Privacy Policy.

Identity

Data controller

Data

What we collect

When you use the contact form, we receive your name, optional organisation name, email, optional phone number, selected service and message. We also record a pseudonymised technical request identifier for abuse prevention, the receipt time and delivery status.

With your consent, Google Analytics 4 collects page views, approximate geographic region, device and browser details, referral source and basic interaction events. We do not send Google your name, email, phone number, form contents or our own User-ID.

We do not ask for special-category data, passwords, financial information or third-party data. Do not place them in the free-text message.

Use

Purposes and legal bases

• Responding and preparing a potential engagement: handling your request and taking pre-contractual steps at your request.
• Analytics measurement: understanding traffic and improving the website through Google Analytics 4, solely on the basis of your consent, which you may withdraw at any time.
• Security and abuse prevention: rate limiting, a honeypot and a challenge based on our legitimate interest in reliable and secure operation.
• Legal duties and claims: where required by law or necessary to establish, exercise or defend legal claims.

The form does not subscribe you to marketing, and we do not use its data for automated decision-making or profiling.

Access

Recipients and transfers

Access is limited to authorised Support.Land team members and the necessary hosting and email providers, acting as processors or independent controllers where their role requires it. We do not sell your data.

When you consent to Analytics, measurement data is transferred to Google Ireland Limited and associated Google companies. Transfers outside the EEA may take place under the mechanisms described by Google, including the EU–US Data Privacy Framework or Standard Contractual Clauses. See Google's international transfer information ↗.

Retention

How long we keep it

The private archive of delivered requests is kept for up to 90 days and is automatically purged. If a request leads to a proposal, contract or support activity, necessary information may become part of that record and be retained for the duration required by the engagement, legal obligations or protection of claims.

The cookie choice is kept for 180 days. Google Analytics cookies are configured for up to 13 months; event and aggregated-report retention follows the GA4 property settings and Google's terms.

Control

Your rights

You may request access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. Contact info@support.land. Reasonable identity verification may be required.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority ↗. This notice follows the information framework in GDPR Article 13 ↗.

Protection

Security measures

We use request throttling, origin checks, an anti-spam challenge, encrypted SMTP transport, restricted access and private storage outside the public web root. No measure eliminates every risk; incidents are handled under the applicable obligations.

This policy may change when the service, providers or legal framework changes. The current version date appears at the top.