1. Controller and contact
The data controller for the personal data we process when you use our website and services is [Your Name] trading as Proxellor. You can reach us at support@proxellor.com and at [Your geographic address] for any question about this policy or your data. "Personal data" means information that identifies you. We decide why and how your data is used in line with UK and EU data protection law (UK GDPR and EU GDPR).
2. What data we collect and why
When you browse the site (without signing up) — We collect only what your browser sends to our servers: the page you requested, date and time, amount of data sent, where you came from, browser and operating system, and (where relevant) your IP address, which we may anonymise. We use this to run and improve the site (legal basis: our legitimate interest, Art. 6(1)(f) GDPR). We do not pass it on. We may review it later if we have reason to suspect misuse.
When you contact us — If you use a form or email we use the details you give to reply and to run our systems. Basis: legitimate interest in answering you (Art. 6(1)(f)); if it is about a contract, also contract performance (Art. 6(1)(b)). We delete the data when the matter is closed, unless we must keep it by law.
When you open an account — We use the data you give in the sign-up form to create and run your account, allocate payments, and provide the service (Art. 6(1)(b) GDPR). You can close your account anytime; we then delete your data when we no longer need it and when the law allows, except where we must retain it (e.g. tax or accounting).
When you order — We use your data to perform the contract and to process payment. We share only what is needed with our payment providers (Stripe for card and PayPal, Cryptomus for crypto). Stripe (Stripe Payments Europe Ltd., Dublin) receives payment and order data for card and PayPal. Cryptomus receives wallet and transaction data for crypto. We do not use this data for other purposes.
Payment provider retention: We do not control how long payment providers retain data; see their privacy policies.
Marketing — If you opt in to our newsletter we send you news and offers by email. We use a double opt-in (you confirm by link). We store your IP and time of sign-up to prevent misuse. Basis: consent (Art. 6(1)(a)). You can unsubscribe anytime. If you have bought from us we may email you about similar services; basis: legitimate interest (Art. 6(1)(f)). You can object anytime; we then stop. We may send you necessary messages (e.g. renewals, payment confirmations, changes to terms) which you cannot opt out of.
3. Hosting and other service providers
We use hosting and related services to run the website. Those providers process data on our instructions. We have contracts with them where the law requires it so your data is protected.
Disclosure for law and abuse. We may disclose your personal data to law enforcement, courts, regulators, or other competent authorities when we are required or permitted to do so by law. We may also retain and disclose data when we reasonably believe it necessary to prevent or investigate abuse, fraud, or illegal use of our service, or to protect our rights or the rights of others. Such disclosure may be made without your consent where the law allows.
4. Cookies and similar technologies
We use cookies and similar technologies (e.g. local storage for session/auth) to make the site work. Strictly necessary cookies (e.g. session, authentication) do not require consent under PECR. Any non-essential cookies (e.g. analytics, preferences) are used only with your prior consent. Where cookies or similar tech process personal data the lawful basis is contract, consent, or legitimate interest (Art. 6(1)(b), (a), or (f) GDPR). You can set your browser to warn you and to accept or block cookies; blocking some may limit what the site can do.
ICO guidance on cookies: https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/guidance-on-the-use-of-cookies-and-similar-technologies/
5. Other websites and tools
We may use third-party services (e.g. fonts, security or analytics tools) that process data. Where they do, we use a proper legal basis and, where needed, data-processing agreements. If you ask we can give more detail about specific providers. If data goes outside the UK or EEA we use safeguards (e.g. adequacy decisions, standard contractual clauses, or the EU–US Data Privacy Framework where it applies).
6. How long we keep your data
We keep data only as long as we need it for the purpose or as the law requires. Consent-based data until you withdraw consent; contract data until the contract is done and retention periods have passed; legitimate-interest data until you object or we no longer need it; marketing data until you object. We may retain data longer when required for legal proceedings, law enforcement or regulatory requests, abuse investigations, or to establish, exercise, or defend legal claims. After that we delete or anonymise it.
7. Your rights
Under UK and EU GDPR you have the right to:
- Access (Art. 15): ask for a copy of your personal data
- Rectification (Art. 16): have inaccuracies corrected
- Erasure (Art. 17): ask for deletion in certain cases
- Restriction (Art. 18): ask us to limit how we use your data in certain cases
- Portability (Art. 20): receive your data in a structured, machine-readable format where it applies
- Object (Art. 21): object to processing based on legitimate interests; we stop unless we have overriding reasons
- Object to marketing: object to direct marketing at any time; we then stop
- Withdraw consent: where we rely on consent, you can withdraw it anytime
- Complain: lodge a complaint with a supervisory authority (e.g. the ICO in the UK or the authority in your country)
To use these rights contact support@proxellor.com. We will respond within one month (or inform you if we extend by up to two further months for complex or multiple requests).
You can also complain to the UK Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/
8. Security
We use technical and organisational measures (including SSL/TLS on the site) to protect your data. No system is completely secure; we do our best to keep your data safe.
9. Changes and contact
We may update this policy. The current version is on our website. For questions or to use your rights: support@proxellor.com.
For questions, contact support@proxellor.com.