GDPR Compliance Policy

1. Introduction

Imax Services is committed to protecting personal data and complying with the General Data Protection Regulation (GDPR) for users located in the European Union (EU), European Economic Area (EEA), and United Kingdom (UK). This policy explains how we collect, process, store, and protect personal data in accordance with GDPR requirements.

2. Data Controller

For purposes of the GDPR, Imax Services acts as:

• Data Controller for customer account and billing information.
• Data Processor for data hosted or stored by customers using our cloud services.

3. Personal Data We May Process

We may collect and process: Name, Email address, Phone number, Billing information, IP address, Account credentials, and Usage and log data. When customers use our hosting, VPS, storage, or webmail services, we may process data strictly under their instructions.

4. Legal Basis for Processing

We process personal data under the following lawful bases: Contractual necessity (to provide cloud services), Legal obligation (tax and compliance requirements), Legitimate interests (security, performance improvement), and Consent (where required for marketing or cookies).

5. Your GDPR Rights

If you are located in the EU, EEA, or UK, you have the right to:

• 🔎 Right of Access: Request a copy of your personal data.
• ✏ Right to Rectification: Request correction of inaccurate or incomplete data.
• 🗑 Right to Erasure: Request deletion of your personal data, subject to legal exceptions.
• ⛔ Right to Restrict Processing: Request limitation of how we use your data.
• 🔄 Right to Data Portability: Receive your data in a structured format.
• 🚫 Right to Object: Object to processing based on legitimate interests.
• ⚖ Right to Withdraw Consent: Withdraw consent at any time.

6. Data Security Measures

Imax Services implements appropriate technical and organizational measures, including secure cloud infrastructure, access controls, monitoring systems, and encryption. However, no system can guarantee absolute security.

7. International Data Transfers

As a global cloud service provider, personal data may be processed outside the EU/UK. Where transfers occur, we implement appropriate safeguards, such as standard contractual clauses and security reviews.

8. Data Retention

We retain personal data only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. After this, data is securely deleted or anonymized.

9. Data Processing Agreements (DPA)

Customers using Imax Services to process personal data may request a Data Processing Agreement (DPA). To request a DPA, please contact us.

10. Lodging a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority in the EU or UK.

11. Exercising Your Rights

To exercise your GDPR rights, contact us via:

12. Updates to This Policy

We may update this GDPR Policy periodically. Updates will be posted on this page with a revised effective date. Continued use of our services constitutes acceptance of the updated policy.