GDPR Compliance

1. Data Controller

2. Lawful Bases for Processing

• Consent: You have given clear consent for us to process your data, such as for a newsletter.
• Contractual Necessity: Processing is needed to fulfill our agreement with you.
• Legal Obligation: We process data to comply with laws, including tax and accounting requirements.
• Legitimate Interests: We process data to improve our services and prevent fraud.

3. Personal Data Collected

• Account Information: Name, email, company.
• Billing Details: Payment method, address.
• Usage Data: IP, device, pages visited.
• Support Records: Messages with our team.

4. How We Use Your Data

• Provide and improve the Service.
• Send account notices and, with consent, marketing communications.
• Ensure security and legal compliance.
• Perform analytics to enhance user experience.

5. Data Sharing & Transfers

We share data with trusted service providers, including hosting, payment, and analytics providers, under strict confidentiality. Transfers outside the EEA or UK are protected by Standard Contractual Clauses.

6. Data Retention

We retain your data as long as your account is active or as required by law. Inactive accounts are purged after 30 days of closure.

7. Your Rights

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Delete your data, also known as the “right to be forgotten.”
• Restriction: Limit our processing of your data.
• Portability: Receive your data in a common format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Revoke consent at any time.

8. Cookies & Tracking

We use cookies for core functionality, analytics, and personalization. Manage your preferences through our cookie banner or browser settings.

9. Security Measures

We implement encryption, access controls, and regular audits to protect your data against unauthorized access and breaches.