This Privacy Policy explains how ISPLABS LIMITED, as the primary service provider and controller of customer personal data, collects, uses, shares, and protects your personal data when you use our services.
We do not store full payment card details or online banking credentials on our servers. Depending on the selected method and region, payments and related data are processed by third-party payment providers, banks, and payment collection partners:
Where enabled, we may use limited technical and marketing data, such as IP address, approximate location, referral information, and campaign attribution data, to measure and optimize advertising campaigns on platforms such as Google Ads and similar providers.
What we share: Depending on the tool and configuration used, we may share aggregated data, pseudonymous identifiers, technical event data, and campaign attribution information with analytics, advertising, payment, hosting, support, fraud-prevention, and infrastructure providers.
What we do not share: We do not sell your personal data, and we do not share more data than is reasonably necessary for the relevant purpose.
ISPLABS LIMITED is the primary service provider and controller responsible for personal data processed in connection with our services.
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX. Contact: ilja@phylex.net.
We may share personal data with payment providers, hosting and infrastructure providers, security and anti-fraud providers, analytics providers, customer support tools, professional advisers, and public authorities where required by law.
For certain payments intended for the Russian market, payment acceptance details may be processed through Individual Entrepreneur Serikov Artur Aleksandrovich solely for payment acceptance, settlement, accounting, and related compliance purposes. ISPLABS LIMITED remains the primary service provider unless expressly stated otherwise.
We may disclose personal data to service providers acting on our behalf, affiliated payment collection partners where applicable, professional advisers, payment processors, banks, fraud-prevention providers, and competent authorities where necessary to provide services, process payments, enforce our terms, protect our rights, investigate abuse, or comply with applicable law.
Account and service data is generally retained while the account or service relationship remains active and for a limited period afterwards where needed for account closure, support, security, fraud prevention, disputes, or legal claims. Service data scheduled for deletion may remain temporarily in restricted backups until the relevant backup cycle expires.
Invoices, transaction records, payment references, and accounting or tax records may normally be retained for up to six years after the relevant financial period or transaction, and longer where required by law, an audit, a payment dispute, sanctions or fraud controls, or legal proceedings. Support and security records are retained according to their sensitivity, operational relevance, and the applicable limitation or compliance period, with access restricted to authorized personnel.
We do not process or store customers' full payment card details or online banking credentials on our servers. Card payments are processed by Stripe, cryptocurrency payments by Cryptomus, and bank transfers by the relevant banks or payment providers, including Tide (ClearBank Limited), Wise, and regional banking partners.
Payment credentials are submitted directly to the applicable payment provider or financial institution over its payment interface or banking network. We do not have access to full card details, cryptocurrency wallet private keys, or customers' online banking credentials.
We and, for applicable Russian-market payments, Individual Entrepreneur Serikov Artur Aleksandrovich may receive and retain limited payment-related information such as payer name, account or wallet identifiers, partial card or bank metadata, billing country, payment status, anti-fraud signals, transaction references, and transfer remittance details as needed for reconciliation, accounting, support, fraud prevention, compliance, refunds, and dispute handling. Retention is limited according to the relevant purpose and applicable legal obligations.
Because our providers, infrastructure, support tools, and payment partners may operate in multiple countries, your personal data may be processed outside your country and, where applicable, outside the UK or EEA. Where required, we take reasonable steps to use appropriate safeguards for such transfers under applicable data protection law.
When you contact us, for example via a contact form or email, personal data is processed solely for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose.
We use cookies and similar browser storage where necessary to provide requested website functions, maintain security and sessions, and remember choices such as language, currency, country, and VAT display. These technologies are not used by us to sell personal data.
The current public website does not intentionally place advertising or behavioural-tracking cookies. If non-essential analytics, advertising, or comparable technologies are introduced, they will be disabled until valid consent is obtained where required, and an appropriate preference control will be provided.
You can remove cookies, local storage, and session storage through your browser controls. Removing functional preferences may reset language, currency, country, VAT, interface, or cached-display settings, but should not prevent access to the public legal pages.
locale cookie - remembers the selected interface language for up to one year.
locale local storage - remembers the selected interface language until it is changed or browser storage is cleared.
selectedCountry, selectedCurrency, and includeVat local storage - remember regional price-display and VAT preferences until changed or browser storage is cleared.
Session storage entries used for review and rating display cache are retained for the current browser session and reduce repeated requests to our server-side review integration.
Interface-state cookies or local storage may be used where a requested account or navigation feature needs to remember its state. Session and authentication technologies used in the customer area are retained for the session or the security period configured for that feature.