Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when we provide our services. It applies to all customers in the area where our services are made available. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with applicable data protection laws, including the GDPR where it applies.

1. Scope of This Policy

This Policy applies to personal data collected from customers, prospective customers, business contacts, and users who interact with our services, websites, systems, or support channels. It covers data processing activities carried out by us as a data controller and, where relevant, by our service providers acting on our behalf.

We do not intentionally collect more personal data than is necessary for the purposes described in this Policy.

2. Personal Data We Collect

We may collect the following categories of personal data:

Identity data: name, username, title, and similar identifiers.
Contact data: email address, billing address, delivery address, and telephone number.
Account data: login credentials, account settings, preferences, and profile information.
Transaction data: records of services requested, purchased, or delivered, payment status, and related correspondence.
Technical data: IP address, device identifiers, browser type, operating system, and usage logs.
Communication data: messages, inquiries, complaints, support requests, and feedback.
Marketing data: your preferences for receiving promotional communications, where permitted.

We may collect data directly from you, automatically through your interaction with our services, or from third parties where permitted by law and where such parties have the right to share the information.

3. How We Use Personal Data

We process personal data for the following purposes:

To provide and manage our services.
To create and administer customer accounts.
To process transactions and fulfill service requests.
To respond to enquiries and provide customer support.
To improve our services, systems, and user experience.
To detect, investigate, and prevent fraud, misuse, and security incidents.
To comply with legal, regulatory, and contractual obligations.
To send service-related notifications and, where allowed, marketing communications.

We will only use personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that use is permitted by law.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so. Depending on the context, the lawful bases may include:

4.1 Contract

We process data when it is necessary to enter into or perform a contract with you, such as to provide services, manage your account, or complete payment and delivery-related actions.

4.2 Legal Obligation

We may process data where needed to comply with legal or regulatory obligations, including accounting, tax, consumer protection, or fraud-prevention requirements.

4.3 Legitimate Interests

We may process data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. This may include service improvement, security, internal analytics, and limited direct communications.

4.4 Consent

Where required by law, we rely on your consent, for example for certain marketing activities or optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4.5 Vital Interests and Public Interest

In rare cases, we may process personal data to protect vital interests or where necessary for tasks carried out in the public interest or under official authority, if applicable.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention period depends on the type of data, the nature of the relationship, and applicable legal obligations.

Account and transaction data: retained for the duration of the customer relationship and for a period afterward as required by law or to defend legal claims.
Support communications: retained for a reasonable period to resolve issues, improve service quality, and maintain records.
Technical and security logs: retained for a limited period necessary for security monitoring, troubleshooting, and incident analysis.
Marketing preferences: retained until you change your preferences or withdraw consent, subject to legal requirements.

When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable law and our retention practices.

6. Sharing and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this Policy. These parties may act as processors or independent controllers depending on the context.

Processors are service providers that process personal data on our behalf and under our instructions. They may include:

IT and hosting providers
Payment and billing service providers
Customer support tools and communication platforms
Analytics, monitoring, and security providers
Professional advisers, such as auditors and legal advisers, where necessary

We require processors to implement appropriate technical and organizational security measures and to process personal data only for authorized purposes. Where personal data is transferred outside the relevant jurisdiction, we will apply suitable safeguards as required by law.

We may also disclose personal data where required to comply with legal obligations, enforce agreements, protect rights, or respond to lawful requests from public authorities.

7. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, monitoring, staff training, and secure storage practices.

Although we take reasonable steps to safeguard data, no system can be guaranteed to be completely secure.

8. Your Rights

Subject to applicable law, you may have the following rights regarding your personal data:

Right of access: to request confirmation of whether we process your data and obtain a copy.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request limited processing in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format or have it transferred where technically feasible.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

We may need to verify your identity before responding to a rights request. In some cases, we may be unable to comply fully if the request conflicts with legal obligations or other lawful grounds for processing.

9. Automated Decision-Making

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects, unless this is expressly permitted by law and appropriate safeguards are in place.

10. Children

Our services are not intended for children, and we do not knowingly collect personal data from children where prohibited by law. If we become aware that personal data has been collected from a child in violation of applicable requirements, we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service offerings. Any revised version will apply from the date it is made effective. We encourage you to review this Policy periodically to stay informed about how we process personal data.

12. General Statement

This Policy is intended to provide a clear overview of our data processing practices. It applies to all customers in the area where our services are provided and is designed to ensure that personal data is handled with care, transparency, and respect for your rights.

By using our services, you acknowledge that you have read and understood this Privacy Policy.