Ruzo Tech Privacy Policy

Data Controller: Ruzo Tech (trading name of Lucas Rusu, UK sole trader)

Address: 24 Poppyhills Road

Email: ruzotechdev@gmail.com

Phone: +44 7946 425792

If you have questions about this policy or your data, contact us using the details above.

A) Data you provide

• Contact details (name, email, phone)
• Business details (company, role, website, project requirements)
• Message content (enquiries, support requests, project feedback)
• Billing information (billing name/address, invoices, payment status)
• Account/access details you share for integrations (e.g., analytics, hosting, CRM), where necessary

B) Data collected automatically (website usage)

• Device and browser information
• IP address (or shortened/anonymised depending on tool settings)
• Pages viewed, clicks, approximate location, referral source
• Cookies or similar technologies data (see Cookies section)

C) Client website data (hosting/managed)

• If we host/manage your site or provide database features, we may process data in your site environment (e.g., form submissions, customer/user data) on your instructions as part of delivering the service.

A) Respond to enquiries / quotes

• Purpose: reply to messages, assess requirements, provide proposals
• Lawful basis: Legitimate interests (running our business) or steps prior to entering a contract

B) Deliver services

• Purpose: build/maintain your website, provide support, manage hosting/domain where included, perform handover/exports
• Lawful basis: Contract (necessary to perform our agreement)

C) Billing, administration, legal

• Purpose: invoicing, payments, bookkeeping, tax/accounting records, handling disputes
• Lawful basis: Legal obligation and/or Contract

D) Improve website/services

• Purpose: analytics, performance monitoring, debugging, security
• Lawful basis: Legitimate interests (and consent where required for non-essential cookies/tracking)

E) Marketing (optional)

• Purpose: send updates or offers (only if you opt in where required)
• Lawful basis: Consent (withdraw anytime)

• We use cookies and similar technologies to make our site work and (optionally) to analyse usage and improve performance.
• Strictly necessary cookies may be used without consent as they are required for core functionality.
• Analytics/marketing cookies are only used if you consent, unless an exemption applies. You can change preferences anytime using our cookie controls.
• Cookie controls: [LINK TO COOKIE PREFERENCES]
• Cookie list/details: [LINK TO COOKIE POLICY] (optional but recommended)
• Ensure any analytics/marketing tools are blocked until consent is given where required.

5) Who we share data with

• Payment providers (e.g., Stripe) for billing/fraud prevention
• Email/productivity tools (email hosting, ticketing)
• Hosting/domain/CDN providers (for Monthly Development hosting/domain management)
• Analytics providers (only where enabled and consented where required)
• Database/infra providers (where you choose database features)
• Professional advisers (accountants, legal)
• Authorities where required by law
• We do not sell personal data.

6) International transfers

• Some providers may process data outside the UK. We use required safeguards (e.g., standard contractual clauses, vendor security measures).

7) How long we keep data

• Enquiries/quotes (no contract): typically up to 12 months
• Clients: duration of relationship + typically 6 years for accounting/tax
• Monthly Development cancellations: site data retained 1 year for reactivation/handover/export
• Analytics: depends on tool settings (often 14–26 months)
• Retention may be extended to establish/exercise/defend legal claims.

8) Your rights

• Access your data; correct inaccurate data
• Delete data (in some cases)
• Restrict or object to processing (especially for legitimate interests)
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Complain to the UK Information Commissioner’s Office (ICO)

9) Security

• We use reasonable technical/organisational measures (access controls, secure credentials handling, vendor security features).
• No method is 100% secure; we work to reduce risk.

10) Client websites and processor role

• If we host your site or provide database features: you are typically the Data Controller for your customer/user data; we act as Data Processor on your instructions.
• If required, we can provide a Data Processing Addendum covering instructions, confidentiality, sub-processors, security, breach notification, deletion/return.

11–13) Children, changes, contact

• Not intended for children; we do not knowingly collect data from children.
• We may update this policy; latest version will show the updated “Last updated” date.
• Contact: ruzotechdev@gmail.com | Address: 24 Poppyhills Road