Legal
Privacy Policy
This policy explains how ADPERA L.L.C-FZ, the company behind the altoda brand ("altoda", "we", "us"), collects and uses personal data when you visit altoda.co, create an account or use our service.
We are a company registered in Meydan Free Zone, Dubai, United Arab Emirates, licence number 2311088.01, at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.. For privacy questions, contact us at [email protected].
1. Our role
For data about our customers, prospective customers and visitors to altoda.co, we are the data controller.
For data about visitors to our customers' websites, for example messages sent through a contact form on a customer's site, the customer is the controller and we process that data on their behalf. If you visited a website built with altoda and have a question about your data, please contact that business. Our Data Processing Addendum covers this processing.
2. What we collect
- Account and contact details: name, email address, phone number, company name, job title.
- Billing details: billing address, tax number, plan and payment history. Card details are handled by our payment processor; we do not store full card numbers.
- Brief and site content: information about your business, texts, images, logos and files you give us to build your website.
- Communications: emails, support requests and design requests you send us.
- Account usage: how you use your account panel, log data, device and browser information.
- Website data: information collected on altoda.co through cookies and similar technologies, as described in our Cookie Policy.
- Marketing preferences: whether you have agreed to receive our emails.
Most of this data comes from you. We also receive payment status and fraud checks from our payment processor, and, when you ask us to, we use information that is already public about your business, such as your current website.
You need to give us your account, billing and brief details for us to provide the service; without them we cannot build your website or bill you. Everything else is optional.
3. Why we use it and our legal bases
| Purpose | Legal basis |
|---|---|
| Creating your account, building and hosting your website, providing support | Performance of our contract with you |
| Billing, invoicing, tax and accounting | Legal obligation; performance of contract |
| Keeping the service secure, preventing fraud and abuse | Legitimate interests |
| Improving our service and understanding how it is used | Legitimate interests |
| Analytics and advertising cookies on altoda.co | Consent where required |
| Heatmaps and session recordings on altoda.co (Microsoft Clarity), with form fields masked | Consent where required |
| Sending marketing emails | Consent, or legitimate interests for existing customers where allowed, with an easy opt-out |
| Showing your live site as an example of our work | Legitimate interests, with the right to opt out at any time |
We do not make decisions about you that have legal or similarly significant effects based only on automated processing.
4. Who we share it with
We share personal data only as needed to run our service, with:
- Hosting, infrastructure and content delivery providers
- Payment processors
- Email and communication providers
- Analytics and advertising providers on altoda.co, where you have consented: Google (Analytics, Tag Manager, Ads), Meta, Microsoft (Clarity) and LinkedIn
- Customer support tools
- Professional advisers such as accountants and lawyers
- Authorities, where the law requires it
These providers may only use the data to provide their services to us, and not for their own purposes. We also use software tools to design and build websites; we send them your business information and content without personal data. The current list of providers who process data on our customers' behalf is published at altoda.co/legal/subprocessors.
We do not sell personal data.
5. International transfers
We are based in the United Arab Emirates, and our providers may process data in other countries, including the European Union and the United States. When personal data is transferred from a country with transfer rules, such as the EU, the UK or Turkey, we use the safeguards those rules require, such as the EU standard contractual clauses, the UK addendum and the standard contracts of the Turkish Personal Data Protection Authority.
6. How long we keep it
- Account and site data: while your subscription is active, and for 30 days after it ends so you can request an export. We then delete it, except for backups, which are kept for up to 12 months only to restore the service and are then overwritten.
- Billing and tax records: as long as tax and accounting laws require, up to 7 years.
- Support communications: up to 3 years after your subscription ends.
- Marketing data: until you unsubscribe.
7. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time without affecting processing that happened before. To use these rights, email [email protected]. We reply within the time the law requires, usually within one month.
You can also complain to a data protection authority, such as the UAE Data Office, the authority in your EU country, the UK Information Commissioner's Office or, in Turkey, the Personal Data Protection Authority (KVKK).
8. Marketing messages
We only send marketing emails where the law allows, and every email has an unsubscribe link. For recipients in Turkey, commercial electronic messages are sent in line with the Commercial Electronic Message Management System (İYS) rules.
9. Cookies, Do Not Track and Global Privacy Control
Our Cookie Policy explains the cookies we use and how to change your choices. If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising cookies. Browsers' "Do Not Track" signals have no common standard; we handle them in the same way as Global Privacy Control.
10. Security
We use technical and organisational measures to protect personal data, including encryption in transit, access controls and regular backups. No system is completely secure; if a breach affects your data, we will tell you and the relevant authorities as the law requires.
11. Children
Our service is for businesses and adults. We do not knowingly collect data from anyone under 18.
12. Region-specific information
Turkey: individuals in Turkey can find our information notice under the Turkish Personal Data Protection Law (KVKK) at altoda.co/tr/kvkk.
United States: we do not sell personal data. We do not share it for cross-context behavioural advertising except through advertising cookies on altoda.co, which you can refuse through our cookie settings or a Global Privacy Control signal. If a US state privacy law gives you further rights, email [email protected] and we will respond as that law requires.
13. Changes
We may update this policy. If the changes are significant, we will tell you by email or on our website before they take effect.
14. Contact
ADPERA L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. Email: [email protected]