Privacy policy

DRAFT – pending legal review. Controller details, retention periods and processors must be confirmed before launch.

What we collect

• Account details: name, company, email, phone, VAT number and billing address.
• Project documents you upload and the deliverables we produce.
• Payment records (card payments are processed by Stripe; we never see or store your card number).

How we use it

To provide the service you ordered, communicate with you about your order, issue invoices and meet legal obligations. Your documents may be processed by automated tools, including AI services under contract with us that do not use your data for training.

Retention

Project documents are deleted [X months] after delivery unless you ask us to keep them. Invoices are kept as required by law.

Your rights

Under GDPR you can access, correct or delete your personal data and object to certain processing. Contact us via the contact page. You may also complain to the Data Protection Commission.

Controller

BOQ Online [registered business name and address to be confirmed].