Privacy Policy

Last Updated: 15 January 2025

SfilaPoste ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://sfilaposte.pro or use our audio and video equipment rental and sales services.

By accessing or using our website and services, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Fill out contact forms or rental enquiry forms
• Make a purchase or rental reservation
• Subscribe to our newsletter or marketing communications
• Create an account on our website
• Contact us via email or telephone

This information may include:

• Full name (first and last name)
• Email address
• Telephone number
• Postal address
• Payment information (processed securely through third-party payment processors)
• Project details and equipment preferences
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits
• Device identifiers

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device. We use:

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how visitors interact with our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements

You can manage your cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect website functionality.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Process equipment rental and purchase requests
• Communicate regarding your bookings and orders
• Provide customer support and technical assistance
• Arrange equipment delivery and collection
• Process payments and issue invoices

2.2 Business Operations

• Maintain and improve our website functionality
• Analyse website usage and user behaviour
• Develop new services and features
• Manage our equipment inventory
• Comply with legal and regulatory requirements

2.3 Marketing and Communications

• Send promotional emails about new equipment, special offers, and services (with your consent)
• Provide relevant content and resources
• Conduct surveys and market research
• Personalise your website experience

2.4 Legal and Security

• Prevent fraud and unauthorised access
• Enforce our Terms and Conditions
• Respond to legal requests and prevent harm
• Protect our rights, property, and safety

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contractual Necessity: Processing necessary to fulfil our rental and sales agreements with you
• Legitimate Interests: Processing necessary for our business operations, fraud prevention, and service improvement
• Consent: Where you have provided explicit consent for marketing communications or optional data processing
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors (for secure transaction processing)
• Hosting and cloud storage providers
• Email marketing platforms
• Analytics services
• Delivery and logistics companies

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or security issues
• Protect the safety of our customers and the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Specific retention periods:

• Customer Account Information: Retained while your account is active and for 7 years after closure for tax and legal purposes
• Transaction Records: Retained for 7 years in compliance with UK tax legislation
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Website Analytics: Aggregated and anonymised after 26 months

After the retention period expires, we securely delete or anonymise your personal information.

6. Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

6.1 Right to Access

You can request a copy of the personal information we hold about you.

6.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

6.3 Right to Erasure

You can request deletion of your personal information in certain circumstances.

6.4 Right to Restrict Processing

You can request that we limit how we use your personal information.

6.5 Right to Data Portability

You can request a copy of your personal information in a structured, commonly used format.

6.6 Right to Object

You can object to our processing of your personal information for direct marketing or legitimate interests.

6.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure and firewalls
• Regular security audits and updates
• Access controls and authentication protocols
• Staff training on data protection
• Secure backup systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will delete it immediately.

10. International Data Transfers

Your personal information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to registered users. The "Last Updated" date at the top of this policy indicates when it was last revised.

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us using the information above. We will investigate and respond to your enquiry promptly.

13. Complaints to Regulatory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal information properly: