Privacy notice

1. Controller and contact

The controller of personal data described here is TRUSTED TECHNOLOGIES Sp. z o.o. (TRUSTED TECHNOLOGIES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), ul. Łódzka 8/12, lok. 8.18, 42-202 Częstochowa, Polska; KRS 0001242922 · NIP 5732973199 · REGON 544825601. For privacy questions and rights requests, contact legal@latency.date · +48 880 500 421.

This notice covers the latency.date website, enquiries and our administration of customer relationships through WHMCS. It concerns individuals, including representatives and contacts of business customers. Processing of data hosted by customers on their own servers is addressed separately in section 8.

2. Data we process and where it comes from

Visiting the website exposes connection information, including IP address, request time, requested resource and browser-related technical information, to the infrastructure delivering and protecting the site. The landing pages have no enquiry or payment form. Contact and ordering links lead to the WHMCS customer area, where the data entered by the user is processed.

For enquiries, accounts and orders, we process the contact, identity, company, billing, service and correspondence details necessary for the request or contract. Payment providers send transaction references and payment status; full card details and security codes are handled by the payment provider. Customer representatives may supply business contact information about their colleagues.

Optional analytics can process pseudonymous identifiers, device and browser information, visited pages and interactions only after analytics consent. We do not intentionally request sensitive personal data in enquiries. Please provide only information needed to handle the matter.

3. Purposes and legal bases

We process information needed to answer a prospective customer's request or perform a contract under Article 6(1)(b) GDPR. Managing relationships with employees and representatives of corporate customers, ordinary correspondence, security, abuse prevention and necessary legal-claim records rely on Article 6(1)(f): our legitimate interests in providing services, protecting systems and establishing or defending claims, balanced against individuals' rights.

Tax, accounting and legally required disclosures rely on Article 6(1)(c). Optional Google Analytics and optional storage of appearance preferences rely on consent under Article 6(1)(a), together with the applicable rules on access to a user's device. We do not enable advertising integrations through the website's analytics configuration.

Required fields in the customer area are identified in context. Without information genuinely needed for an enquiry, contract or legal obligation, we may be unable to handle that request or provide the service. Refusing optional analytics or appearance storage does not prevent access to the website. Any electronic marketing requires the separate permissions required by law; submitting an enquiry is not a marketing subscription.

4. Infrastructure, recipients and international transfers

Our WHMCS customer area is hosted on an OVHcloud VPS in Warsaw, Poland. Cloudflare provides website delivery, CDN and WAF/security functions. Google provides optional Google Analytics. hCaptcha may support anti-bot verification and Stripe handles payment functions in WHMCS; their scripts are not loaded by the landing pages. The customer area provides information and choices appropriate to its integrations.

Data may be received by these providers where necessary for their functions, by authorised personnel and by accounting or legal advisers. Authorities receive data where a lawful obligation or other valid legal basis requires or permits disclosure. Depending on the function, a supplier may act as our processor or as an independent controller under its own notice; we do not treat every supplier as having the same role.

Some suppliers may process data outside the European Economic Area. We do not claim that all processing stays in the EU. Transfers rely on an applicable adequacy decision, including the EU–US Data Privacy Framework only for covered transfers to appropriately certified recipients, or on standard contractual clauses and necessary supplementary safeguards. This applies to relevant Google and other supplier transfers. Details of applicable safeguards and how to obtain a copy can be requested from our privacy contact.

5. How long data is kept

Enquiry information is used until the matter is resolved. Afterwards, only information necessary for a legal obligation or to establish, exercise or defend relevant claims is retained until that obligation ends or the applicable limitation period expires. Account and service records are retained while needed to administer the relationship, then assessed against those specific obligations and claims; unrelated data is removed.

Tax and billing records are retained for the applicable statutory period. Polish tax obligations normally require retention until five years have elapsed from the end of the calendar year in which the tax payment deadline expired; statutory suspension, interruption or another applicable accounting obligation can extend the relevant period. We retain records for those duties rather than promising deletion immediately on account closure.

Security logs are kept only while needed to detect, investigate or resolve security events and abuse, or to preserve evidence for a specific legal obligation or claim. Their continued need is reviewed when the investigation or purpose ends. The applicable operational retention details can be requested from us. Optional browser storage and analytics identifiers have the lifetimes stated in the cookie notice; withdrawal stops future optional collection. Analytics records already collected are erased or de-identified when no longer needed for their disclosed purpose, subject to applicable rights and legal obligations.

6. Your rights and complaints

Subject to the applicable conditions, you may request access, correction, deletion, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Website cookie settings allow you to change optional choices; other requests can be sent to our privacy contact.

We normally respond within one month. Where GDPR permits an extension because of complexity or the number of requests, we inform you within that month and explain the reason. We request proportionate identity confirmation only when necessary. Erasure rights do not require us to remove records which must lawfully be retained.

You may complain to the President of the Polish Personal Data Protection Office (UODO), https://uodo.gov.pl, or another competent supervisory authority, including in your country of habitual residence where applicable. You do not have to contact us first.

7. Security and automated checks

We apply technical and organisational safeguards appropriate to the processing risks, including restricted access and protection of data in transit. No transmission or storage method can be guaranteed risk-free. We handle personal-data incidents and notifications according to the applicable legal thresholds and deadlines.

Security and payment providers may perform automated anti-bot, fraud or authentication checks. Contractual billing automation can send reminders or apply restrictions under the agreed terms. This notice does not assert that every automated check is an Article 22 GDPR decision. If a decision falls within that article, its applicable safeguards, including human intervention where required, remain available. Contact us to request review of a restriction or to obtain information about a relevant decision.

8. Customer-hosted data and notice updates

A customer determines the purposes and lawful basis for personal data they place in their hosted environment. Where we process that data on their behalf, Article 28 GDPR arrangements, instructions, subprocessors and security responsibilities must be agreed in a separate data-processing agreement. This notice neither supplies that agreement nor grants us a general licence to use customer content for our own purposes.

We update this notice when our processing changes. Material changes are communicated as required, and information about a new purpose is provided before that processing starts. Publishing a notice or continued website use does not substitute for consent where consent is required. Earlier applicable information and clarification of processing can be requested from our contact address.