Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in connection with our services. It applies to all customers in area, regardless of whether services are accessed online, in person, or through any other available channel. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR).

1. Scope and Purpose

This policy describes the types of personal data we may collect, the purposes for which we process it, the legal bases we rely on, how long we retain it, the categories of processors and service providers that may handle it on our behalf, and the rights available to individuals under applicable data protection law. We only process personal data to the extent necessary for legitimate business and operational purposes, and we take steps to ensure that such processing is limited, secure, and proportionate.

2. Data We Collect

We may collect and process personal data that you provide directly, that is generated through use of our services, or that is received from third parties where legally permitted. The categories of data may include:

Identity data such as name, title, or other identifying information.
Contact data such as postal address, email address, or telephone number.
Account data such as login details, account preferences, or profile information.
Transaction data such as payment-related records, service history, and records of purchases or requests.
Technical data such as device identifiers, browser type, operating system, and usage logs.
Communication data such as correspondence, feedback, complaints, and support requests.
Preference data such as marketing choices, service preferences, and settings.

Where necessary and legally permitted, we may also process limited sensitive data. If this occurs, we will apply appropriate safeguards and only process such data where a valid legal basis exists.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide and administer our services.
To manage accounts, records, and transactions.
To communicate with customers about service matters, updates, and support.
To process payments, invoices, or related administrative functions.
To improve performance, usability, security, and service quality.
To detect, investigate, and prevent fraud, misuse, or security incidents.
To comply with legal, regulatory, tax, and accounting obligations.
To send marketing communications where permitted and where consent or another lawful basis applies.

We do not use personal data for purposes that are incompatible with those described in this policy unless we have informed you and a lawful basis exists for the new processing purpose.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis before processing personal data. Depending on the nature of the processing, we may rely on one or more of the following bases:

Performance of a contract - where processing is necessary to provide our services, manage customer relationships, or fulfill contractual obligations.
Legal obligation - where processing is necessary to meet legal or regulatory requirements.
Legitimate interests - where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples may include service improvement, fraud prevention, and security monitoring.
Consent - where you have given clear permission for a specific purpose, such as receiving optional marketing communications, and where consent is required by law.
Vital interests - in rare cases where processing is necessary to protect someone’s life or physical safety.

If we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing of Personal Data and Processors

We may share personal data with trusted third parties who assist in providing services or operating our business. These parties act either as processors or, in limited cases, as independent controllers. When acting as processors, they process personal data only on our instructions and are bound by appropriate contractual and security obligations.

Categories of processors and service providers may include:

IT hosting and infrastructure providers.
Cloud storage and backup providers.
Payment processing and financial administration providers.
Customer support and communication platforms.
Analytics, monitoring, and service optimization providers.
Professional advisers such as auditors, legal advisers, and accountants.

We may also disclose personal data where required to comply with legal obligations, enforce agreements, protect rights, or respond to valid requests from public authorities. Any transfer of personal data will be limited to what is necessary and supported by suitable safeguards.

6. International Transfers

If personal data is transferred outside the European Economic Area or outside the jurisdiction where you reside, we will ensure that appropriate transfer safeguards are in place. These safeguards may include adequacy decisions, standard contractual clauses, or equivalent legal mechanisms recognized under applicable law. We take reasonable steps to ensure that transferred data remains protected to a standard consistent with GDPR requirements.

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, or contractual requirements. Retention periods vary depending on the type of data, the reason for processing, and any legal obligations that apply.

In determining retention periods, we consider factors such as:

The nature and sensitivity of the personal data.
The potential risk of harm from unauthorized use or disclosure.
The purposes of processing and whether those purposes can be achieved by other means.
Applicable legal or regulatory retention obligations.

Once personal data is no longer required, we will securely delete, anonymize, or archive it in accordance with our retention procedures.

8. Data Security

We use appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, encryption where appropriate, secure storage, staff training, and regular review of security practices. Although no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks associated with the processing.

9. Your Rights Under GDPR

Individuals whose personal data we process have a number of rights under GDPR, subject to applicable legal limits and exceptions. These rights include:

Right of access - to obtain confirmation of whether we process your personal data and, if so, to receive a copy of it.
Right to rectification - to request correction of inaccurate or incomplete personal data.
Right to erasure - to request deletion of personal data in certain circumstances.
Right to restriction - to request that processing be limited in certain situations.
Right to data portability - to receive certain data in a structured, commonly used, machine-readable format and to request transmission to another controller where feasible.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent.
Right not to be subject to automated decision-making - including profiling, where such decisions produce legal or similarly significant effects, except where permitted by law.

Requests will be handled in accordance with applicable legal requirements. We may ask for information to verify identity before fulfilling a request. We will not charge a fee unless a request is manifestly unfounded, excessive, or repetitive, and then only where permitted by law.

10. Children’s Data

Our services are not intended for use by children unless specifically stated otherwise. We do not knowingly collect personal data from children without appropriate authority or consent where required. If we become aware that personal data has been collected in breach of this policy or applicable law, we will take reasonable steps to delete it or obtain proper authorization where permitted.

11. Automated Decisions and Profiling

Where we use automated tools to analyze usage patterns, improve services, or support internal decision-making, we do so only in ways that are lawful and proportionate. If any automated decision-making has a legal or similarly significant effect on an individual, we will ensure appropriate safeguards are in place, including the ability to request human review where required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or business operations. When changes are made, the updated version will apply from the date it takes effect. We encourage individuals to review this policy periodically to remain informed about how personal data is handled.

Summary of Key Commitments

We process personal data lawfully, fairly, and transparently.
We collect only data needed for clear, specific purposes.
We rely on recognized GDPR lawful bases for processing.
We work with processors under appropriate contractual safeguards.
We retain data only for as long as necessary.
We respect and facilitate GDPR rights for all eligible individuals.

This Privacy Policy applies to all customers in area. By using our services, you acknowledge that your personal data will be processed in accordance with this policy and applicable data protection law.