Privacy Policy

Data controller

APIPLANT LTD (Peyia, Paphos, Cyprus) controls the personal data collected through apiplant.com and related service pages. Our Data Protection Officer is Federico Rampazzo and can be reached at [email protected].

Data we collect

• Contact data: name, email address, company name, and project details you send through contact forms, email, or sales conversations.
• Client and service data: hosting preferences, domain details, technical notes, deployment instructions, and support history needed to deliver our services.
• Billing data: subscription plan, transaction identifiers, billing country, VAT information, and payment status. Full card details are handled directly by Paddle and are not stored by us.
• Marketing data: newsletter preferences, campaign interactions, and your consent records where you opt in to receive updates.
• Technical data: IP address, browser and device information, cookie preferences, and security logs required to protect the site and services.

Purposes, legal bases, and retention

• Contact and quote requests: we use your details to respond to enquiries, prepare proposals, and discuss projects. Legal basis: pre-contract steps and legitimate interests. Retention: up to 24 months after the last meaningful contact.
• Client onboarding and hosting: we process data to provision hosting, maintain websites, provide support, and manage the service relationship. Legal basis: contract. Retention: for the duration of the service and up to 7 years afterward for contractual, accounting, and dispute purposes.
• Billing and fraud prevention: we use transaction data to process payments, issue invoices, handle refunds, and meet tax obligations. Legal basis: contract and legal obligation. Retention: up to 10 years where required by tax or accounting law.
• Newsletter and marketing: where you opt in, we use your contact details to send product, company, and service updates. Legal basis: consent. Retention: until you unsubscribe or after 24 months of inactivity, whichever comes first.
• Security, analytics, and reliability: we use logs, diagnostics, and consented analytics to secure the website and improve performance. Legal basis: legitimate interests, and consent where cookies require it. Retention: security logs for up to 90 days, analytics and consent records for up to 12 months unless a longer period is required to demonstrate compliance.

Sharing and processors

We share personal data only with providers who help us operate the website and deliver services, including Paddle for payments and tax, email delivery providers, infrastructure and hosting providers, analytics tools used with consent, and professional advisers where legally necessary. We do not sell your personal data.

Where data is transferred outside your country, we rely on appropriate safeguards such as standard contractual clauses or equivalent lawful transfer mechanisms.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or objection to processing, and you may withdraw marketing consent at any time. You may also lodge a complaint with your local supervisory authority.

To exercise your rights, contact Federico Rampazzo at [email protected].

Contact

APIPLANT LTD · Peyia, Paphos, Cyprus · [email protected] · DPO: [email protected]