Privacy Policy

This Privacy Policy explains how personal data is collected, used, disclosed, retained, and protected in connection with our services. It applies to all customers in the area, regardless of how they access or use our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our services, you acknowledge that personal data may be processed as described in this Privacy Policy. We encourage you to read this document carefully to understand how your information is managed and what rights you have over it.

1. Information We Collect

We collect only the personal data that is necessary for the purposes described in this Policy. Depending on your interactions with us, we may collect the following categories of information:

Identity data such as your name, title, and basic profile details.
Contact data such as billing address, delivery address, email address, and telephone number.
Transaction data such as purchase history, order details, payment status, and service records.
Technical data such as device information, browser type, IP address, time zone, and access logs.
Usage data such as pages viewed, actions taken, preferences, and interactions with our services.
Communication data such as inquiries, complaints, and any information you provide when you correspond with us.

We may also receive personal data from third parties where permitted by law, such as payment providers, service partners, or public sources. We do not intentionally collect special category data unless it is necessary and legally permitted.

2. How We Use Personal Data

We use personal data only for specific and legitimate purposes. These may include:

providing and managing our services;
processing orders, payments, and refunds;
maintaining records and internal administration;
communicating with customers about service-related matters;
improving our services, systems, and customer experience;
detecting, investigating, and preventing fraud or misuse;
meeting legal, regulatory, tax, accounting, and reporting obligations;
defending or establishing legal claims.

Where required by law, we will ensure that any further processing is compatible with the original purpose or is otherwise based on a valid lawful basis under GDPR.

3. Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. Depending on the context and the type of data involved, our lawful bases may include:

Performance of a Contract

We process personal data when it is necessary to provide services, fulfill orders, or take steps requested by you before entering into a contract.

Legal Obligation

We may process personal data where we must comply with legal, tax, accounting, regulatory, or court-related obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. Such interests may include service improvement, fraud prevention, and business administration.

Consent

In some situations, we rely on your consent. Where consent is used, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

When we rely on legitimate interests or consent, we will consider the nature of the data, the context of collection, and the reasonable expectations of individuals.

4. Sharing and Processors

We may share personal data with trusted third parties who process information on our behalf. These parties act as processors under GDPR and may only process personal data in accordance with our instructions and appropriate contractual safeguards.

Processors and other recipients may include:

IT and hosting providers that support secure data storage, infrastructure, and system operation;
Payment service providers that help process financial transactions;
Customer support tools that assist with communications and case management;
Analytics and service monitoring providers that help us understand performance and usage;
Professional advisers such as accountants, auditors, legal advisers, and insurers;
Public authorities where disclosure is required by law or necessary for legal proceedings.

We require processors to implement appropriate technical and organizational measures to protect personal data. They are not permitted to use your information for their own independent purposes.

Where personal data is transferred outside the European Economic Area or the UK, we will ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or equivalent lawful transfer mechanisms.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, tax, reporting, and dispute-resolution requirements.

The retention period depends on several factors, including:

the nature of the data;
the purpose of processing;
applicable legal retention obligations;
whether the data is needed for potential claims or investigations.

When personal data is no longer required, we will securely delete, anonymize, or otherwise dispose of it in a manner consistent with applicable law. Retention periods are reviewed periodically to ensure they remain necessary and proportionate.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental loss, unauthorized access, disclosure, alteration, or destruction. These measures may include access controls, encryption where appropriate, role-based permissions, and monitoring of systems.

While we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are legally required to do so, we will notify the relevant supervisory authority and affected individuals in accordance with GDPR.

7. Your Rights Under GDPR

Subject to applicable conditions and exemptions, you have the following rights in relation to your personal data:

Right of access – to request confirmation of whether we process your personal data and to obtain a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request limited processing in specific situations.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format and to request transfer where feasible.
Right to object – to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent – where processing is based on consent, to withdraw it at any time.
Right not to be subject to automated decision-making – including profiling, where such decisions produce legal or similarly significant effects, unless permitted by law.

You may also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed. We encourage you to raise concerns with us first so that we can attempt to resolve the issue promptly and fairly.

8. Children’s Data

Our services are not intended for children unless otherwise stated by law or specific service terms. We do not knowingly collect personal data from children without appropriate authorization where required. If we become aware that we have collected such data unlawfully, we will take steps to delete it as soon as reasonably practicable.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our processing practices. Any revised version will apply from the effective date stated in the updated policy. We encourage you to review this Policy periodically to stay informed about how we protect personal data.

10. General Principles

We follow the GDPR principles of lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability. This means we aim to collect only what is necessary, use it only for defined purposes, retain it only as long as needed, and protect it appropriately throughout its lifecycle.

All customers in the area are covered by this Privacy Policy. By continuing to use our services, you confirm that you have read and understood how your personal data may be processed in accordance with this Policy.