Privacy Policy -

This Privacy Policy explains how personal data is collected, used, disclosed, stored, and protected in connection with the services provided to all customers in area. It applies to every individual who interacts with our products, services, communications, or support functions in that area. We are committed to processing personal data lawfully, fairly, and transparently in accordance with the General Data Protection Regulation (GDPR).

1. Scope of this Policy

This Policy covers personal data processed when customers use our services, make inquiries, enter into agreements, receive communications, or otherwise engage with us. It also applies where we receive information from third parties where permitted by law. This Policy is intended to provide clear information about what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights individuals have under applicable data protection law.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data such as name, title, and similar identifiers.
Contact data such as address, email address, and phone number.
Account and transaction data such as order history, service requests, billing information, and records of payments or refunds.
Technical data such as device type, browser type, IP address, log files, and usage information.
Communication data such as messages, complaints, feedback, and preferences.
Marketing and consent data such as communication preferences and records of consent or objection.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such data is processed, it will be handled with appropriate safeguards and only where a lawful basis exists.

3. How We Collect Data

We may collect personal data directly from you when you complete forms, communicate with us, use our services, or provide information during a transaction. We may also collect data automatically through technical systems that record usage or performance information. In some cases, we receive data from service providers, payment intermediaries, or other third parties where this is lawful and relevant to the services we provide.

4. Purposes of Processing

We process personal data for specific and legitimate purposes, including:

providing and managing services;
processing transactions and related administrative tasks;
communicating about service updates, requests, or account matters;
maintaining records and internal administration;
improving quality, performance, and user experience;
ensuring security, fraud prevention, and abuse detection;
complying with legal, regulatory, tax, and accounting obligations;
handling disputes, complaints, and enforcement of rights.

We only use personal data in ways that are compatible with the purposes for which it was collected, unless we have a valid legal basis for a new purpose.

5. Lawful Basis for Processing

Under GDPR, we rely on the following lawful bases where applicable:

Contract - processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legal obligation - processing is necessary for compliance with a legal duty, such as tax, accounting, or regulatory requirements.
Legitimate interests - processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
Consent - where you have given clear consent for specific processing activities, such as certain marketing communications, which you may withdraw at any time.
Vital interests - in rare cases where processing is necessary to protect life or physical safety.
Public task - where processing is necessary for a task carried out in the public interest, if applicable.

Where we rely on legitimate interests, we assess the impact on individuals and ensure that processing remains proportionate. Where we rely on consent, you have the right to withdraw it without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Processors

We may share personal data with third parties only where necessary and permitted by law. Such third parties may act as processors or, in some cases, as independent controllers. Processors act on our instructions and are contractually bound to protect personal data.

Examples of processors may include:

IT and cloud service providers that host systems, store data, or maintain infrastructure;
payment processors that handle payment transactions;
customer support providers that assist with service queries;
analytics and performance providers that help us understand service use;
security and fraud prevention providers that help protect systems and users;
professional advisers such as legal, audit, or accounting services where needed.

Where data is transferred outside the European Economic Area or to a jurisdiction without an adequacy decision, we will use appropriate safeguards such as standard contractual clauses or equivalent protective measures, as required by law.

7. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Data related to active customer relationships is kept for the duration of the relationship.
Transactional and accounting records are retained for the period required by applicable law.
Support communications and operational records are retained for a period proportionate to the purpose for which they were collected.
Where consent is the basis for processing, we retain the relevant data until consent is withdrawn or the purpose ends, whichever occurs first.

When personal data is no longer needed, we will delete it or anonymise it securely, unless retention is required for legal claims, compliance, or other legitimate purposes.

8. Security Measures

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, encryption, secure storage, staff training, and regular review of processing practices. Although no system can be completely secure, we take reasonable and proportionate steps to protect information in line with the sensitivity of the data and the risks involved.

9. User Rights Under GDPR

Individuals whose personal data is processed under this Policy have the following rights, subject to conditions and exceptions under GDPR:

Right of access - to obtain confirmation and a copy of personal data processed about you.
Right to rectification - to request correction of inaccurate or incomplete personal data.
Right to erasure - to request deletion of personal data in certain circumstances.
Right to restriction - to request that processing be limited in certain situations.
Right to data portability - to receive personal data in a structured, commonly used, machine-readable format where applicable.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint - to raise concerns with the relevant data protection authority if you believe your rights have been infringed.

Requests relating to these rights will be handled without undue delay and within the time limits required by law. We may ask for information necessary to verify your identity before responding to a request.

10. Children’s Data

Our services are not intended to be used by children unless expressly stated otherwise. We do not knowingly collect personal data from children in a way that would violate applicable law. If we become aware that such data has been collected without appropriate authorisation or lawful basis, we will take reasonable steps to delete or safeguard it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, processing practices, or operational needs. Any updated version will apply from the effective date of the revised policy. We encourage individuals to review this Policy periodically so they remain informed about how personal data is handled.

12. General Statement

This Privacy Policy applies to all customers in area and is intended to ensure transparent and lawful processing of personal data. By using our services or interacting with us, you acknowledge that your personal data may be processed as described in this Policy, subject always to your rights under applicable data protection law.

We are committed to respecting privacy, limiting data use to what is necessary, and maintaining accountability in all processing activities.