Privacy Policy

LENEEX CLOUD LTD ("Leneex", "we", "us") is a company registered in the Republic of Cyprus and handles personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cypriot Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data (Law 125(I)/2018).

This policy applies to the website leneex.com (the "Website"), the client area and all our Services. Terms not defined here have the meaning given in our Terms and Conditions.

1. Who We Are

The data controller responsible for your personal data collected through the Website and the Services is LENEEX CLOUD LTD, with its registered office at Themistokli Dervi, 41, HAWAII NICOSIA TOWER, 2nd floor, Flat/Office 201, 1066, Nicosia, Cyprus. You can contact us about privacy matters through the ticket system in the client area.

2. What Data We Collect

2.1. Data you give us

• Account data: name, e-mail address, phone number, postal address, country, company name and tax number (if applicable), login credentials.
• Billing data: billing address, order and invoice history, and payment details. Card payments are processed by our payment providers; we do not store full card numbers.
• Verification data: where needed to prevent fraud or comply with the law, we may ask for a copy of an identity document or proof of payment method.
• Domain registration data: the contact details required by registries and ICANN for domain holders (registrant, administrative, technical and billing contacts).
• Communications: the content of support tickets, e-mails, complaints, abuse reports and any other messages you send us.

2.2. Data we collect automatically

• Technical data: IP address, browser type and version, device and operating system, language settings, time zone.
• Usage data: pages visited, login times, actions in the client area, referring pages.
• Service logs: server, network, access and security logs generated when you use the Services.
• Cookies: as described in our Cookie Policy.

2.3. Data from third parties

We may receive information from payment providers (for example, confirmation of payment and fraud-check results), domain registries and registrars, and fraud-prevention services.

2.4. Customer Content

We do not access or use the content hosted on your Services (websites, files, databases, e-mails) for our own purposes. We process it only as necessary to provide the Services, on your instructions, or where required by law or to investigate abuse. If your Customer Content contains personal data of other people, you act as the data controller for that data and are responsible for processing it lawfully, and Leneex acts as your data processor. A Data Processing Agreement under Article 28 GDPR is available on request through the client area.

3. Why We Use Your Data

We use personal data for the following purposes:

We will not use your data for a purpose that is unrelated to the purposes above without informing you and, where required, asking for your consent.

4. Who We Share Your Data With

We do not sell your personal data. We share it only where necessary:

• Payment providers — to process payments and prevent fraud;
• Domain registries and registrars — to register and manage domain names, as required by their rules and ICANN policies;
• Certificate authorities — to validate and issue SSL certificates;
• Infrastructure providers — data centres and network providers that host our equipment;
• Service providers — e-mail delivery, support desk, analytics and similar tools, which process data on our behalf and under our instructions;
• Authorities and legal requests — law enforcement, courts and regulators, where we are legally required or where disclosure is necessary to prevent crime or protect the rights and safety of Leneex, our customers or others;
• Abuse reporters — in limited cases, we may confirm to the reporter of abuse that action has been taken, without disclosing your personal data unless required by law;
• Business transfers — to a buyer or successor if our business is reorganised, merged or sold, subject to this policy.

5. Domain Registration Data (WHOIS)

When you register a domain, registries and ICANN rules may require some contact data to be published in public WHOIS/RDAP databases or made available to parties with a legitimate interest. This is governed by the rules of the relevant registry and is outside our control.

6. International Transfers

Some of our servers, partners and service providers may be located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we do so only to countries recognised by the European Commission as providing an adequate level of protection, or on the basis of appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request more information about these safeguards through the client area.

7. How We Protect Your Data

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS), access controls based on the need-to-know principle, password hashing, network protection, monitoring and regular updates of our systems. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the relevant authorities of a data breach where required by law.

You can help protect your account by using a strong unique password, enabling two-factor authentication where available, and keeping your software up to date.

8. Your Rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data (most account details can be updated directly in the client area);
• delete your data, unless we must keep it for legal, tax, security or contractual reasons;
• restrict or object to certain processing, including direct marketing;
• withdraw consent at any time where processing is based on consent, without affecting processing already carried out;
• data portability — receive the data you provided to us in a structured, commonly used and machine-readable format;
• lodge a complaint with a supervisory authority — in Cyprus, the Commissioner for Personal Data Protection (www.dataprotection.gov.cy), or the data protection authority of the EU country where you live or work.

To exercise these rights, please open a ticket in the client area. We may need to verify your identity before acting on your request. We will respond within one month of receiving your request. Where a request is complex or we receive many requests, this period may be extended by up to two further months, in which case we will inform you. Requests are handled free of charge, unless they are manifestly unfounded or excessive.

9. Marketing

We will send you marketing messages only where you have agreed to receive them or where permitted by law. You can unsubscribe at any time using the link in any marketing e-mail or in your client area settings. Service messages related to your account, billing and security are not marketing and will continue to be sent while you use our Services.

10. Children

Our Services are not intended for persons under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-Party Websites

The Website may contain links to third-party websites. We are not responsible for their content or privacy practices, and we recommend that you read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Website with a new "Last updated" date. If the changes are significant, we will notify you by e-mail or through the client area.

13. Contact Us

For any questions about this Privacy Policy or your personal data:

• Data controller: LENEEX CLOUD LTD
• Registered office: Themistokli Dervi, 41, HAWAII NICOSIA TOWER, 2nd floor, Flat/Office 201, 1066, Nicosia, Cyprus
• Website: leneex.com
• Privacy requests: through the ticket system in the client area