Inkwell CDN - Privacy Policy

Last Updated: January 1, 2025

1. Introduction

Inkwell CDN, operated by Yeema Holdings LTD (Company No. 15809333), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Data Controller

3. Information We Collect

3.1 Personal Information

• Name and email address (for account creation)
• Payment information (processed by third-party payment processors)
• IP address and device information
• Usage data and service interactions

3.2 Content Data

• Files and content you upload to our CDN
• Metadata associated with your files
• Access logs and delivery statistics

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our CDN services as agreed
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations
• Consent: Where explicitly provided for specific purposes

5. How We Use Your Information

• Provide and maintain our CDN services
• Process payments and manage your account
• Deliver content to end users efficiently
• Monitor service performance and security
• Communicate with you about your account
• Comply with legal obligations
• Improve our services and user experience

6. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in service delivery
• Payment Processors: To process transactions securely
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Your data may be processed in countries outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

8. Data Retention

• Account Data: Retained while your account is active and for 7 years after closure
• Content Files: Retained until you delete them or your account is terminated
• Usage Logs: Retained for 12 months for security and performance monitoring
• Payment Records: Retained for 7 years for tax and legal compliance

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@inkwell.dev. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures

11. Cookies and Tracking

We use essential cookies to provide our services and may use analytics cookies to improve performance. You can control cookie settings through your browser. Some cookies are necessary for service functionality and cannot be disabled.

12. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

14. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately. Contact details: ico.org.uk

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our service. Your continued use constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions or to exercise your rights, contact us: