forgotten): request deletion of data where there is no lawful basis for retention.
Right to restrict processing: ask us to limit processing where you contest accuracy or object to processing.
Right to data portability: receive a structured, commonly used and machine readable copy of your data and request transmission to another controller where technically feasible.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, withdraw consent at any time without affecting processing carried out prior to withdrawal.
Right to lodge a complaint: lodge a complaint with a supervisory authority if you believe your rights have been infringed.

To exercise these rights, you may use the account tools, preferences and mechanisms we provide. We will respond to valid requests without undue delay and in accordance with legal timescales. In some cases we may need to verify your identity before fulfilling a request, and certain requests may be subject to legal exceptions or limitations.

8. Automated Decision-Making and Profiling

We may use automated processing and profiling to improve services, deliver personalized content and detect fraud. If any automated decision produces legal or similarly significant effects, we will notify you, explain the logic involved and provide meaningful information about the underlying rationale, together with the right to obtain human intervention and to contest the decision, where applicable.

9. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under this age without parental consent. If we become aware that we have collected data from a child without authorization, we will take steps to delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When material changes are made, we will provide clear notice through our services or other appropriate means. Continued use of our services after changes indicates acceptance of the updated policy.

Scope and Applicability

This policy applies to all customers in the area governed by the GDPR and to all personal data processed in connection with those customers. It governs our handling of personal data whether processed electronically or in paper form and applies to all personnel and processors acting on our behalf.

Effective compliance with applicable data protection laws is an ongoing commitment. We encourage you to review this policy periodically. If you have questions about how your data is handled, please use the privacy controls and mechanisms available in your account or within the relevant service interfaces.