Privacy Policy

1. Controller

2. Categories of data

We process only data required to administer the contractual relationship and to deliver the services:

• Business contact details (name, email address, organisation)
• Billing and payment data, processed by Stripe as an independent payment service provider
• Infrastructure access credentials, stored in encrypted form and used solely for service delivery
• Monitoring and operational logs generated in the course of managed services

3. Data minimization

Processing is limited to what is necessary for infrastructure management, invoicing, and Client communication. We do not sell personal data and do not use it for unrelated marketing profiles.

4. Processors

The following processor is engaged to support service delivery:

• Stripe, Inc. — payment collection and subscription administration

Processors are bound by written data-processing terms consistent with Article 28 GDPR.

5. Data-subject rights

Under the GDPR, data subjects may request access, rectification, erasure, restriction, or portability of their personal data, and may object to processing. Requests should be directed to [email protected].

6. Retention

Personal data is retained for the duration of the service relationship and for any additional period required by statutory record-keeping obligations. Infrastructure credentials are deleted within 30 days of subscription termination.