Privacy Policy -

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected for all customers in area. It applies to every individual who interacts with our services, uses our products, or otherwise provides personal information in connection with our operations. We are committed to handling personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy is intended to provide clear and transparent information about the types of data we process, the purposes for which we process it, the lawful bases on which processing is carried out, how long we retain data, the categories of processors or service providers that may handle data on our behalf, and the rights available to individuals under the GDPR.

1. Data Collection

We collect personal data only to the extent necessary for legitimate and lawful purposes. Depending on the relationship between you and us, we may collect the following categories of information:

Identity data, such as your name, title, or identifier.
Contact data, such as address, email address, telephone number, or other communication details.
Transaction data, including details about purchases, services requested, payments, and related records.
Technical data, such as device information, IP address, browser type, log files, and usage patterns.
Profile and preference data, including settings, interests, and communication choices.
Correspondence data, including records of inquiries, complaints, or other communications.
Any other information that you choose to provide voluntarily.

We generally collect data directly from you when you submit forms, communicate with us, or use our services. We may also receive data from third parties where permitted by law, such as service providers, payment handlers, analytics tools, or public sources. Where required, we will ensure that any third-party source has the right to share the information with us.

2. Purposes of Processing

We process personal data for the following purposes:

To provide and manage our services.
To communicate with you and respond to your requests.
To process transactions and maintain business records.
To improve service quality, performance, and user experience.
To maintain security, prevent fraud, and detect misuse.
To comply with legal obligations and regulatory requirements.
To establish, exercise, or defend legal claims.
To send administrative notices and important updates.

We will not process personal data in a manner that is incompatible with the purposes for which it was collected unless we have a valid legal basis to do so and, where necessary, have informed you accordingly.

3. Lawful Basis for Processing

Under GDPR, we must identify a lawful basis for each processing activity. Depending on the context, we may rely on one or more of the following lawful bases:

Contractual necessity

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This may include processing identity, contact, and transaction information to provide services or fulfil obligations.

Legal obligation

We may process personal data where required to comply with applicable laws, regulations, tax rules, accounting requirements, or lawful requests from authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights and freedoms. Examples include fraud prevention, service improvement, internal administration, and network security.

Consent

Where required by law, we rely on your consent. If processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

Vital interests and public interest

In rare circumstances, we may process personal data to protect vital interests or where processing is necessary for tasks carried out in the public interest, as allowed under applicable law.

4. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, and reporting obligations. Retention periods are determined based on the nature of the data, the purposes of processing, the legal basis used, and any statutory limitations or contractual requirements.

When personal data is no longer needed, we will securely delete, anonymize, or otherwise irreversibly remove it from active systems where feasible. In some cases, data may be retained for a longer period if required to resolve disputes, enforce agreements, or comply with legal obligations.

Examples of retention considerations include:

Transaction and billing records may be retained for statutory periods required by law.
Communication records may be retained for a reasonable period to support service quality and dispute handling.
Technical logs may be retained temporarily for security monitoring, diagnostics, and fraud detection.

5. Processors and Third-Party Services

We may engage trusted third parties to process personal data on our behalf. These parties act as processors and are only permitted to process data according to our documented instructions and applicable law. We require appropriate contractual safeguards to protect personal data and ensure confidentiality, integrity, and security.

Categories of processors may include:

IT and hosting providers that store and support systems and infrastructure.
Payment service providers that facilitate transactions and fraud checks.
Customer support tools used to manage communications and service requests.
Analytics providers that help us understand usage trends and improve services.
Security and monitoring providers that assist with threat detection, logging, and protection.
Professional advisers, such as legal, accounting, or compliance providers, where necessary.

Where processors or other third parties are located outside the European Economic Area, we will ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other mechanisms permitted by GDPR.

6. Data Sharing

We do not sell personal data. We may disclose personal data only where necessary and lawful, including:

to processors acting under our instructions;
to comply with legal obligations or lawful requests;
to protect rights, property, or safety;
to support a corporate transaction, such as a merger or restructuring, subject to applicable safeguards;
where you have expressly directed or authorized us to do so.

Any sharing is limited to the minimum data necessary for the intended purpose.

7. Security Measures

We use appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, monitoring, and regular review of our security practices. While no system can be guaranteed completely secure, we take reasonable steps to reduce risk and safeguard data.

8. Your Rights Under GDPR

Individuals whose data we process may have the following rights, subject to legal conditions and exemptions:

Right of access to obtain confirmation and a copy of personal data.
Right to rectification to correct inaccurate or incomplete data.
Right to erasure to request deletion where permitted by law.
Right to restriction to limit processing in certain circumstances.
Right to data portability to receive data in a structured, commonly used format where applicable.
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent where processing relies on consent.
Right not to be subject to solely automated decision-making, including profiling, where applicable under law.

We will respond to valid requests within the timeframe required by GDPR, typically within one month, subject to any lawful extension where requests are complex or numerous. We may need to verify your identity before acting on a request to protect your privacy and security.

9. Children’s Data

Our services are not intended for children unless explicitly stated otherwise. We do not knowingly collect personal data from children without appropriate authorization or legal basis. If we become aware that data has been collected from a child without the necessary permissions, we will take steps to delete or appropriately handle the information in accordance with the law.

10. International Transfers

If personal data is transferred outside your jurisdiction, we will ensure that adequate protection is in place. Such protection may include contractual safeguards, adequacy decisions, or other mechanisms recognized under GDPR. We assess transfer risks and apply additional measures where needed to maintain an appropriate level of protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will apply from the date it is made available. We encourage individuals to review the policy periodically to remain informed about how personal data is handled.

12. Applicability

This Privacy Policy applies to all customers in area and governs the processing of personal data connected with our services and operations. By engaging with us, you acknowledge that you have read and understood this policy and the ways in which your data may be processed in accordance with GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

We are committed to respecting privacy rights and handling personal data responsibly.