Privacy Policy

Last updated: December 2025

1. Introduction

FKM CloudScale Technologies Ltd ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, company name, billing information
• Contact Information: When you fill out forms or contact us
• Payment Information: Billing details (processed securely by third-party payment processors)
• Service Data: Content and data you upload to use our services

3.2 Automatically Collected Information

• Usage Data: How you interact with our services
• Technical Data: IP address, browser type, device information, operating system
• Cookies: See our Cookie Policy for details
• Log Data: Access times, pages viewed, features used

4. How We Use Your Information

We use your personal data for the following purposes:

Purpose	Legal Basis (GDPR)
Provide and maintain our services	Contract performance
Process payments and billing	Contract performance
Send service updates and notifications	Contract performance / Legitimate interest
Customer support	Contract performance / Legitimate interest
Improve our services	Legitimate interest
Security and fraud prevention	Legitimate interest / Legal obligation
Marketing communications (with consent)	Consent
Comply with legal obligations	Legal obligation

5. Sharing Your Information

We do not sell your personal data. We may share your information with:

5.1 Service Providers

• Hosting Services: AWS, DigitalOcean, or similar (data storage)
• Email Services: For transactional and marketing emails
• Analytics: Google Analytics or similar (anonymized where possible)
• Payment Processors: Stripe, PayPal, or bank transfer services

5.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Cooperate with law enforcement

5.3 Business Transfers

In case of merger, acquisition, or sale of assets, your data may be transferred to the new entity.

6. International Data Transfers

We are based in Cyprus (EU). If we transfer data outside the EU, we ensure adequate protection through:

• EU Standard Contractual Clauses
• Adequacy decisions by the EU Commission
• Other appropriate safeguards under GDPR

7. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy:

• Active accounts: Duration of account plus 30 days
• Billing records: 7 years (tax and accounting requirements)
• Marketing data: Until consent is withdrawn
• Legal claims: As required by law

8. Your Rights Under GDPR

If you are in the European Union, you have the following rights:

8.1 Right of Access

Request a copy of the personal data we hold about you.

8.2 Right to Rectification

Request correction of inaccurate or incomplete data.

8.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

Request limitation of how we use your data.

8.5 Right to Data Portability

Receive your data in a structured, machine-readable format.

8.6 Right to Object

Object to processing based on legitimate interests or for marketing purposes.

8.7 Right to Withdraw Consent

Withdraw consent for processing at any time (doesn't affect prior lawful processing).

8.8 Right to Lodge a Complaint

You have the right to complain to your local data protection authority.

9. Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security audits
• Employee training on data protection

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Cookies and Tracking

We use cookies and similar tracking technologies. For detailed information, see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be notified via email or through our service. The "Last updated" date at the top indicates when changes were made.

14. Contact Us

If you have questions about this privacy policy or wish to exercise your rights:

15. Data Protection Authority

If you are in the EU and have concerns about how we handle your data, you can contact your local supervisory authority or the Cyprus Commissioner for Personal Data Protection: