Privacy Policy

1. Introduction

This Privacy Policy explains how Site Sentinel (“we”, “our”, or “us”) collects, uses, discloses, and protects your personal data when you interact with us via our website, products, or services. We are committed to ensuring that your privacy is protected and that your personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

2. What Personal Data We Collect

We only collect personal data that is relevant and necessary. This may include:

• Personal Identity Data: first name, last name, username, company name or similar identifier.
• Contact Data: email address, phone number, postal address.
• Account Data: login details, account preferences.
• Transactional Data: payment history, purchases, orders.
• Technical Data: IP address, browser type, operating system, device identifiers, and other technical metadata.
• Usage Data: information about how you use our website, products, or services.
• Marketing and Communications Data: preferences for receiving marketing and communication from us.

We do not collect any special categories of personal data unless explicitly stated and with your consent.

3. How We Collect Your Data

• Directly from you (for example when you fill out forms, sign up, or make a purchase).
• Automatically via your use of our services (for example cookies, analytics).
• From third-party sources (including payment providers, marketing partners, cloud hosting partners), where lawful.

4. Legal Bases for Processing

• Consent: when you have given us clear permission.
• Contractual necessity: to fulfil our obligations under a contract.
• Legal obligation: where processing is required by law.
• Legitimate interests: for purposes necessary for our business operations and not overridden by your rights.
• Completion of services: where processing is required to carry out the services in accordance with the law.

5. Purposes of Processing

We use your personal data to:

• Provide and maintain our services.
• Manage your account and transactions.
• Communicate with you, including customer support.
• Send you administrative or legal notices.
• Personalize your experience on our platform.
• Deliver marketing communications (where permitted).
• Ensure security and prevent fraud.
• Comply with legal obligations.

6. Data Sharing

We may share your personal data with service providers (such as hosting, payment processing, and analytics providers), legal and regulatory authorities where required by law, business partners where necessary to deliver services, and affiliates within our corporate group. All third parties are required to respect the confidentiality of your personal data and process it only for specified purposes and in accordance with data protection laws.

7. International Data Transfers

If we transfer your personal data outside the European Economic Area (“EEA”), we ensure appropriate safeguards are in place, such as transfers to countries with an adequacy decision by the European Commission, the use of Standard Contractual Clauses approved by the EU Commission, or Binding Corporate Rules or other lawful mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and purpose, but we regularly review and securely delete or anonymize data that is no longer needed.

9. Your Rights Under the GDPR

• Right to access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data (“right to be forgotten”).
• Right to restriction — request restriction of processing under certain conditions.
• Right to data portability — request transfer of your data to another provider.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint — with a supervisory authority.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Examples include data encryption, access controls, secure servers, and regular security audits.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when the latest changes were made. Material changes will be communicated to you directly if required.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us by email at privacy@sitesentinel.io.