1. Data controller
The controller of your personal data is 100M Sp. z o.o., based in Poland. Contact: contact@hostready.eu.
2. What data we collect
We collect only data necessary to fulfil your order:
- email address (login, file delivery, contact),
- full name (order identification),
- tax ID and company details (when you tick "I need an invoice"),
- message content (contact form).
3. Legal basis for processing
- Article 6(1)(b) GDPR - performance of a contract (order processing, product delivery).
- Article 6(1)(c) GDPR - legal obligations (accounting, tax law).
- Article 6(1)(f) GDPR - legitimate interest (handling enquiries, analytics).
- Article 6(1)(a) GDPR - consent (newsletter, if you subscribe).
4. Where we store data
- Supabase (EU region, Frankfurt) - orders and account database.
- Vercel (edge, EU preferred) - application hosting and server logs.
- Resend - transactional email delivery.
- Stripe Payments Europe Ltd. (Ireland) - payment processing.
- Baselinker (Poland) - invoicing.
We do not transfer data outside the European Economic Area without applying Standard Contractual Clauses (SCC).
5. How long we keep data
- Order data - 5 years from the end of the tax year (accounting obligation).
- Account data - until the account is deleted or deletion is requested.
- Login codes - automatically expire after 60 minutes.
- Contact messages - up to 12 months after reply.
6. Your rights
You have the right to:
- access your data,
- rectify inaccurate data,
- erase data ("right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- withdraw newsletter consent at any time,
- lodge a complaint with the relevant supervisory authority in your EU country (e.g. UODO in Poland: uodo.gov.pl).
To exercise these rights, write to: contact@hostready.eu. We respond within 30 days.
7. Cookies
Detailed cookie information is available in the Cookie Policy.
8. Policy changes
We reserve the right to update this Policy. Significant changes will be announced on the Service homepage.