Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in connection with our services. It applies to all customers in the area and is intended to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge that personal data may be processed as described below.

1. Personal Data We Collect

We collect only the information necessary to provide and improve our services, manage our relationship with customers, and meet legal obligations. The types of personal data we may collect include:

Identity data such as name, title, and similar identifiers.
Contact data such as address, email address, and telephone number.
Transactional data including details of services purchased, payments, invoices, and related records.
Communication data such as messages, requests, feedback, and any correspondence related to our services.
Technical data such as device information, browser type, operating system, IP address, and usage data where relevant.
Preference data relating to customer choices, settings, or service interests.

We do not intentionally collect special category data unless it is required by law or you choose to provide it in connection with a specific request. Where such data is processed, we do so only with an appropriate lawful basis and additional safeguards.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide and manage our services.
To process transactions, billing, and administrative matters.
To communicate with customers and respond to enquiries.
To improve service quality, performance, and customer experience.
To maintain records, prevent fraud, and ensure security.
To comply with legal, regulatory, and tax obligations.
To establish, exercise, or defend legal claims.

We only process personal data to the extent that it is necessary and proportionate for these purposes.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every processing activity. Depending on the context, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes managing your account, delivering services, and handling payments.

Legal obligation

We process personal data where necessary to comply with legal obligations, including accounting, tax, anti-fraud, and regulatory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, security monitoring, and business planning. We always consider the impact on your privacy before relying on this basis.

Consent

In limited situations, we may rely on your consent, for example where the law requires it for certain optional activities. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties that act as processors or, in some cases, independent controllers. Processors only process data on our instructions and are bound by written agreements requiring them to implement appropriate security and confidentiality measures.

Examples of processors may include:

IT and hosting providers that store or support systems and infrastructure.
Payment service providers that facilitate payment processing.
Accounting and administrative service providers that support financial recordkeeping.
Customer support and communications tools used to manage enquiries and service messages.
Security and fraud prevention providers that help protect systems and data.

We may also disclose personal data where required by law, court order, or lawful request from public authorities. In the event of a corporate transaction, such as a restructuring or transfer of operations, personal data may be shared with relevant parties subject to appropriate protections.

We do not sell personal data.

5. International Data Transfers

If personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms recognised under GDPR. Where necessary, we assess whether additional technical or organisational measures are required to protect the data.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, reporting, and contractual requirements. Retention periods depend on the type of data, the reason for processing, and any applicable statutory obligations.

In general:

Customer and transaction records may be retained for the period required under tax and commercial laws.
Communication records may be retained for a reasonable period to manage service history, complaints, or disputes.
Security and technical logs may be retained for limited periods to prevent misuse and maintain system integrity.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, encryption where appropriate, secure storage, staff confidentiality obligations, and regular review of security practices. While no system can be guaranteed to be completely secure, we work to maintain a level of protection appropriate to the risk.

8. Your Rights Under GDPR

Subject to legal limitations and conditions, you have the following rights regarding your personal data:

Right of access – to obtain confirmation as to whether we process your data and to receive a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request limited processing in certain situations.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format and to request transfer where technically feasible.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.
Right not to be subject to automated decision-making – unless such processing is permitted by law and appropriate safeguards are in place.

You may also have the right to lodge a complaint with a supervisory authority if you believe your rights have been infringed. Exercising your rights will not normally result in any charge, although requests that are manifestly unfounded or excessive may be refused or subject to a reasonable fee where permitted by law.

9. Children’s Data

Our services are not intended for children unless specifically stated otherwise. We do not knowingly collect personal data from children in a manner that would require parental consent under applicable law. If we become aware that such data has been collected without a valid legal basis, we will take appropriate steps to delete it or obtain the necessary authorisation.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or service developments. Any updated version will apply from the date of publication or from another stated effective date. We encourage customers to review this policy periodically to remain informed about how personal data is handled.

11. Applicability

This Privacy Policy applies to all customers in the area and governs the processing of personal data collected in connection with our services. If any provision of this policy conflicts with mandatory law, the law will prevail to the extent of that conflict. The remaining provisions will continue to apply.

By using our services, you acknowledge that you have read and understood this Privacy Policy.