Privacy policy

Who is responsible

RDP BUY, Dublin, California, USA, is the controller of the personal data described here. Contact us at contact@rdpbuy.com.

What we collect

• Account data: name, email address, company, billing address, phone number if you give one.
• Order and billing data: services ordered, invoices, payment status and the last digits of a card. Card and wallet details are handled by our payment providers and do not pass through our servers.
• Support data: tickets and messages you send us.
• Technical data: IP address, browser type, pages visited and server logs, used for security and fraud prevention.
• Service data: the IP addresses and resource use of your servers. We do not read the contents of your servers.

Why we use it, and our legal basis

• To provide, bill and support the services you order (contract).
• To prevent fraud and abuse and keep the network secure (legitimate interest).
• To meet tax, accounting and legal duties (legal obligation).
• To send service notices such as invoices and renewals (contract). We send marketing email only if you agree (consent), and you can unsubscribe at any time.

Who we share it with

Payment processors, infrastructure and data-centre providers that host your server, fraud-screening services, email delivery and support tools, and professional advisers, each only as needed to run the service. We may disclose data to authorities when the law requires it. We do not sell your personal data.

International transfers

Your data may be processed in countries outside your own, including the United States. Where required we rely on safeguards such as standard contractual clauses.

Cookies

See our cookie policy.

How long we keep it

Account and invoice records are kept for as long as tax and accounting law requires, usually several years. Support tickets are kept while the account is active and for a limited time after. Server logs are kept for a short period for security. Data on a terminated server is deleted.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to restrict or object to its use, to withdraw consent, and to complain to your data protection authority. California residents may ask what we collect and ask us to delete it, and we do not sell personal information. Write to us to use any of these rights and we will answer within the time the law sets.

Security

We use access controls, encryption in transit and other reasonable measures. No system is perfectly secure, so keep your password private and turn on two-factor authentication where offered.

Children

Our services are not for people under 18 and we do not knowingly collect their data.

Changes

We will post changes on this page and tell you about material ones by email.