Privacy Policy

1. This Policy

This Privacy Policy explains how SafeData ("we", "us", "our") collects, uses, discloses, and protects your personal data when you use our website, products, and services, including SafeData Backup, SafeData Sync, and SafeData Business (together, the "Services").

This Policy may be amended or updated from time to time to reflect changes in our practices or in applicable law. We encourage you to review this page regularly.

2. Who We Are

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), SafeData is the data controller responsible for your personal data collected in connection with your SafeData account, subscription, and billing.

SafeData's storage and synchronization services are powered by Livedrive, our cloud storage partner. Livedrive processes and stores your backed-up and synced files on our behalf, acting as a data sub-processor. Livedrive's own privacy policy, which governs how they process file data, can be found at livedrive.com/privacy-policy.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Account details: name, email address, username, password.
• Contact details: billing address, country, phone number (if provided).
• Payment details: billing records and payment method information. Card and bank account details are processed directly by our payment providers, Stripe and/or GoCardless — SafeData does not store your full card or bank account number.
• Service usage data: subscription plan, storage usage, device information, login records, and technical data (IP address, browser type, device type) collected when you use our website or apps.
• Your files: the content you choose to back up or sync using the Services. SafeData does not access or review the content of your files; these are stored securely by Livedrive on our behalf.
• Communications: records of your correspondence with our support team.

4. Lawful Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: to provide the Services you have subscribed to, including account creation, billing, and support.
• Legitimate interests: to operate, maintain, and improve our website and Services, and to communicate with you about your account.
• Legal compliance: to meet our legal, tax, and regulatory obligations.
• Consent: where you have given us explicit consent, such as for marketing communications.

5. How We Use Your Personal Data

We use your personal data to:

• Create and manage your SafeData account and your linked Livedrive storage account.
• Process subscription payments and manage billing, including via Stripe and GoCardless.
• Provide customer support and respond to your enquiries.
• Send you important service communications, such as billing notices or changes to our terms.
• Improve our website, products, and Services.
• Comply with our legal and regulatory obligations.

6. Disclosure of Personal Data to Third Parties

We may share your personal data with:

• Livedrive — our storage partner, to provision and operate your Backup, Sync, or Business storage account, and to synchronize your account username, email, and password so your SafeData login and your Livedrive portal login remain consistent.
• Stripe and GoCardless — our payment processors, to securely process your subscription payments. SafeData does not store your full payment card or bank account details.
• Professional advisors — such as our accountants or legal counsel, where necessary, subject to confidentiality obligations.
• Legal and regulatory authorities — where required by applicable law, or to establish, exercise, or defend our legal rights.
• A future business acquirer — in the event that SafeData's business, or part of it, is sold or transferred.

We do not sell your personal data to third parties.

7. International Transfer of Personal Data

Your files are stored by Livedrive within data centers located in the European Economic Area (EEA), in accordance with GDPR requirements. Where any of your personal data is transferred outside the EEA (for example, to our payment processors), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data to a level equivalent to that required under the GDPR.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Your backed-up files are encrypted using AES-256 encryption before being transmitted and stored by Livedrive.

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure. You are responsible for keeping your account password confidential.

9. Data Retention

We retain your personal data for as long as your account is active, or as needed to provide you with the Services. Following closure of your account, your files stored with Livedrive will be deleted in accordance with Livedrive's own data retention practices (currently within 15 days of account closure). We may retain certain billing and account records for longer periods where required by applicable tax or legal obligations.

10. Your GDPR Rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request erasure of your personal data, subject to our legal retention obligations.
• Object to, or request restriction of, our processing of your personal data.
• Request that your personal data be transferred to another provider, where technically feasible.
• Withdraw your consent at any time, where processing is based on consent.
• Lodge a complaint with your local Data Protection Authority.

To exercise any of these rights, please contact us using the details in Section 13 below. We may require proof of identity before processing your request.

11. Cookies

Our website may use cookies and similar technologies to operate correctly and to understand how visitors use our site. You can control cookies through your browser settings. For more detail, please contact us using the details below.

12. Direct Marketing

We may contact you by email regarding service updates or offers that may be relevant to you. You can unsubscribe from marketing communications at any time using the link provided in any promotional email, or by contacting us directly. This will not affect service-related communications necessary for your subscription.

13. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us at:

SafeData
Email: support@safedata.eu

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.