Last updated: September 26, 2025

1. Who we are

Prismyk is a service by Nabunam Inc. The website and Services are operated by Nabunam Inc. (the data controller under the GDPR), incorporated in [City/Country of incorporation], registered office: [Postal address of Nabunam Inc.].

Data protection contact: info\u0040prismyk.com (or [dedicated DPO address] if applicable).

2. Scope

This policy describes our processing when you use prismyk.com, the admin interface, and related services (the “Services”).

3. Data we collect

Account: first/last name, email, password (hashed), language, preferences.
Billing: address, country, VAT/GST/HST (as applicable), subscription details, last digits of payment method (handled by providers).
Content: texts, media, settings of sites hosted via Prismyk.
Support: messages, tickets, tracking metadata.
Usage & technical: logs (truncated IP, User-Agent), product events, performance data (e.g., Core Web Vitals), cookies/trackers (see §10).

We do not knowingly collect “special” (sensitive) categories as defined under the GDPR.

4. Purposes and legal bases

Provide the Services (site creation, hosting, e-commerce, analytics) — contract performance (Art. 6-1-b GDPR) and legitimate interest (6-1-f).
Billing and compliance (accounting, tax) — legal obligation (6-1-c).
Support and service communications — contract performance / legitimate interest.
Improvement & security (diagnostics, abuse prevention, performance) — legitimate interest.
Prospecting (newsletters, offers) — consent (6-1-a), withdrawable at any time.

5. Retention

Account: during use, then up to 3 years after inactivity/deletion.
Billing: up to 10 years (accounting/legal obligations).
Technical logs: 12 months max (security/diagnostics).
Support: 24 months after closure.
Prospecting: 3 years after last contact or until consent is withdrawn.

6. Recipients and processors

Providers assisting in operating the Services (Art. 28 GDPR agreements):

Hosting & CDN: [Cloud/CDN], configured hosting regions.
Payments: Stripe, PayPal (card data remain with these providers).
Emailing/Support: [e.g., SendGrid/Resend], [ticketing tool].
Analytics/diagnostics: [e.g., Matomo/GA4], logging/performance tools.
Third-party integrations you activate (webhooks, CRM, etc.).

We do not sell your data. Transfers outside the EEA/UK/Switzerland rely on Standard Contractual Clauses and/or adequacy decisions (see §7).

7. International transfers

For transfers outside your jurisdiction (e.g., EEA → USA/Canada), we apply required safeguards (SCCs, supplementary measures). You may request a copy of the mechanisms in place.

8. Your rights

Depending on your jurisdiction: access, rectification, erasure, restriction, portability, objection (GDPR Art. 15–21); consent withdrawal; post-mortem directives (where applicable).

Exercise your rights at info\u0040prismyk.com. You may lodge a complaint with the competent authority (e.g., CNIL in France, CAI in Quebec).

9. Security

Technical and organizational measures: TLS, hardened infrastructure, access control, logging, automatic backups. In case of an incident, we notify as required by applicable laws.

10. Cookies and trackers

We use cookies/similar tech to operate the site, measure audience, and improve the service. Manage preferences via the banner or your browser.

Strictly necessary: session, auth, anti-CSRF, preferences — legal basis: legitimate interest/contract — duration: session to 12 months.
Audience measurement: page views, performance — legal basis: consent (where required) — duration: up to 13 months.
Marketing: campaign/retargeting — legal basis: consent — duration: 3 to 13 months.

11. Minors

The Services are not directed to persons under 16 (or the locally required age). If a minor provided data, contact us for deletion.

12. Automated decisions

No solely automated decisions producing legal effects. Some features may use limited recommendations/profiling to personalize the experience.

13. Third-party services and outbound links

Third-party sites/solutions you activate are subject to their policies (e.g., payment providers, CRM). Consult those documents directly.

14. Changes to this policy

This policy may be updated. The applicable version is the one published here. For material changes, we will inform you appropriately.

15. Contact

Any privacy question: info\u0040prismyk.com — [Postal address of Nabunam Inc.].