Privacy Policy for Linzila

1. Introduction

Linzila (“we,” “our,” or “us”) respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive (and national implementations), the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and other applicable data-protection laws.

2. Information We Collect

• Personal Information (provided by you)
  Name, email address, phone number, business address, and payment details.
• Service-Specific Information
  Project specifications, artwork, login credentials you voluntarily supply, analytics metrics, and content needed to deliver our web design, development, SEO, digital marketing, and support services.
• Non-Personal / Device Information
  IP address, browser type and version, operating system, referring URLs, pages visited, time on site, and similar usage data collected via cookies & tracking pixels.
• Third-Party Data
  Payment processors, advertising platforms (e.g., Facebook Pixel, LinkedIn Insight Tag), analytics providers (e.g., Google Analytics 4), and social-media networks may supply hashed or aggregated data that we combine with your account.

3. Legal Bases for Processing

We process personal data only when one or more of the following applies:

• Contractual Necessity – to perform a contract or take steps at your request before entering into a contract;
• Consent – for optional marketing communications or non-essential cookies (you may withdraw consent at any time);
• Legitimate Interests – to improve services, defend legal claims, or secure our platform, balanced against your rights and freedoms;
• Legal Obligation – to comply with accounting, tax, or other statutory duties.

4. How We Use Your Information

• Service Delivery – to design, develop, host, maintain, and optimise your website, applications, and SEO campaigns.
• Project & CRM Communication – to send emails/SMS regarding milestones, invoices, and support tickets.
• Billing & Payments – to process payments, issue invoices, and manage subscriptions.
• Marketing – to deliver newsletters or promotional offers (with opt-in consent).
• Analytics & Performance – to understand traffic patterns, improve UX, and measure SEO results.

5. CRM & Automated Notifications

Your name, contact details, and project data are stored in our secure CRM. By engaging our services you agree to:

• Being listed as a customer in the CRM;
• Receiving automated email/SMS alerts for quotes, tasks, and invoices;
• Opting out at any time via the unsubscribe link or by emailing info@linzila.com.

6. Social-Media & Advertising Data

We use Facebook, Instagram, LinkedIn, and Google Ads for retargeting and campaign optimisation. Hashed identifiers may be shared with these platforms. You can adjust ad preferences directly within each service. See their privacy policies for details.

7. Cookies & Tracking Technologies

We employ essential, preference, analytics, and advertising cookies. Full details, retention periods, and opt-out mechanisms are provided in our Cookie Policy. You may disable non-essential cookies via the banner or your browser settings.

8. How We Share Information

• Trusted Service Providers – hosting, email delivery, payment gateways, analytics, and SEO tools under written data-processing agreements;
• Legal Compliance – when compelled by law, subpoena, or court order;
• Business Transfers – in a merger or acquisition, subject to safeguards;
• Partner Programs – limited data shared with technical partners strictly to maintain your project; partners must abide by equivalent security and confidentiality obligations.

9. International Transfers

Where data is transferred outside the European Economic Area, we rely on adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms to ensure equivalent protection.

10. Data Security

• HTTPS encryption for all in-transit data;
• Encrypted backups and restricted server access;
• Regular penetration tests and security patching;
• Role-based access controls and multi-factor authentication for staff.

11. Data Retention

We keep personal data only as long as necessary for the purposes set out above, or as required by tax and accounting laws – typically up to 10 years for financial records. Back-ups are purged on a rolling 30-day cycle.

12. Your Rights

Subject to conditions and exceptions in applicable law, you may:

• Access, rectify, or erase your personal data;
• Restrict or object to processing;
• Receive a portable copy of your data;
• Withdraw consent for marketing or cookies at any time;
• Lodge a complaint with your local supervisory authority (e.g. the Agency for Personal Data Protection of North Macedonia or your EU data-protection authority).

To exercise rights, email info@linzila.com. We will respond within 30 days.

13. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a child has provided personal data, please contact us and we will delete it promptly.

14. Changes to This Policy

We may revise this Privacy Policy to reflect changes in legal requirements or business practices. Updates will be posted here with a new “Effective” date. Material changes will be communicated via email where feasible.

15. Contact