Privacy Policy

1. Introduction

Infinity Cloud System LIMITED ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in England and Wales under company number 17131879, with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

For the purposes of UK GDPR, the data controller is:

3. Information We Collect

3.1 Personal Information

We may collect the following personal information:

• Name and contact details (email address, phone number)
• Company name and business information
• Billing and payment information (processed securely through Stripe)
• Communication preferences
• Information provided in forms, inquiries, or service requests

3.2 Technical Information

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies

3.3 Payment Information

Payment processing is handled by Stripe, our third-party payment processor. We do not store your complete credit card information. Stripe collects and processes payment data in accordance with PCI-DSS requirements. Please refer to Stripe's Privacy Policy for more information on how they handle your payment data.

4. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve our IT consultancy services
• Contract Performance: To fulfill our contractual obligations and deliver purchased services
• Payment Processing: To process transactions and send payment confirmations
• Communication: To respond to inquiries, provide customer support, and send service updates
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Business Operations: To analyze usage patterns and improve our website and services
• Marketing: To send promotional materials (only with your consent, and you may opt out at any time)

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our service agreements with you
• Legitimate Interests: For business operations, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where you have given explicit consent for specific processing activities

6. Data Sharing and Disclosure

We may share your personal information with:

6.1 Service Providers

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Hosting Providers: For website hosting and data storage
• Email Service Providers: For communication and newsletter delivery
• Analytics Providers: For website analytics and performance monitoring

6.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

7. International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers

Stripe may process payment data in various jurisdictions. Please refer to Stripe's Privacy Policy for details on their international data transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Service Data: For the duration of our business relationship and up to 6 years thereafter for legal and accounting purposes
• Marketing Data: Until you withdraw consent or request deletion
• Technical Data: Typically retained for 12-24 months
• Financial Records: Retained for 6 years in compliance with UK tax and accounting regulations

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at finance@infinitycloudsystemlimited.com. We will respond within one month of receiving your request.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure payment processing through PCI-DSS compliant providers (Stripe)

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

You have the right to lodge a complaint with the UK's supervisory authority for data protection: