Privacy Policy
1. Data controller
The controller of your personal data is SmartBytes.
- Trading name: SmartBytes
- Registered office: Pyli Trikala, 42032, Greece
- Email: info@smartbytes.cloud
- Phone: +30 2431 00 1111
Processing follows Regulation (EU) 2016/679 (GDPR) and Greek law 4624/2019.
2. Data we collect
- Contact form: name, email, phone, service of interest, message.
- Order: name, email, phone, company, domain, plan and billing cycle.
- Payment: transaction and subscription identifiers from Stripe. We never receive or store card details.
- Hosting account: username, subscription details and resource usage figures.
- Technical logs: IP address, timestamp and user agent, for security and abuse prevention.
3. Purposes and legal bases
- Performance of the contract (Art. 6(1)(b)): creating and running your account, support, billing.
- Legal obligation (Art. 6(1)(c)): issuing and retaining tax documents.
- Legitimate interests (Art. 6(1)(f)): infrastructure security, fraud and abuse prevention, rate limiting.
- Consent (Art. 6(1)(a)): messages sent through the contact form.
4. Recipients and processors
- Stripe Payments Europe, Ltd. (Ireland) — payment processing.
- IONOS SE (Germany) — data centre infrastructure.
- Google Ireland Ltd. — backup storage, where used.
We do not sell or rent your data. Access is limited to team members who need it to deliver the service.
5. Where your data is held
Infrastructure and data centres are located within the European Union and certified to ISO/IEC 27001. Where a processor handles data outside the EEA, this is done under the European Commission Standard Contractual Clauses.
6. Retention
- Contact form messages: 24 months.
- Order and subscription records: for the duration of the relationship and thereafter as tax law requires.
- Tax documents: as required by law.
- Technical logs and security counters: up to 12 months.
7. Cookies and local storage
This site uses no tracking, advertising or third-party analytics cookies.
- Local storage: remembers only your light or dark theme choice. It stays on your device and is never transmitted.
- Admin session cookie: strictly necessary, created only when an administrator signs in to the management page.
- Stripe: when you continue to the payment page, Stripe may set its own cookies to secure the transaction, under its own policy.
Because no non-essential cookies are used, no consent banner is shown.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and may withdraw consent at any time.
To exercise them, write to info@smartbytes.cloud. We respond within one (1) month.
You may also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 11523 Athens, www.dpa.gr.
9. Security
We apply encryption in transit (HTTPS with HSTS), a strict Content Security Policy, rate limiting, account isolation and regularly updated software.
Credentials are never stored in readable form. Hosting account passwords are generated, sent and not retained by us.
10. Changes
This policy may be updated. The version in force carries the date shown at the top of the page.