Privacy policy
How Aquila Dynamics Limited uses personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Last updated:
Draft for legal review. This text has not yet been approved by a lawyer.
1. Who is responsible for your data
Aquila Dynamics Limited (trading as eslana), registered in Cyprus, company no. HE 357913, Imatech House, Floor 2, Office 201, Archiepiskopou Makariou III 79, 7102 Aradippou, Larnaca, Cyprus, is the controller of your personal data. Contact: [email protected].
2. What we use your data for and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, sign-in codes | Purpose:Your account and signing in | Legal basis:Contract |
| Company name, VAT number, billing and delivery details, order and payment status | Purpose:Orders, delivery, invoicing and the app subscription | Legal basis:Contract; legal obligation for tax records |
| Contact form details and message | Purpose:Replying to your enquiry | Legal basis:Legitimate interest |
| Email address and consent | Purpose:Newsletter | Legal basis:Consent, which you can withdraw at any time |
3. Who receives your data
Our service providers, under data processing agreements: Supabase (database), Vercel (hosting), Stripe (payments) and WorkOS (sign-in). We also share delivery details with carriers, and data with advisers and authorities where the law requires it. We do not sell personal data.
4. Transfers outside the EU and UK
Some providers process data in the United States. These transfers are protected by the EU-US Data Privacy Framework and its UK extension, or by Standard Contractual Clauses with the UK International Data Transfer Addendum. Contact us for a copy of the safeguards.
5. How long we keep it
- Account data: while your account is open and up to 2 years after.
- Orders and invoices: as long as tax law requires, currently 7 years.
- Enquiries: up to 2 years after our last contact.
- Newsletter: until you unsubscribe.
7. Your rights
You can ask to access, correct, erase, restrict or port your data, object to processing based on legitimate interest, and withdraw consent at any time. Email [email protected]. You can complain to the Commissioner for Personal Data Protection in Cyprus, the data protection authority in your EU country, or, in the UK, the Information Commissioner's Office (ico.org.uk).