Privacy Policy

Last updated 20 August 2026

This Policy explains what personal data Tsop Tech Digital Solutions Ltd collects through billing.tsop.tech and tsop.tech, why we collect it, and what rights you have over it under the GDPR.

1. Who we are

Tsop Tech Digital Solutions Ltd ("Tsop Tech", "we", "us") is a company registered in Cyprus under registration number ΗΕ 426590, with its registered office at Seferi 8, Limassol 4157, Cyprus. We are the data controller for the personal data described in this Policy.

For anything relating to your personal data, contact us at [email protected] or through a support ticket.

2. What personal data we collect

Account & billing details — name, company name, email, phone, billing address, VAT number where applicable, provided when you register or place an order.
Payment data — card payments are processed and stored by Stripe, our payment processor; we do not store full card numbers ourselves. Bank transfer payments are matched against the reference and amount you provide.
Service & domain data — hosting account details, domain names and their required WHOIS contact data, support ticket contents and attachments.
Technical data — IP address, browser type, and pages visited on billing.tsop.tech, collected via server logs and Google Analytics (only once you consent — see our Cookie Policy).
Communications — emails, support tickets, and any other correspondence you send us.

3. How we use your data, and our legal basis

Purpose	Legal basis
Providing and billing for hosting, domains, and professional services	Performance of a contract with you
Issuing invoices and complying with Cyprus tax/accounting law	Legal obligation
Responding to support tickets	Performance of a contract with you
Detecting fraud, abuse, and securing our systems	Legitimate interest
Site analytics (Google Analytics)	Consent, via the cookie banner
Marketing emails about our services	Consent — opt-in, revocable at any time

4. Who we share your data with

We share personal data only with the processors needed to run the service, under data processing agreements:

Stripe — payment processing.
Domain registrars / ICANN registries — required WHOIS/registration contact data when you register or transfer a domain through us.
Google Analytics (Google Ireland Ltd) — website usage analytics, only once you've consented.
Infrastructure providers — the servers hosting billing.tsop.tech and your hosting account.

We do not sell personal data. We disclose it beyond the above only if required by law or to protect our legal rights.

5. International transfers

Some processors above (e.g. Stripe, Google) may process data outside the EEA. Where that happens, we rely on their Standard Contractual Clauses or an equivalent adequacy mechanism to keep the transfer lawful.

6. How long we keep your data

Invoices and accounting records: retained for the period required under Cyprus tax law.
Active account and service data: kept for as long as your account is active, plus a reasonable period afterward for dispute handling.
Support tickets: retained for as long as needed to resolve the matter and for a reasonable period after, for quality and dispute purposes.
Marketing consent: kept until you unsubscribe or withdraw consent.

7. Your rights under the GDPR

You have the right to: access the personal data we hold about you; correct it; request erasure; restrict or object to processing; receive a copy in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these, contact us at [email protected].

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, Cyprus (dataprotection.gov.cy), or the data protection authority in your own EU country of residence.

8. Cookies

billing.tsop.tech uses a small number of cookies, described in full in our Cookie Policy.

9. Security

We apply technical and organisational measures appropriate to the sensitivity of the data we hold — encrypted connections (HTTPS/TLS) site-wide, tokenised card payments via Stripe (we never see full card numbers), and restricted internal access to customer data.

10. Children

Our services are directed at businesses and individuals capable of entering a binding contract. We do not knowingly collect data from children.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via the client area or by email before they take effect.