Privacy Policy

Last updated: [date]. This is a draft and must be reviewed by a qualified legal professional before launch.

1. Who we are

This website is operated by [Business legal name], trading as GeoVista Solutions ("we", "us"). Contact: [business email]. Address: [business address].

2. Information we collect

• Account information: full name, email address, password (stored securely by our authentication provider; we never see it), country and optional phone number.
• Communication and project information: messages, files you upload, custom offers, orders, revision requests and reviews.
• Payment records: payment references, amounts, dates and receipts you choose to upload. We do not store card numbers.
• Consultation bookings: name, email, topic, preferred date and time, time zone and notes.
• Contact form submissions: name, email, subject, message and optional attachment.
• Website usage statistics: pages visited, approximate country (from our hosting provider) and an anonymous identifier that changes every day. We do not store IP addresses for analytics, do not use advertising cookies and do not try to identify anonymous visitors.

3. How we use information

To create and manage your account, communicate with you, prepare offers, deliver services, process and verify payments, schedule consultations, send transactional emails, improve the website, prevent abuse and meet legal obligations.

4. Legal bases

[To be completed by your legal adviser: for example contract performance, legitimate interests, consent and legal obligations, depending on the applicable law.]

5. Sharing

We use trusted service providers to run the website: hosting ([hosting provider]), database, authentication and file storage (Supabase), and transactional email ([email provider]). Payment providers you choose to use (for example your bank or Payoneer) process payments under their own terms. We do not sell personal information.

6. International transfers

Our service providers may process data in other countries. [Describe safeguards after legal review.]

7. Retention

Account and order records are kept for as long as your account is active and as required for accounting and legal purposes ([retention period]). Website statistics are deleted after 25 months.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, and to object to or restrict processing. Contact [business email].

9. Security

Data is protected with access controls, encryption in transit and private storage for files. No system is perfectly secure; please use a strong, unique password.

10. Children

Clients under [age] must use the service with the consent and involvement of a parent or guardian.

11. Changes

We will post updates on this page.