Storage Pinner Privacy Policy
This Privacy Policy explains how Storage Pinner collects, uses, shares, and protects personal data in connection with our services. It applies to all Storage Pinner customers and users in our service area who interact with our website, applications, products, and customer support channels. By using Storage Pinner services, you acknowledge that you have read and understood this Privacy Policy.
Scope and Data Controller
Storage Pinner is the data controller for the personal data processed in connection with the use of our services, unless otherwise stated. This Privacy Policy applies to all Storage Pinner customers in our operating area, regardless of whether they access our services online, via mobile applications, or through other contact channels.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on how you use our services.
Identification and contact information: This may include your name, postal address, billing address, and any contact details you choose to provide, such as username or account identifiers.
Account and access information: This includes login credentials such as usernames, password hashes, security settings, and preferences associated with your Storage Pinner account.
Usage and service data: We collect information about how you use Storage Pinner, such as features you access, actions you take within the service, settings you configure, and timestamps related to your activity.
Technical and device information: This may include IP address, browser type and version, operating system, device identifiers, language settings, and other technical information necessary to provide and secure the service.
Payment and transaction information: Where relevant, we process limited payment-related information, such as transaction dates, amounts, and payment status. Full payment card details are generally handled by our payment processors and are not stored by Storage Pinner, except for limited information required for accounting and fraud prevention.
Communications data: If you contact us, we may process the content of your communications and any related metadata, such as the date and time of your message, to respond and keep records of our interactions.
Purposes and Legal Bases for Processing
We process personal data only where we have a lawful basis under the General Data Protection Regulation. Depending on the specific context, we rely on the following legal bases.
Performance of a contract: We process your data to provide, maintain, and administer your Storage Pinner account and services, including registration, authentication, delivering requested features, and providing customer support.
Compliance with legal obligations: We may process your data to comply with legal, regulatory, tax, and accounting obligations, such as retention requirements or responding to lawful requests from public authorities.
Legitimate interests: We process personal data to protect our systems and users from fraud and security threats, to improve and optimize our services, to conduct troubleshooting and diagnostics, and to understand how our services are used. When relying on legitimate interests, we balance our interests against your rights and freedoms and implement safeguards.
Consent: In certain cases, we may rely on your consent, for example for specific optional features or, where required, for certain forms of analytics or marketing communications. When processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
How We Use Your Personal Data
We use personal data only for clear and specified purposes.
Service delivery: To operate the core functionality of Storage Pinner, such as allowing you to create and manage content, store data, and access your account securely.
Account management: To maintain your profile, manage subscriptions, process transactions, and handle billing, refunds, or changes to your plan.
Security and abuse prevention: To authenticate users, detect and prevent fraud, monitor for suspicious or malicious activity, protect the integrity and availability of our systems, and enforce our terms and policies.
Service improvement: To analyze aggregated usage patterns, fix bugs, develop new features, and improve the performance and usability of our services.
Communication with you: To respond to support requests, send important service notifications, inform you about changes to our terms or policies, and, where permitted, provide information about updates relevant to your existing use of the service.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal, accounting, or reporting requirements.
Account data: Basic account and profile information is retained for the duration of your account being active. When you close your account, we will delete or anonymise personal data within a reasonable period, unless retention is required by law or justified by legitimate interests such as dispute resolution.
Transactional and billing data: Records required for tax and accounting purposes are retained in accordance with applicable statutory retention periods.
Technical logs and security data: Logs and security-related information are retained for a limited period that allows us to investigate security incidents, maintain system integrity, and comply with legal obligations.
Where data is no longer needed, we will securely delete or irreversibly anonymise it.
Processors and Data Sharing
We may share personal data with carefully selected third parties who process data on our behalf as data processors. These processors may provide services such as hosting, data storage, analytics, payment processing, customer support tools, and security services.
All processors are bound by contractual obligations that ensure they process personal data only on our documented instructions, implement appropriate technical and organisational measures, maintain confidentiality, and assist us in fulfilling our obligations under data protection law.
We may also share personal data with third parties in the following limited circumstances: when required by law or a valid legal request from public authorities, to protect our rights, property, or safety, or that of our users or others; or in connection with a corporate transaction such as a merger or acquisition, in which case appropriate safeguards will be applied.
We do not sell your personal data.
International Data Transfers
Where personal data is transferred outside the European Economic Area or other regions with data protection laws, we ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses, reliance on adequacy decisions, or other lawful transfer mechanisms designed to ensure an equivalent level of protection for your personal data.
Data Security
We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption where appropriate, system monitoring, regular updates, and staff awareness measures.
Despite our efforts, no system can be completely secure. We maintain procedures to detect, respond to, and notify relevant parties of personal data breaches in accordance with applicable law.
Your Rights Under GDPR
If you are located in the European Economic Area or another region that grants similar rights, you have the following rights in relation to your personal data.
Right of access: You have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data.
Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected.
Right to erasure: In certain circumstances, you may request that we delete your personal data, for example when it is no longer necessary for the purposes for which it was collected or when you withdraw consent where consent was the legal basis.
Right to restriction of processing: You may request that we restrict the processing of your personal data in specific situations, such as while we verify the accuracy of data or assess an objection.
Right to data portability: You may have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible and where the processing is based on consent or contract and carried out by automated means.
Right to object: You may object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds or the processing is required for legal claims.
Right to withdraw consent: Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that our processing of your personal data infringes applicable data protection law.
Children
Storage Pinner is not intended for use by children who are not legally able to enter into a contract in their country of residence. We do not knowingly collect personal data from such individuals. If we become aware that we have collected such data, we will take steps to delete it as soon as reasonably practicable.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the effective date at the top of the policy and, where appropriate, provide additional notice. We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.
Contact and Further Information
If you have questions about this Privacy Policy, our data protection practices, or wish to exercise your data protection rights, you can contact us through the customer support or contact options provided within the Storage Pinner service.
