Privacy Policy

1. Information We Collect

We collect information you provide directly, and data generated through your use of our services:

• Contact & Business Information: name, email, phone, company, and project details
• Communications: messages, inquiries, and support requests
• Usage Data: IP address, browser type, and pages visited
• Payment Data: processed via PayMob, our PCI DSS-compliant gateway. We never store full card numbers or CVV codes — only tokenized references for billing and reconciliation.

2. How We Use Your Information

We use this data to:

• Deliver, maintain, and improve our services
• Respond to inquiries and provide support
• Send service updates, with your consent where required
• Analyze usage to improve the website
• Meet legal and regulatory obligations
• Process payments and refunds

Legal Basis (GDPR): contract performance, your consent (withdrawable at any time), our legitimate interests, or compliance with legal obligations.

3. Data Sharing

We do not sell your personal information. We share it only with:

• Service providers who support our operations, such as hosting, analytics, and email
• Authorities, where required by law or to protect our rights
• A successor entity, in the event of a merger, acquisition, or asset sale

4. Data Retention

We retain data only as long as necessary:

• Contact and communication data: duration of our business relationship plus 3 years
• Financial and payment records: per applicable tax, financial, and anti-money laundering regulations
• Usage and analytics data: 26 months from collection
• Account information: deleted within 90 days of account closure

Data no longer needed is securely deleted or anonymized.

5. Data Security

We use encryption, access controls, and secure infrastructure to protect your data from unauthorized access, loss, or misuse. No method of transmission or storage is completely infallible, but we work continuously to minimize risk.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Opt out of marketing communications
• Receive your data in a portable format
• Restrict or object to processing, or withdraw consent at any time (GDPR)
• Lodge a complaint with your local data protection authority
• Request disclosure or opt out of sale of personal information (CCPA) — we do not sell personal data, and you will not be discriminated against for exercising these rights

To exercise these rights, contact us at contact@sia-tech.org or our Data Protection Officer at dpo@sia-tech.org. We will respond within the timeframe required by applicable law.

7. Cookies

We use cookies to run the site, understand usage, and remember your preferences. Strictly necessary cookies keep the site functioning and cannot be disabled; analytics and marketing cookies are only deployed with your consent, which you can manage anytime via our cookie settings or browser controls.

• Strictly Necessary: required for the site to function, such as session management and security
• Analytics & Performance: help us understand how visitors use our site, e.g. Google Analytics
• Marketing & Targeting: used to deliver relevant ads and measure campaign performance

8. International Data Transfers

Your data may be processed outside your country of residence, with safeguards in place consistent with this policy.

Payment and financial transaction data is processed through PayMob in accordance with applicable data localization requirements.

PCI DSS Compliance: our payment infrastructure is PCI DSS compliant. Card data is tokenized through PayMob's secure gateway — we do not store sensitive cardholder data.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from children, and will delete any such data promptly if identified.

10. Data Breach Notification

We will notify the relevant data protection authority of any breach posing a risk to your rights, within the timeframe required by law. Where the risk is high, we will also notify affected individuals without undue delay.

11. Data Protection Officer

Our Data Protection Officer oversees our compliance with data protection law and can be reached at:

• dpo@sia-tech.org

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected here, with an updated "Last Updated" date.

13. Data Processing Agreement

Clients requiring a signed Data Processing Agreement (DPA) as a data controller may request one at contact@sia-tech.org.

14. Contact Us

Questions about this Privacy Policy or our data practices: