Privacy Policy

This Privacy Policy explains how personal data is collected, used, disclosed, stored, and protected in connection with our services. It applies to all customers in the relevant area and is intended to provide clear information about our privacy practices in accordance with applicable data protection laws, including the GDPR where relevant.

1. Who This Policy Applies To

This Policy applies to individuals who use, purchase, or otherwise interact with our services in the applicable area. It covers personal data relating to customers, prospective customers, and individuals acting on behalf of business customers. By using our services, you acknowledge that your personal data may be processed as described in this Policy.

2. Data We Collect

We may collect and process different categories of personal data depending on how you interact with us. The types of data we collect may include:

Identity data such as your name, username, or similar identifier.
Contact data such as billing address, service address, and other correspondence details.
Transaction data such as payment status, purchase history, and service records.
Usage data such as information about how you access and use our services.
Technical data such as device type, browser type, IP address, and log information.
Communication data such as messages, requests, complaints, or feedback you send to us.
Preference data such as marketing choices or service settings.

We collect this information directly from you, automatically through our systems, and in some cases from third parties where lawful to do so.

3. How We Use Personal Data

We use personal data only where permitted by law and for legitimate operational purposes. Common purposes include:

providing and maintaining our services;
managing customer accounts and transactions;
processing payments and handling billing matters;
responding to enquiries, complaints, or support requests;
improving our services, systems, and user experience;
ensuring security, fraud prevention, and misuse detection;
meeting legal, regulatory, tax, and accounting obligations;
sending service-related communications;
where permitted, carrying out direct marketing or service updates.

We do not process personal data in ways that are incompatible with the purposes for which it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing services, managing orders, and fulfilling customer requests.

Legal Obligation

We may process personal data where this is necessary to comply with applicable legal or regulatory obligations, including tax, accounting, consumer protection, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your rights and freedoms. Legitimate interests may include service improvement, administration, fraud prevention, and network or information security.

Consent

In limited cases, we may rely on your consent, such as for certain marketing activities or optional processing. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting, or contractual requirements. The retention period depends on the nature of the data, the reason for processing, and any statutory retention obligations.

When determining retention periods, we consider:

the amount, nature, and sensitivity of the data;
the risk of harm from unauthorised use or disclosure;
the purposes of processing and whether they can be achieved by other means;
applicable legal limitation periods and regulatory requirements.

When personal data is no longer needed, we will delete it, anonymise it, or securely archive it in accordance with our retention procedures.

6. Sharing and Processors

We may share personal data with trusted third parties where necessary to run our services, meet legal obligations, or protect our legitimate interests. These parties may act as processors or, in some cases, as independent controllers.

Typical categories of processors may include:

IT and hosting service providers;
payment processing providers;
customer support and communication tools;
analytics and performance service providers;
document storage and backup providers;
professional advisers, such as accountants or legal advisers, where necessary.

Where processors handle personal data on our behalf, they are bound by contractual obligations to process the data only on our instructions, to keep it secure, and to comply with applicable data protection requirements. We require appropriate safeguards for any international transfers, where applicable.

7. International Transfers

If personal data is transferred outside the relevant jurisdiction or the European Economic Area, we will take steps to ensure that appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law.

8. Security Measures

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include access controls, secure storage, staff training, and system monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the following rights in relation to your personal data:

Right of access – to obtain confirmation of whether we process your data and to receive a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that we limit processing in certain situations.
Right to data portability – to receive your data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, to withdraw it at any time.
Right not to be subject to automated decision-making – including profiling, where such decisions produce legal or similarly significant effects and are otherwise prohibited by law.

You may also have the right to lodge a complaint with a supervisory authority in your country or region if you believe your data protection rights have been infringed.

10. Children’s Data

Our services are not intended for children unless explicitly stated otherwise. We do not knowingly collect personal data from children without appropriate authority or consent where required by law. If we become aware that we have collected such data improperly, we will take appropriate steps to delete it or obtain the required permissions.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any revised version will apply from the date it becomes effective. We encourage you to review this Policy periodically to stay informed about how we process personal data.

12. Summary of Key Principles

We collect only the information we need, use it lawfully, keep it only as long as necessary, and share it only with authorised processors or where required by law. We are committed to processing personal data fairly, transparently, and securely, while respecting your rights under applicable data protection legislation.

This Privacy Policy applies to all customers in the relevant area.