Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when providing our services to customers in the area. It applies to all customers in area and is intended to meet the requirements of the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using our services, you acknowledge that your personal data may be processed as described in this policy.

1. Who we are

We are the data controller for the personal data we process in connection with our services. This means we decide why and how your personal data is used. We are committed to handling personal data in a lawful, fair, and transparent manner and to respecting your privacy rights.

2. Personal data we collect

We may collect personal data directly from you, automatically through your use of our services, and from third parties where permitted by law. The categories of data may include:

Identity data such as your name, title, or similar identifiers.
Contact data such as postal address, email address, and telephone number.
Transaction data such as details about services purchased, payment status, and service history.
Technical data such as IP address, browser type, device identifiers, operating system, and usage logs.
Profile data such as preferences, service interests, and feedback.
Communications data such as messages, complaints, requests, and correspondence related to your interactions with us.

We do not intentionally collect special category data unless this is strictly necessary, lawful, and appropriate safeguards are in place. Where such data is processed, we will do so only in limited circumstances and according to applicable law.

3. How we use personal data

We use personal data only for specified and legitimate purposes. These may include:

providing and managing our services;
processing transactions and maintaining records;
responding to inquiries, complaints, and service requests;
improving service quality, performance, and user experience;
protecting against fraud, misuse, and security incidents;
complying with legal and regulatory obligations;
sending service-related communications;
where permitted, carrying out limited marketing activities.

We will not use your personal data in ways that are incompatible with the purposes described in this policy unless we have a valid legal basis to do so.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis before processing personal data. Depending on the context, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legal obligation

We may process personal data to comply with legal and regulatory obligations, including tax, accounting, recordkeeping, and other statutory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Examples include service improvement, fraud prevention, internal administration, and network security.

Consent

In certain situations, we may rely on your consent, for example for optional marketing or non-essential processing. Where consent is used, you may withdraw it at any time, and this will not affect the lawfulness of processing before withdrawal.

Vital interests and public task

These bases are used only in rare circumstances where necessary to protect vital interests or where processing is carried out in the public interest or under official authority, as permitted by law.

5. Sharing and processors

We may share personal data with trusted third parties that act as processors on our behalf. These processors only process data under our instructions and are required to implement appropriate technical and organisational security measures. Processors may include:

IT and hosting providers;
payment service providers;
customer support platforms;
analytics and performance tools;
document storage and backup providers;
professional advisers and audit services where needed.

We may also disclose personal data where required by law, to enforce our legal rights, to protect the rights, property, or safety of others, or in connection with a corporate transaction such as a merger, restructuring, or transfer of assets. Where personal data is transferred outside the European Economic Area, we will ensure appropriate safeguards are in place, such as standard contractual clauses or another lawful transfer mechanism.

6. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, and operational requirements. Retention periods depend on the type of data and the reason for processing. In general:

customer account and service data are retained for the duration of the relationship and for a reasonable period afterward;
financial and transaction records are retained for periods required by law;
support communications and correspondence are kept for as long as needed to resolve the matter and maintain records;
technical logs are retained for limited periods unless needed for security or legal reasons.

When personal data is no longer needed, we will delete it, anonymise it, or securely archive it in accordance with our retention practices.

7. Security of your data

We use appropriate security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of internal procedures. While no system can be guaranteed completely secure, we take reasonable steps to reduce risks and protect your information.

8. Your rights under GDPR

You have a number of rights in relation to your personal data. Subject to legal limitations, these include:

Right of access – to request confirmation of whether we process your data and to obtain a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to request limited use of your data in specific situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format and to request transfer to another controller where feasible.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.
Right not to be subject to automated decision-making – to object to decisions made solely by automated means where applicable by law.

You may also have the right to lodge a complaint with your local supervisory authority if you believe your rights have been infringed. We encourage you to raise concerns so they can be reviewed promptly and fairly.

9. Children’s data

Our services are not intended for children unless explicitly stated otherwise. We do not knowingly collect personal data from children without the consent or authorisation required by law. If we become aware that such data has been collected improperly, we will take reasonable steps to delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so that you remain informed about how we process personal data.

Summary of principles: we collect only the data needed, process it on a valid lawful basis, retain it for limited periods, use carefully selected processors, and respect your GDPR rights. This policy applies to all customers in area and governs all processing carried out in connection with our services.