Privacy Policy for Linzila

Privacy Policy

Linzila – Design & Development (“Linzila”, “we”, “our”, “us”) respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive and national implementations, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable data-protection laws.

1. Who We Are & Roles

Linzila – Design & Development, Ul. 101 Br 1, 1211 Dobroshte, North Macedonia (info@linzila.com), is the controller for our own marketing, sales, and website operations. For client services (e.g., hosting, maintenance, development) we usually act as a processor of the Client or Project Partner’s data under a Data Processing Agreement (DPA). Where we determine purposes and means (e.g., security logging), we act as a controller.

2. Information We Collect

• Personal Information you provide: name, email, phone, business address, billing details; project briefs/specifications; credentials you voluntarily supply (e.g., CMS, hosting).
• Service-Specific Information: artwork and content you upload; analytics and performance metrics necessary to deliver design, development, hosting, maintenance, and SEO services.
• Device/Usage Data: IP address, device and browser type, OS, referring URLs, pages viewed, engagement time, events—collected via cookies, pixels, and similar technologies.
• Third-Party Data: payment processors, advertising platforms (e.g., Meta/Facebook Pixel, LinkedIn Insight Tag, Google Ads), analytics providers (e.g., Google Analytics 4) may supply hashed or aggregated data that we combine with your account.
• Sensitive data: we do not intentionally collect sensitive personal information. If exceptional use is necessary (e.g., identity verification), we will limit processing to what is strictly required.

3. Legal Bases (GDPR/EEA/UK)

• Contractual necessity – to perform or prepare a contract with you.
• Consent – for non-essential cookies and direct marketing; you can withdraw at any time.
• Legitimate interests – to secure our services, improve user experience, defend legal claims (balanced against your rights).
• Legal obligation – to meet accounting, tax, and regulatory duties.

4. How We Use Data

• Service delivery: design, development, deployment, hosting, maintenance, SEO and related support.
• Project & CRM communications: quotes, milestones, task updates, invoices, renewals.
• Billing & payments: charge processing, fraud prevention, collections.
• Marketing (opt-in): newsletters, product updates, offers (you can unsubscribe at any time).
• Analytics & performance: to understand traffic and improve UX, reliability, and outcomes.
• Security: logs and access controls to prevent, detect, and respond to incidents.

5. CRM & Automated Notifications

Your contact details and project data may be stored in our secure CRM. By engaging our services, you agree to: (i) being listed as a customer in the CRM; (ii) receiving automated email/SMS alerts for quotes, tasks, and invoices. You can opt out of non-essential communications via the link provided or by emailing info@linzila.com.

6. Social Media, Ads & Retargeting

We use Meta (Facebook/Instagram), LinkedIn, Google Ads, and similar platforms for audience measurement and retargeting. Hashed identifiers may be shared with these platforms. You can adjust ad preferences within each service and manage consent via our cookie banner.

7. Cookies & Similar Technologies

We use essential, preference, analytics, and advertising cookies. Full details (purposes, lifetimes, providers) and opt-out tools are provided in our Cookie Policy. You can manage non-essential cookies via the banner or browser settings. We honor Global Privacy Control (GPC) signals where legally required.

8. How We Share Information

• Processors/Subprocessors: hosting, email delivery, CRM, billing, analytics, and SEO tools under written data-processing terms.
• Legal disclosures: when required by law, subpoena, or court/authority order.
• Business transfers: in a merger, acquisition, or asset sale, subject to safeguards.
• Partner programs: limited data sharing with technical partners strictly to maintain your project, bound by confidentiality and security obligations.

9. International Transfers

Where data is transferred outside the EEA/UK, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful mechanisms, and implement supplementary measures where appropriate.

10. Security Measures

• HTTPS/TLS for data in transit
• Encrypted backups and restricted server access
• Regular patching and vulnerability management
• Role-based access controls and multi-factor authentication
• Incident response procedures and staff confidentiality obligations

11. Retention

We keep personal data only as long as necessary for the purposes above and/or as required by law. Typical retention: up to 10 years for financial records; project backups on a rolling 30-day cycle unless contractual obligations require longer periods. When retention expires, we securely delete or anonymize data.

12. Your Rights (EEA/UK)

Subject to legal limitations, you may request: access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. To exercise rights, email info@linzila.com. You can also lodge a complaint with your supervisory authority (e.g., the Agency for Personal Data Protection of North Macedonia or your local EU authority).

13. California & U.S. State Notices

Notice at Collection (CPRA): We may collect the following categories: identifiers (name, email, IP), commercial information (billing), internet/network activity (analytics), geolocation (approximate), and inferences (audience segments). We do not knowingly collect precise geolocation, biometric, or education records.

• Sale/Share: We do not sell personal information for money. Some advertising and analytics may be considered “sharing” for cross-context behavioral advertising. You can opt out via our cookie banner or a “Do Not Sell or Share My Personal Information” link where provided; we honor GPC signals where required.
• Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those permitted by law.
• Rights: California residents may request access, deletion, correction, and opt-out of sale/sharing; limit use/disclosure of sensitive personal information; and be free from discrimination for exercising rights. If we deny a request, you may appeal by replying to our decision email or contacting info@linzila.com.

14. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a child has provided personal data, contact us and we will delete it promptly.

15. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects about you.

16. Your Obligations as Client or Project Partner

If you provide personal data of third parties (e.g., customers, staff) to us, you represent that you have a lawful basis to do so and that you will provide appropriate privacy notices to those individuals. You must keep credentials and access tokens secure and notify us immediately of any suspected compromise.

17. Data Breach Notification

In the event of a personal-data breach affecting your data for which we are a controller or processor, we will notify you without undue delay in accordance with applicable law and our contractual obligations, and cooperate on required notifications and remedial actions.

18. Third-Party Links

Our website may contain links to third-party sites and services. Their privacy practices are governed by their own policies; we are not responsible for their content or practices.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. We will post the updated version with a new effective date and, where appropriate, notify you by email or site notice.

20. Contact & DPO

Linzila – Design & Development
Ul. 101 Br 1, 1211 Dobroshte, North Macedonia
Email: info@linzila.com
Data Protection Officer: info@linzila.com