ROVLEX Privacy Policy: data controller, types of data, processing purposes, cookies, storage, third-party transfers, user rights and deletion procedure.ости

Last updated: 11 May 2026

1. Data controller

Personal data is processed in accordance with applicable law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The controller is registered in the United Kingdom and is subject to the supervision of the Information Commissioner's Office (ICO).

2. Data we collect

• Contact details: email address, phone number, username.
• Client organisation data: business name, address, links to listings on maps and review platforms.
• Payment data: processed by providers (ENOT, Stripe, PayPal, CryptoCloud, NOWPayments, etc.). Full card details are never stored by ROVLEX.
• Technical data: IP address, browser type, operating system, pages visited, referral source, UTM parameters.
• Cookies and device identifiers (see "Cookies and analytics" section).

3. Purposes of processing

• Providing services and fulfilling contractual obligations (see Public offer agreement).
• User registration and communication via email and Telegram bot.
• Processing and confirming payments through connected providers.
• Notifications about order status, maintenance and service updates.
• Technical support and handling of user enquiries.
• Usage analytics to improve the product.
• Operational security, fraud prevention and abuse detection.
• Compliance with applicable legal requirements.

4. Cookies and analytics

The service uses cookies and similar technologies to maintain user sessions, save interface preferences and collect anonymised usage analytics. Yandex Metrica and Google Analytics may be used for analytics purposes. Users can manage cookies in their browser settings; disabling some cookies may limit service functionality.

5. Storage and data security

Data is stored on secure servers (Supabase, EU/Paris region, Hetzner data centres) and processed with organisational and technical security measures, including transmission encryption (TLS 1.3), application-level access control (Row-Level Security), backups and action logging.

Data retention periods are determined by the purpose of processing and do not exceed the period necessary to fulfil contractual obligations and legal requirements. After this period, data is deleted or anonymised.

6. Transfers to third parties

Personal data may be transferred to third parties solely for the purposes set out in this Policy, and only in the following cases:

• Payment providers — for processing payments (ENOT, Stripe, PayPal, CryptoCloud, NOWPayments and other connected systems).
• Cloud infrastructure providers (Supabase, Hetzner) — for data storage and processing.
• Communication services (email providers, messengers) — for sending notifications at the user's request.
• At the request of government authorities in cases provided for by law.

Transfer of data to third parties for purposes not set out in this Policy without user consent is prohibited.

7. User rights

Users have the right to:

• Access their personal data and information about how it is processed.
• Request correction of inaccurate or incomplete data.
• Request deletion of data in cases provided for by law.
• Restrict processing or object to processing.
• Request data portability.
• Withdraw consent to processing where processing is based on consent.
• Lodge a complaint with a supervisory authority (Information Commissioner's Office for the UK).

8. Data deletion

To delete your account and associated personal data, send a request to support@rovlex.com with the subject "Data deletion". Requests are processed within 30 calendar days. Some data may be retained in anonymised form to comply with financial and tax legislation.

9. Consent to processing

By using the ROVLEX service, users confirm that they have read this Policy and consent to the processing of personal data for the stated purposes. Consent may be withdrawn by sending a request to support@rovlex.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it restrict processing based on other lawful grounds.

10. Policy changes

The controller reserves the right to amend this Policy. The current version is published at https://rovlex.com/legal/privacy/. For significant changes, users will be notified by email or through the service interface.

11. Contact details

For all enquiries related to personal data processing, please contact us:

• Email: support@rovlex.com
• Contact page: rovlex.com/en/contacts/
• Related documents: Public offer agreement, Refund policy, Company details