What personal data does PouyaWeb collect?

Depending on how you use our website, we may collect contact details, account information, usage data, device data, analytics data, and communications you send to us via forms or email.

What are the legal bases for processing?

We process personal data under GDPR Art. 6 based on consent (e.g., analytics/marketing cookies), performance of a contract, legitimate interests (e.g., site security, service improvement), and compliance with legal obligations.

How can I exercise my privacy rights?

You may request access, rectification, erasure, restriction, objection, or data portability as applicable. Contact us via the details below. Where processing relies on consent, you can withdraw it at any time.

Privacy Policy

About this Notice

This Privacy Policy explains how PouyaWeb (“we”, “us”, or “our”) collects and uses your personal data when you access pouyaweb.io and related pages. It also outlines your rights and how to contact us.

For information about our use of cookies and similar technologies, please see our Cookie Policy.

Data Controller

The data controller responsible for your personal data is PouyaWeb. If you have questions or requests, contact us via the details in the Contact Us section below.

Personal Data We Collect

Category	Examples	Purpose	Retention
Contact & Identity	Name, email, phone, company, messages sent via contact/quote forms	Responding to inquiries, providing services, client onboarding	12–24 months after last interaction, unless required longer
Usage & Device	IP address, device/browser, pages visited, time on page	Site security, performance, analytics and optimization	Up to 24 months (analytics)
Account & Transactions	Login data, service history, invoices (if applicable)	Account management, billing, legal compliance	Up to 6–10 years for tax/legal obligations
Marketing Preferences	Consent records, cookie choices	Recording consent status and preferences	12–24 months

Sources of Data

Directly from you (forms, emails, support requests, contracts).
Automatically via cookies and similar technologies (see Cookie Policy).
From service providers acting on our behalf (e.g., analytics, hosting, security).

Legal Bases for Processing (GDPR)

Consent — for analytics/marketing cookies or newsletters (Art. 6(1)(a)).
Contract — to provide services you request or pre-contractual steps (Art. 6(1)(b)).
Legitimate Interests — to secure and improve our services, defend legal claims (Art. 6(1)(f)), balanced against your rights.
Legal Obligations — accounting, tax and compliance requirements (Art. 6(1)(c)).

How We Use Personal Data

To operate, maintain, and secure our website and services.
To respond to inquiries, provide quotes, and deliver projects.
To analyze site usage and improve performance and content.
To personalize or measure marketing where consented.
To comply with laws and enforce our agreements.

Cookies, Analytics & Marketing

We use cookies as described in our Cookie Policy. Where applicable, we use Google Analytics 4 and may use Meta Pixel or Google Ads for measurement. These tools place cookies that help us understand usage and campaign effectiveness. You can manage your consent at any time via the on-site cookie controls.

Sharing & International Transfers

We may share personal data with trusted service providers (e.g., hosting, analytics, email delivery, payment processors) under contracts that require them to protect your data. Data may be processed outside your country; where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent measures.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are indicated in the table above.

Your Rights

Depending on your location and applicable laws, you may have the following rights: access, rectification, erasure, restriction, objection, and data portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, use the contact details below. We will respond in accordance with applicable laws and within the required timelines.

Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. While no method of transmission or storage is completely secure, we continuously improve our safeguards.

Children’s Privacy

Our website and services are not intended for children under the age of 13 (or the age defined by local law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us via the contact page.

Changes to this Policy

We may update this Privacy Policy from time to time for operational, legal, or regulatory reasons. Material changes will be communicated via our website or by other appropriate means.