política de privacidad

1. Introduction and Data Controller

Welcome to Illumaze. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Illumaze is the "Data Controller" of your personal data.

2. Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity and Contact Data: First name, last name, email address, telephone number, and billing address.
• Financial and Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us. (Note: We do not store full credit card numbers; these are handled securely by our payment processor).
• Technical and Usage Data: IP address, login data, browser type and version, time zone setting, and operating system, as well as information about how you use our website and services.

3. Lawful Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we rely on the following lawful bases:

• Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., provisioning a server or registering a domain).
• Legitimate Interests: Where it is necessary for our legitimate business interests (e.g., network security, fraud prevention, and service improvement) and your interests and fundamental rights do not override those interests.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., tax reporting).

4. Data Sharing and Third-Party Processors

We do not sell your personal data. We may share your data with trusted third parties who process data on our behalf strictly to deliver our services. These include:

• Payment Processors: Such as Stripe, to securely process your transactions.
• Infrastructure Providers: Such as domain registrars (e.g., Openprovider) and DNS providers (e.g., CloudDNS) to fulfill your specific service requests.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

5. International Data Transfers

Some of our external third parties may be based outside the United Kingdom (UK) or the European Economic Area (EEA). If we transfer your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented, such as utilizing the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs).

6. Data Security and Retention

We have put in place appropriate security measures (including SSL encryption, secure server environments, and access controls) to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we must keep basic information about our customers for tax purposes for a designated number of years after they cease being customers.

7. Your Legal Rights

Under the UK GDPR, you have rights in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request the restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party (Data Portability).

You can exercise most of these rights directly through your Client Portal. If you feel that we have not processed your data in accordance with the law, you also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

8. Cookies

Our website uses cookies to distinguish you from other users of our website, keep you securely logged in, and provide a seamless experience. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or wish to exercise your legal rights, please reach out to our Data Protection Officer at dpo@illumaze.com.