Privacy Policy
Updated: 24 June 2026
This policy describes what personal data we process on webfora.io, why, and how you can manage it. The data controller is Dmytro Manzhula ('WebFora'), Λεωφ. Αρχ. Μακαρίου Γ', Larnaca, Larnaka 6017, Cyprus. Questions: [email protected].
What data we process
- Form data: name, email, phone/messenger, a link to your website, business name and the text of your enquiry/brief.
- Payment data: payments are processed by Paddle. Card details are entered on Paddle's side and are not passed to us; from Paddle we receive only payment confirmation, subscription status and basic invoice data.
- Technical data: IP address, device and browser type, cookies and on-site events (analytics — with your consent).
- Results of the website audit you run (the website address and publicly available technical metrics).
Purposes and legal bases
- Handling enquiries and communicating with you — entering into and performing a contract at your request.
- Providing and maintaining the service, subscription billing — performance of a contract and compliance with legal requirements (accounting, taxes).
- Analytics and marketing — your consent (cookie banner) or our legitimate interest.
Who we share data with
- Paddle.com Market Limited — payment provider and Merchant of Record: processing payments, invoices, taxes and refunds.
- Our hosting provider (servers in the EU) and Cloudflare — to run and protect the website.
- An email delivery service and Telegram — for enquiry notifications. Analytics services — only with your consent.
- We do not sell your personal data.
International data transfers
- Some providers (for example, Paddle, Cloudflare) may process data outside the EEA. In such cases the transfer is made with appropriate safeguards — the EU Standard Contractual Clauses (SCC) or adequacy decisions.
How long we keep data
- Client and enquiry data — for as long as needed to provide the service and for the periods set by law (for payment/tax data — as required by accounting rules).
- Analytics cookies — until consent is withdrawn or they expire.
Your rights
- You have the right to request access to, correction or deletion of your data, to restrict or object to processing, to data portability, and to withdraw consent at any time.
- You have the right to lodge a complaint with the data protection supervisory authority in your place of residence.
- To exercise your rights, write to [email protected].
Security and changes
- We apply reasonable technical and organisational safeguards (SSL, need-to-know access, servers in the EU).
- We may update this policy; the current version is published on this page with its update date.