Privacy Policy — Beytrax

Beytrax ("Beytrax", "we", "us", or "our") provides a multi-tenant content management platform, custom website design and development, managed hosting, and SSL / domain care to business clients. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit beytrax.com (the "Site") or interact with us about our services.

This policy covers the marketing Site only. If you are an end user of a website that Beytrax operates on behalf of one of our clients (a "Tenant Site"), the privacy policy of that client governs the data you submit there; we process such data as a service provider on the client's instructions.

1. Information we collect

We collect the minimum information needed to respond to inquiries, deliver our services, and operate the Site.

Information you provide. When you submit our contact form, request a quote, or email us, we receive your name, email address, company, role, and the contents of your message.
Service-engagement information. If you become a client, we collect the business and billing details needed to perform the engagement (legal entity name, tax ID where applicable, billing contact, technical contacts, and the project requirements you share with us).
Site usage data. Our hosting infrastructure logs standard request metadata (IP address, user agent, referrer, timestamp, and path) for security, abuse prevention, and uptime monitoring.
Cookies and similar technologies. The marketing Site uses only strictly necessary cookies and, if enabled, privacy-preserving analytics. See "Cookies" below.

We do not intentionally collect special categories of data (health, biometric, political views, etc.). Please do not include such data in messages you send us.

2. How we use information

To respond to your inquiry and provide requested information.
To deliver, support, and improve the services we are contracted to provide (CMS access, website builds, hosting operations, SSL / domain renewal).
To send service-related communications (incident notices, scheduled maintenance, invoices, account changes). These are not marketing messages.
To send commercial communications only where you have opted in or where permitted by applicable law. You can opt out at any time using the unsubscribe link or by writing to us.
To detect, investigate, and prevent fraud, abuse, or security incidents; to enforce our Terms of Service; and to comply with legal obligations.

3. Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Performance of a contract — to provide services to clients and to take pre-contractual steps at your request.
Legitimate interests — to respond to inquiries, operate and secure the Site, prevent fraud, and promote our services to business contacts.
Consent — for optional analytics cookies and for marketing emails where consent is required.
Legal obligation — to keep records required by tax, accounting, or other applicable law.

4. Sharing your information

We do not sell personal information. We share it only with:

Service providers / subprocessors that help us operate the business — cloud hosting and CDN, transactional email delivery, error monitoring, analytics, and customer-relationship tools. Each is bound by a written agreement requiring confidentiality and processing only on our instructions.
Payment processors. Online payments are processed by Stripe, Inc. Card data is collected and stored by Stripe under PCI-DSS; Beytrax does not see or store full card numbers. Stripe's privacy policy applies to its processing of that data.
Our clients, when you contact us about a tenant site they operate and routing your request to them is appropriate.
Authorities or legal counsel when required by law, valid legal process, or to protect the rights, property, or safety of Beytrax, our clients, our users, or the public.
Successors in connection with a merger, acquisition, financing, or sale of assets, subject to equivalent privacy commitments.

5. International data transfers

Beytrax operates from Mexico and uses infrastructure providers located in Mexico, the United States, and the European Union. Where personal data of EEA / UK residents is transferred outside its country of origin, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) and apply additional measures where reasonably necessary.

6. Data retention

We retain information only as long as needed for the purposes described in this policy. Inquiry emails and contact-form submissions are kept for up to 24 months unless you ask us to delete them sooner. Client business records are retained for the duration of the engagement and for the period required by tax, accounting, and other applicable law. Server access logs are retained for up to 90 days for security and troubleshooting.

7. Your rights

Depending on where you live (including the EEA, UK, United Kingdom, California, and Mexico under the LFPDPPP), you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Delete your information (subject to legal retention).
Restrict or object to certain processing.
Receive your information in a portable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection authority. EEA / UK users may also contact their national authority directly.

To exercise these rights, write to privacy@beytrax.com. We will respond within the time required by applicable law. We may need to verify your identity before acting on your request.

8. Cookies

Strictly necessary cookies are used for security, language preferences, and to remember consent choices. We may also use privacy-preserving analytics (no cross-site tracking, no advertising profiles) to understand which pages are useful. You can disable cookies in your browser; some Site functionality may not work without them.

9. Security

We apply technical and organisational measures appropriate to the risk, including TLS for data in transit, encrypted storage for credentials and sensitive secrets, principle-of- least-privilege access controls, audit logging, and routine backups. No system is 100% secure; we will notify affected users and regulators of a personal-data breach where required by law.

10. Children's privacy

The Site is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can delete it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify clients directly. Continued use of the Site after a change indicates acceptance of the revised policy.

12. Contact

Questions, requests, or complaints about this policy or our handling of personal information:
Beytrax · privacy@beytrax.com