Ploi.io is fully committed to GDPR compliance and protecting your personal data.

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It establishes rules for how companies collect, store, process, and delete personal data of EU citizens. These regulations apply to all organizations handling EU citizen data, regardless of their location.

Our commitment to data protection

At Ploi, we take data protection seriously. We have implemented comprehensive measures to ensure full GDPR compliance:

• Transparency: We clearly explain what data we collect and how we use it
• Purpose Limitation: We only collect data necessary for our services
• Data Minimization: We limit data collection to what is essential
• Accuracy: We keep your data accurate and up to date
• Storage Limitation: We don't keep your data longer than necessary
• Security: We use industry-standard security measures to protect your data

Your rights under GDPR

As a data subject under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request corrections to inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing of your data
• Right to Restrict Processing: Request limitations on data processing
• Right to Withdraw Consent: Withdraw previously given consent at any time

Data processing activities

We process personal data for the following purposes:

• Account creation and management
• Service provisioning and server management
• Customer support and communication
• Billing and payment processing
• Legal compliance and security
• Service improvements and analytics (anonymized)

Data security measures

We implement robust security measures to protect your data:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Access controls and authentication
• Employee training on data protection
• Incident response procedures
• Regular backups and disaster recovery plans

Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

International data transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with GDPR requirements.

Data protection officer

For any GDPR-related questions or to exercise your data protection rights, please contact our Data Protection team:

• Email: [email protected]
• Response time: Within 30 days as required by GDPR

Updates to our GDPR practices

We regularly review and update our GDPR compliance measures to ensure we meet the highest standards of data protection. Any significant changes will be communicated to our users.

Last updated: October 30, 2025