Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in relation to services provided to customers in the area. It applies to all customers in area and is intended to reflect the principles of the General Data Protection Regulation (GDPR) and applicable local data protection laws. By using the services covered by this policy, customers acknowledge that their personal data may be processed as described below.

1. Data Collection

We collect and process only the personal data that is necessary for the purposes described in this Policy. Depending on the nature of the service and the relationship with the customer, the categories of data we may collect include:

• Identity data such as name, title, and similar identifiers;
• Contact data such as email address, telephone number, and mailing address;
• Transaction data such as details about services requested, purchased, or delivered;
• Communication data such as correspondence and support inquiries;
• Technical data such as device type, browser information, and usage logs;
• Preference data such as communication choices and service preferences;
• Payment-related data where necessary to complete transactions, subject to security safeguards.

We do not intentionally collect special categories of personal data unless there is a lawful basis to do so and it is necessary for a specific purpose. If such information is processed, we will apply enhanced protection measures in line with GDPR requirements.

2. Purposes of Processing

Personal data is processed only for legitimate and specified purposes. These purposes include:

• providing and managing services;
• processing orders, payments, and related transactions;
• maintaining records and account administration;
• responding to inquiries, complaints, and customer support requests;
• improving service quality, performance, and user experience;
• meeting legal, regulatory, tax, and accounting obligations;
• protecting against fraud, misuse, and security incidents;
• communicating important operational or service-related information.

We will not use personal data for purposes that are incompatible with the original purpose of collection unless a lawful basis exists and customers are informed where required.

3. Lawful Basis for Processing

We process personal data only when a lawful basis under GDPR applies. The lawful bases relied upon may include:

Contractual necessity

Processing is necessary to enter into or perform a contract with a customer, or to take steps at the customer’s request before entering into a contract. This may include managing orders, delivering services, and handling payments.

Legal obligation

Processing may be required to comply with legal obligations, including tax, accounting, consumer protection, anti-fraud, or regulatory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by the interests or fundamental rights and freedoms of the customer. Examples may include service improvement, security monitoring, internal administration, and fraud prevention.

Consent

Where consent is required by law, we will request it in a clear and informed manner. Customers may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Vital interests and public interest

In limited circumstances, processing may be necessary to protect vital interests or to carry out tasks in the public interest where applicable.

4. Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, reporting, and audit requirements. Retention periods vary depending on the type of data, the purpose of processing, and any legal obligations that apply.

• Data related to active customer relationships is retained for the duration of the relationship.
• Transaction and financial records may be retained for the period required by law.
• Support communications and operational records are retained for a reasonable period to resolve disputes and improve service quality.
• When data is no longer needed, it is securely deleted, anonymized, or otherwise rendered inaccessible.

We review retention practices regularly to ensure that personal data is not kept longer than necessary.

5. Processors and Data Sharing

We may use third-party service providers, also known as processors, to process personal data on our behalf. These processors act under our instructions and are bound by contractual obligations to implement appropriate technical and organizational measures to protect personal data.

Examples of processor functions may include:

• information technology and hosting services;
• payment processing and billing support;
• customer support tools and communication platforms;
• analytics and performance monitoring;
• document storage and administrative services;
• security and fraud prevention services.

We may also share personal data with independent controllers where necessary to comply with legal obligations or to support service delivery, such as with regulatory bodies, professional advisers, insurers, or law enforcement authorities when legally required. Any disclosure will be limited to what is necessary and lawful.

Personal data is not sold.

6. International Transfers

If personal data is transferred outside the European Economic Area or to jurisdictions with different data protection standards, appropriate safeguards will be used. These may include adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms. Such measures are intended to ensure that personal data remains protected to a standard consistent with GDPR requirements.

7. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, encryption, secure storage, staff training, and regular review of security practices.

While no system can be guaranteed to be completely secure, we take reasonable and proportionate steps to reduce risk and safeguard personal data.

8. User Rights

Under GDPR, customers have several rights regarding their personal data. Subject to legal conditions and exemptions, these rights include:

• Right of access — to obtain confirmation as to whether personal data is processed and to receive a copy of that data;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of personal data in certain circumstances;
• Right to restriction — to request limited processing in certain cases;
• Right to data portability — to receive certain data in a structured, commonly used format and to transmit it to another controller where applicable;
• Right to object — to object to processing based on legitimate interests or direct marketing;
• Right to withdraw consent — where processing is based on consent;
• Right not to be subject to automated decision-making — where applicable, unless legally permitted.

Customers may also have the right to lodge a complaint with the relevant supervisory authority if they believe their rights have been infringed. We encourage customers to raise concerns so they can be addressed promptly.

9. Data Accuracy and Customer Responsibilities

Customers are expected to provide accurate and up-to-date information where necessary for service delivery. Where information changes, customers should ensure that relevant details are corrected so that records remain accurate and complete. Maintaining accurate data helps us fulfill our obligations and provide reliable services.

10. Children’s Data

The services covered by this Policy are not intended for children unless specifically stated otherwise. We do not knowingly collect personal data from children without the appropriate lawful basis and safeguards. If we become aware that personal data has been collected in error, we will take steps to delete or protect it as appropriate.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service arrangements. When updates are made, the revised Policy will apply from the date of publication or another effective date stated in the updated version. Customers are encouraged to review this Policy periodically to stay informed about how personal data is handled.

12. General Statement

This Privacy Policy applies to all customers in area and governs how personal data is managed in connection with the services provided there. We are committed to processing personal data fairly, transparently, and lawfully, and to respecting the privacy rights of every customer. Protecting personal data is an essential part of our commitment to responsible service delivery.

Summary of key principles:

• data is collected only for specific and legitimate purposes;
• processing is based on a valid lawful basis under GDPR;
• personal data is retained only as long as necessary;
• processors are engaged under appropriate contractual safeguards;
• customers can exercise their GDPR rights subject to legal conditions.