Privacy Policy — Site30 LLC

1. Data Controller

Site30 LLC ("we", "us", "our") is the data controller responsible for processing your personal data.

EU Representative (Art. 27 GDPR): Hacer Yuksel, Neue Heimat 23, 88400 Biberach, Germany. Email: privacy-eu@site30.com

2. Data We Collect

Technical Data (Automatic)

When you access this website, we utilize a global network security and performance infrastructure provider (Cloudflare) to deliver the website securely. This involves the temporary processing of your IP address to direct traffic and mitigate threats. This provider also derives general location information (country and city name) for our analytics. Site30 LLC does not store your IP address.

Transaction & Billing Data

If you purchase a service, our third-party payment processors (Stripe and PayPal) collect your payment information. Site30 LLC does not store your credit card numbers; we only receive a confirmation of payment and the associated billing name/email.

Communication & Account Data

To manage your account and security, we collect:

Email address: Used for account registration and sending "Magic Login Links" or One-Time Passwords (OTP).
Contact Form Data: Name, email, and message content when you contact us.

Cookies and Analytics

This website does not use cookies. We use a self-hosted, privacy-focused analytics platform to understand usage. This tool is configured to collect only anonymized data (page views, device type, country). No personally identifiable information is stored in our analytics database.

3. Purposes and Legal Basis

Data	Purpose	Legal Basis (GDPR)
Email Address	Authentication (Magic Links/OTP)	Art. 6(1)(f) – Legitimate interest (Security)
Billing/Payment Info	Processing your subscription	Art. 6(1)(b) – Performance of a contract
Contact form data	Responding to inquiries	Art. 6(1)(b) – Pre-contractual measures
Technical data (IP)	Network security	Art. 6(1)(f) – Legitimate interest
Analytics data	Understanding usage	Art. 6(1)(f) – Legitimate interest

4. Data Retention

Account & Billing Data: Retained for the duration of your active subscription plus 7 years for tax and accounting compliance.
Email for Authentication: Logs of sent OTPs/Magic Links are typically deleted or anonymized within 30 days.
Contact Form Data: Deleted once your inquiry is processed, unless statutory retention applies.

5. International Data Transfers

Your data is processed in the United States. We ensure appropriate safeguards through the use of EU Standard Contractual Clauses (SCCs) and by selecting providers certified under the EU-U.S. Data Privacy Framework (DPF).

Sub-processors

Provider	Purpose / Functional Description	Location	Safeguard
EU-based Cloud Infrastructure Provider	Cloud infrastructure and hosting of the backend application and database.	Germany (EU)	DPA & ISO 27001
Cloudflare, Inc.	Network security and content delivery.	USA	SCCs & DPF
Stripe, Inc.	Payment processing.	USA	SCCs & DPF
PayPal, Inc.	Payment processing.	USA	SCCs & DPF
Amazon Web Services	Email delivery.	USA	SCCs & DPF

Your data will not be shared with other third parties without your consent.

6. Your Rights Under GDPR

As a data subject in the EEA, UK, or Switzerland, you have the following rights:

Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17).
Restriction (Art. 18) and Portability (Art. 20).
Objection (Art. 21): Specifically regarding our use of legitimate interest.

To exercise these rights, contact privacy@site30.com. We will respond to your request within one month.

You also have the right to lodge a complaint with a data protection authority. A list of EU authorities is available here.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated effective date.

8. Contact

Site30 LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110, USA

Email: privacy@site30.com