Privacy Policy -

Introduction

This Privacy Policy explains how personal data is collected, used, retained and shared in connection with our services. It applies to all customers in the area, including individuals and organisations located within the European Economic Area (EEA) and other jurisdictions where the General Data Protection Regulation (GDPR) applies. This policy applies to all customers in the area.

Scope and Controller

Scope: This policy applies to personal data processed in the provision of our products and services, customer support, marketing, billing and related activities.

Controller: For the purposes of data protection law, the organisation responsible for deciding how and why personal data is processed (the "controller") is the entity providing the services described in this policy.

Data We Collect

We collect personal data that is necessary to provide and improve our services, to comply with legal obligations, and to meet legitimate business interests. Categories of personal data we collect include:

Identity and contact data: name, job title, company name, postal address, email address and telephone numbers.
Account and login data: usernames, passwords, authentication tokens and account identifiers.
Transactional and billing data: payment details, invoices, order history and related billing information.
Communications data: customer service correspondence, support tickets and records of interactions.
Usage and technical data: IP address, device and browser information, cookies, connection timestamps, logs and other diagnostic data.
Marketing and preference data: marketing consents, communication preferences and interaction records.
Sensitive data: we normally do not request or process special categories of personal data (sensitive data). If we do so in a specific context, we will obtain explicit consent or rely on another lawful basis that permits such processing and document the justification.

Lawful Bases for Processing

Under GDPR, we rely on the following lawful bases for processing personal data:

Contractual necessity: processing necessary to perform a contract with you or to take steps at your request before entering into a contract (for example, to provide services, process orders and manage billing).
Legal obligation: processing necessary to comply with a legal obligation to which we are subject (for example, tax, accounting and anti-fraud obligations).
Legitimate interests: processing necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms (for example, fraud prevention, business operations, network and information security, and direct marketing where appropriate).
Consent: where required by law or where we rely on consent (for example, certain marketing communications or optional features). You may withdraw consent at any time where processing is based on consent.
Vital interests: in limited circumstances, processing necessary to protect someone’s life or safety.

How We Use Personal Data

We use personal data to:

deliver and improve our services and customer experience;
manage accounts, billing and payments;
respond to inquiries and provide customer support;
send administrative messages and updates;
conduct research, analysis and diagnostics to maintain and improve system security, performance and reliability;
comply with applicable laws, regulations and lawful requests from public authorities;
maintain records for audit and record-keeping requirements; and
send marketing and promotional communications where permitted by law or consented to by you.

Retention of Personal Data

Retention principle: We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, to comply with our legal obligations, to resolve disputes and to enforce our agreements.

Retention periods vary by data type and purpose. For example:

Contractual and transactional data: retained for the duration of the contractual relationship and for a period after termination necessary to satisfy legal, tax or accounting obligations (typically several years as required by applicable law).
Support and communications data: retained for as long as needed to resolve issues and for a commercially reasonable period for reference and improvement of services.
Marketing data: retained until consent is withdrawn or until we reasonably determine the data is no longer required for marketing.

When personal data is no longer required, we securely delete or anonymise it.

Processors and Third Parties

We may share personal data with third-party service providers ("processors") who perform services on our behalf, such as payment processing, hosting, analytics, support platforms, email delivery, and fraud prevention. Where we use processors:

we conduct due diligence and select processors that provide sufficient guarantees to implement appropriate technical and organisational measures;
we enter into written data processing agreements that require processors to process personal data only on our documented instructions, to maintain confidentiality and to implement security measures;
we may transfer data to processors located in jurisdictions outside the EEA where necessary; in such cases we ensure appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms, are in place.

Security

Security measures: We implement technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures include access controls, encryption where appropriate, network security, logging and regular testing.

Although we strive to protect personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

Your Rights

You have the following rights under applicable data protection law:

Right of access: you can request confirmation that we process your personal data and obtain a copy of personal data we hold about you.
Right to rectification: you can request correction of inaccurate or incomplete personal data.
Right to erasure ("right to be forgotten"): in certain circumstances you may request deletion of your personal data.
Right to restriction of processing: you can request that we limit how we use your personal data in certain situations.
Right to data portability: where processing is based on consent or performance of a contract and processing is carried out by automated means, you may request a machine-readable copy of your personal data.
Right to object: you may object to processing based on legitimate interests or to direct marketing processing at any time.
Right to withdraw consent: where processing is based on consent, you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint: you have the right to lodge a complaint with a competent data protection supervisory authority if you consider that our processing infringes applicable law.

Exercising Your Rights

To exercise any of the rights described above, you may submit a request to us. We will verify your identity and respond within applicable legal timeframes. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

Automated Decision-Making and Profiling

Automated decisions: In some cases we may use automated processing, including profiling, to support service delivery and security. Where such processing produces legal effects concerning you or similarly significantly affects you, we will provide meaningful information about the logic involved and the significance and envisaged consequences for you and, where required, will provide a manual review and means to challenge such decisions.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements or business operations. When we make material changes, we will provide notice as required by law. Continued use of our services following changes constitutes acceptance of the updated policy.

Additional Information

Third-party links: Our services may include links to third-party websites and services. This policy does not cover the privacy practices of those third parties. We recommend that you review their privacy notices before providing personal data.

Data protection officer and supervisory authority: Where required by law, we have appointed a data protection officer or have other internal arrangements to oversee compliance. You may communicate concerns or exercise rights as described above. You also have the right to contact a supervisory authority in your country for further assistance.

Final Provisions

Applicability: This Privacy Policy applies to all customers in the area and to all personal data processed in the context of the services described herein. We are committed to upholding your privacy rights and to maintaining transparent data processing practices.

Effective date: This policy is effective from the date it is published. Please check for updates periodically.

Thank you for entrusting us with your personal data. We are committed to handling it responsibly and in compliance with applicable data protection law.