Privacy Policy

Sistemim Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, and safeguard information when you visit sistemim.co.uk or purchase our digital agency, media buying, web development, or software licensing services.

1. Data We Collect

We may collect and process the following categories of personal and corporate data:

• Identity & Contact Data: Name, company name, billing address, email address, and telephone number.
• Financial & Transaction Data: Payment confirmations, billing history, VAT/Tax numbers, and invoice records. Note: We do not store full credit or debit card numbers on our servers; all card transactions are encrypted and processed directly by PCI-DSS compliant payment gateways.
• Technical & Usage Data: IP address, browser type, time zone setting, operating system, and interaction logs on our website.
• Service & Project Data: Account credentials, advertising account IDs, domain records, and assets voluntarily shared by clients for project execution.

2. How We Use Your Data

We use your information strictly for legitimate business and contractual purposes:

• To deliver web/mobile development, digital advertising management, media buying, and software licensing services.
• To issue invoices, process online card payments, and prevent fraudulent transactions.
• To communicate project updates, technical support notices, and administrative messages.
• To comply with UK tax, accounting, anti-money laundering (AML), and regulatory obligations.

3. Legal Basis for Processing

We process personal data under the following legal bases under UK GDPR: (a) performance of a contract with you or your company; (b) compliance with a legal obligation; and (c) our legitimate business interests in operating and securing our digital services.

4. Data Sharing & Third-Party Processors

We never sell your personal data. We only share data with trusted third parties necessary to deliver our services:

• Payment Processors & Financial Institutions: Regulated payment providers to process card payments and bank transfers securely.
• Cloud & Infrastructure Providers: Hosting, DNS, and security providers required to operate our web and software services.
• Advertising Platforms: Google, Meta, or other media networks when managing campaigns explicitly authorized by the Client.

5. Data Retention & Security

We retain client and transaction records for as long as necessary to fulfill the services and for a minimum of six (6) years thereafter to comply with UK HMRC tax and accounting laws. We implement strict SSL/TLS encryption, access controls, and firewall protections to safeguard your data.

6. Your Rights Under UK GDPR

You have the right to request access to, correction of, or erasure of your personal data, as well as the right to restrict or object to processing. To exercise these rights, please contact us using the details below.