Privacy Policy

Last updated: November 5, 2026

This policy explains what personal data SUPCTR collects through supctr.com, why we collect it, and what rights you have. We keep it short because we collect very little.

1. Who is responsible

[Legal company name, legal form], trading as SUPCTR, [street address, city, postal code, country], is the controller of your personal data. Contact: [email protected].

We serve customers in the United States and the European Union. [If you have no EU establishment, consider naming an EU representative here.]

2. What we collect and why

DataPurposeLegal basis (EU/UK GDPR)
Contact form: name, company, work email, phone (optional), region, location, industry, service of interest, and your messageTo read and answer your enquiry, and to prepare proposals or consultationYour consent (Art. 6(1)(a)); steps before entering a contract at your request (Art. 6(1)(b))
Technical data: IP address, browser type, request timeTo deliver the website, keep it secure and prevent abuse and spamOur legitimate interest in a secure website (Art. 6(1)(f))
Security check result from the spam filter on the contact formTo block automated submissionsLegitimate interest (Art. 6(1)(f))

We do not use advertising or analytics trackers, and we do not build profiles or make automated decisions about you.

3. Who receives your data

We do not sell your personal data. We use service providers that process data on our behalf:

We may also disclose data where the law requires it.

4. Transfers outside your country

Our providers may process data in the United States and other countries. Where data from the EU or UK is transferred to a country without an adequacy decision, we rely on safeguards such as the EU–US Data Privacy Framework (where the provider is certified) or Standard Contractual Clauses.

5. How long we keep it

We keep enquiries for [24 months] after our last contact with you, or longer if we start working together and must keep records for legal or tax reasons. Technical logs are kept by our providers for short periods under their own policies.

6. Cookies

Our website does not set cookies for tracking or advertising. Cloudflare may set strictly necessary security cookies or similar technology to protect the site and run the spam check. These do not require consent under EU rules because the site cannot work securely without them.

7. Your rights

If you are in the EU or UK, you can ask us to access, correct, delete or restrict your data, to move it to another provider, and to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time, which does not affect earlier processing. You also have the right to complain to your local data protection authority.

If you are in the United States, depending on your state (for example California, Colorado or Virginia), you may have the right to know what we hold, to correct or delete it, and not to be discriminated against for using these rights. We do not sell or share personal data for advertising.

To use any of these rights, email [email protected]. We may need to confirm your identity first, and we will respond within the time the law requires (generally within one month in the EU and 45 days in the US).

8. Security

The website uses HTTPS, enquiries travel over encrypted connections, and access to our mailbox is limited to staff who need it. No system is completely secure, so please do not send passwords or confidential process data through the contact form.

9. Children

Our services are for businesses. The website is not directed at children and we do not knowingly collect their data.

10. Changes

We may update this policy. The date at the top shows the latest version.