Privacy Policy -

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected for all customers in the area. It applies to all customers in area and is designed to provide clear information about privacy practices in a GDPR-compliant manner. By using our services, customers acknowledge that their personal data may be processed in accordance with this Policy and applicable data protection laws.

1. Introduction

We are committed to respecting privacy and protecting personal data. This Policy describes the types of information that may be collected, the legal grounds for processing, how long data is retained, the third parties that may process data on our behalf, and the rights available to individuals under the General Data Protection Regulation (GDPR). We take a privacy-by-design approach and aim to process only the data necessary for specified, legitimate purposes.

2. Data Collection

We may collect personal data directly from customers, automatically through service use, or from third parties where lawful and appropriate. The categories of data collected may include:

Identity data such as name, title, or other identifying information.
Contact data such as postal address, email address, or telephone number.
Account data such as login credentials, preferences, and service settings.
Transaction data such as payment details, purchase history, billing records, and service usage.
Technical data such as device type, browser information, IP address, and access logs.
Communication data such as feedback, inquiries, complaints, and service-related correspondence.

Where relevant, we may also process limited information needed for fraud prevention, security monitoring, legal compliance, or service improvement. We do not intentionally collect more information than is necessary for the purpose stated.

3. Purposes of Processing

Personal data is processed for specific and legitimate purposes, including:

To provide and operate services for customers in area.
To manage accounts, transactions, and customer support.
To communicate service updates, notices, and relevant administrative information.
To maintain security, detect misuse, and prevent fraud.
To comply with legal, regulatory, and contractual obligations.
To improve service quality, functionality, and user experience.

We will not use personal data in a manner that is incompatible with these purposes unless required or permitted by law. Where a new purpose arises, we will assess whether it is compatible with the original purpose or whether additional consent or notice is required.

4. Lawful Basis for Processing

We process personal data only when we have a lawful basis under GDPR. Depending on the context, the lawful basis may include:

Contract: Processing is necessary to perform a contract with the customer or to take steps prior to entering into a contract.
Legal obligation: Processing is necessary to comply with applicable law, regulation, or official request.
Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by the customer’s rights and freedoms.
Consent: Where required, processing is based on freely given, specific, informed, and unambiguous consent, which may be withdrawn at any time.

When we rely on legitimate interests, we assess the impact on individuals and implement safeguards to protect personal data. When consent is the basis, it is presented clearly and separately from other terms. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, reporting, and dispute-resolution requirements. Retention periods are determined by the nature of the data, the purpose of processing, and any applicable legal obligations.

In general, we apply the following principles:

Data needed to perform a service is kept for the duration of the relationship and for a reasonable period thereafter.
Records required for tax, accounting, or legal compliance are retained for the period mandated by law.
Security and audit logs are retained only for as long as necessary to monitor and protect systems.
Data no longer required is securely deleted, anonymized, or otherwise irreversibly removed.

Where retention is based on a legal requirement, data may be stored until the end of the relevant period even if the customer has ceased using the service. Once retention is no longer necessary, data is disposed of securely and in accordance with internal policies.

6. Processors and Data Sharing

We may share personal data with trusted processors that act on our behalf and under our instructions. These processors are engaged only where necessary and are contractually required to protect personal data and to process it in compliance with GDPR. Typical processor categories may include:

Hosting and infrastructure providers.
Payment service providers.
Customer support and communication tools.
Analytics and performance monitoring providers.
IT security and fraud prevention services.

We may also disclose personal data where required by law, court order, or regulatory request, or where necessary to establish, exercise, or defend legal claims. In all cases, we seek to limit disclosures to the minimum necessary. Any third party that processes data on our behalf is expected to maintain appropriate technical and organizational safeguards.

We do not sell personal data. Where data is transferred outside the customer’s jurisdiction, appropriate safeguards are implemented, such as standard contractual clauses or equivalent legal mechanisms, where required.

7. Data Security

We apply appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, disclosure, or destruction. These measures may include access controls, encryption, secure storage, monitoring, and staff training. While no system can guarantee absolute security, we regularly review our safeguards and update them as necessary. Any suspected personal data breach is handled in accordance with applicable legal requirements.

8. User Rights Under GDPR

Individuals whose personal data is processed under this Policy have rights under GDPR. Subject to legal conditions and exceptions, these rights include:

Right of access to obtain confirmation of whether personal data is processed and to receive a copy of that data.
Right to rectification to correct inaccurate or incomplete personal data.
Right to erasure to request deletion of personal data in certain circumstances.
Right to restriction to limit processing in specific situations.
Right to data portability to receive data in a structured, commonly used, machine-readable format and to request transfer where applicable.
Right to object to processing based on legitimate interests or to direct marketing, where applicable.
Right to withdraw consent at any time where processing is based on consent.
Right not to be subject to automated decision-making where such decision-making produces legal or similarly significant effects, unless permitted by law.

Requests will be reviewed in accordance with applicable law and answered within the time limits required by GDPR, subject to any lawful extension. Customers may be asked to verify their identity before a request is fulfilled to protect data from unauthorized access. These rights apply to all customers in area.

9. International Transfers

If personal data is transferred to countries outside the European Economic Area, we ensure that appropriate legal safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other approved transfer mechanisms. We also assess the risks associated with such transfers and apply supplementary measures where needed.

10. Children’s Data

Our services are not directed to children unless expressly stated otherwise. We do not knowingly collect personal data from children without lawful authorization and, where required, verifiable parental consent. If we become aware that personal data has been collected from a child without proper authorization, we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or security standards. Updated versions will apply from the date of publication unless otherwise required by law. Customers are encouraged to review this Policy periodically to stay informed about how personal data is handled.

12. Final Statement

This Privacy Policy applies to all customers in area and is intended to ensure transparency, accountability, and lawful processing of personal data. By maintaining clear rules for data collection, lawful basis, retention, processor use, and user rights, we aim to protect personal information in a fair and responsible manner. Our commitment is to process personal data only when necessary, only for valid purposes, and only with appropriate safeguards.