Privacy Policy

Last updated: February 4, 2026

This Privacy Policy explains how pavetixhq.com ("we", "us", "our") collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable UK data-protection laws.

1. Data Controller

pavetixhq.com
24 Church Road, Shifford, Oxfordshire, OX18 4AN, United Kingdom
[email protected]

2. Personal Data We Collect

We may collect and process the following data:

• Identity data (name, username)
• Contact data (email address)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, time spent, interactions)
• Communication data (support emails or messages)

We do not knowingly collect sensitive personal data.

3. How We Collect Data

• When you contact us
• When you use the Website
• Through cookies and similar tracking technologies
• Through analytics tools (e.g. traffic measurement)

4. Legal Basis for Processing (GDPR Article 6)

We process personal data based on one or more of the following:

• Consent (e.g. cookies, marketing)
• Contractual necessity
• Legal obligation
• Legitimate interests, provided your rights do not override those interests

5. How We Use Your Data

We use your data to:

• Operate and maintain the Website
• Improve performance and user experience
• Communicate with you
• Ensure security and prevent fraud
• Comply with legal obligations

Note that under some legislations, we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract. You further understand that this is a soft pull and will not harm your credit in any way whatsoever.

6. Data Sharing

We may share data only with:

• Trusted service providers (hosting, analytics, email)
• Authorities if legally required

We do not sell your personal data.

7. International Data Transfers

If data is transferred outside the EU/UK, we ensure appropriate safeguards are in place (e.g. standard contractual clauses).

8. Data Retention

We retain personal data only as long as necessary for the purposes stated or as required by law.

9. Your GDPR Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

10. Security

We implement appropriate technical and organizational measures to protect personal data. However, no online system is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new effective date.