Privacy Policy | IOPS Data Protection & GDPR Compliance

1. Introduction

IOPS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website iops.pro. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The Data Controller is IOPS. Contact:

We operate globally and process limited personal data only for communication, analytics, and security purposes.

Personally Identifiable Information (PII): Personally Identifiable Information (PII) refers to any information that can identify an individual, including name, email address, IP address, and device identifiers.

3. Data We Collect

We collect the following types of personal data:

Contact Information: Name and email address when you submit forms or contact us
Technical Data: IP address, browser type, device information, and usage data
Analytics Data: Aggregated website usage statistics without personal identifiers
Communication Data: Messages sent through our contact forms

4. Purpose of Data Processing

We process your personal data for the following purposes:

Communication: To respond to your inquiries and provide customer support
Service Improvement: To analyze website usage and improve our services
Security: To protect our website from spam, fraud, and security threats
Legal Compliance: To comply with applicable laws and regulations

5. Analytics

We use Cloudflare Web Analytics for performance and traffic statistics. It uses no tracking cookies and stores no personal identifiers. We receive only aggregated data.

6. Legal Bases for Processing

Processing activity	Legal basis
Contact form submissions	Contract or legitimate interest
Meeting scheduling via Calendly	Consent or contract
Security and service improvement	Legitimate interest
Marketing emails	Consent

When we rely on legitimate interest, we assess necessity and balance it with your rights. You can opt out at any time.

7. Data Retention Period

Contact form submissions: up to 3 years, for follow-ups or dispute handling.
Server logs and IP data: up to 12 months, for security and debugging.
Marketing contacts: until you unsubscribe or request deletion.

8. Processors and Third-Party Services

Cloudflare

Purpose: web hosting, DNS, CDN, security, and Web Analytics.

Data: IP address, country, URLs, device, browser, and performance data.

Retention: short-term logs for security, aggregated analytics without personal identifiers.

Location: global network.

Transfer safeguard: Standard Contractual Clauses where required.

Privacy: https://www.cloudflare.com/privacypolicy/

Web Analytics: https://developers.cloudflare.com/analytics/web-analytics/

Note: The entire website, including hosting and caching, runs on Cloudflare's infrastructure. All requests and data transmissions are processed through their edge network.

Formspree

Purpose: contact form delivery and spam filtering.

Data: name, email, message content, IP, user agent.

Retention: temporary storage for delivery and spam checks, then deletion.

Location: United States.

Transfer safeguard: Standard Contractual Clauses.

Privacy: https://formspree.io/legal/privacy-policy

Calendly

Purpose: meeting scheduling and reminders.

Data: name, email, booking details, time zone.

Retention: stored for scheduling, deleted on request.

Location: United States.

Transfer safeguard: Standard Contractual Clauses.

Privacy: https://calendly.com/privacy

9. Cookies

Essential cookies operate without consent. We do not set analytics or marketing tracking cookies. Cloudflare Web Analytics uses no cookies. If we add non-essential cookies later, we will request consent.

10. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of Access: You can request copies of your personal data
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data under certain circumstances
Right to Restrict Processing: You can request restriction of processing your personal data
Right to Data Portability: You can request transfer of your data to another service provider
Right to Object: You can object to processing of your personal data
Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent

To access, correct, delete, or restrict processing of your data, email . We respond within 30 days and may verify your identity before acting.

11. Security

All hosting, DNS, and web operations are managed by Cloudflare. HTTPS is enforced. Cloudflare provides DDoS protection, WAF, and bot mitigation. We restrict and log admin access.

12. International Transfers

Because Cloudflare, Formspree, and Calendly process data in global locations, your data may leave your country. These providers use Standard Contractual Clauses to protect personal data during transfer.

13. Children's Data

We do not target or collect data from anyone under 16. If a child submits data, contact and we will delete it.

14. Policy Updates

We post updates here and adjust the date. For major changes, we will show a notice banner or send email before they apply.

15. Contact

Data Controller: IOPS

Email: