Privacy Policy
This policy explains how personal data is processed when you use this Website and its Services.
1. Controller and Scope
The legal entity identified in the Controller Details below is responsible for the processing of personal data described in this Privacy Policy when acting as data controller.
This policy applies to www.receive-sms-online.info, including Public Number functionality, paid or private functionality, account or dashboard features where available, and related technical services.
Controller Details
2. Data We May Process
Depending on the Service used, we may process:
- account and service information, such as an account identifier, service identifier, email address where supplied, and service status;
- transaction information, such as order identifiers, payment status, currency, amount and transaction references. Payment card details may be processed directly by an external payment provider rather than stored by us;
- technical and network information, including IP address, timestamp, browser or device information, request logs, error logs and security events;
- message-related information, including message content, sender information, destination number, timestamps and related metadata where technically available and necessary for the Service;
- communications sent to support, complaints or official-request channels; and
- cookie, local-storage and similar information used for essential functionality, preferences, security or analytics where applicable.
3. Public Numbers and Private Services
Public Numbers are intentionally public. Messages received through a Public Number may be displayed to any visitor of the Website. A User must not use a Public Number for confidential, sensitive, financial, medical or other information that the User expects to remain private.
Private Numbers or private URLs are intended to limit ordinary public access, but no internet or telecommunications service can guarantee absolute confidentiality or uninterrupted availability. Users should avoid sending or receiving information that is unnecessary for the intended use of the Service.
4. Purposes and Legal Bases
Personal data may be processed for the following purposes and legal bases, as applicable:
- Performance of a contract: to activate, provide, maintain and support a Service requested by the User, process an order and manage related communications.
- Legitimate interests: to secure the Website and Services, detect and prevent fraud or abuse, diagnose errors, maintain service quality, defend legal claims and improve operational reliability, where those interests are not overridden by applicable data-protection rights.
- Legal obligations: to comply with tax, accounting, regulatory, judicial, law-enforcement, preservation, production or other obligations imposed by applicable law.
- Consent: where consent is legally required, for example for certain non-essential cookies or similar technologies. Consent may be withdrawn for future processing where the processing depends on consent.
5. Recipients and Service Providers
Where necessary for the purposes described above, data may be made available to categories of recipients such as telecommunications providers, cloud or hosting providers, infrastructure and API providers, payment processors, security and fraud-prevention providers, professional advisers and competent public authorities.
Providers are given access only to information reasonably necessary for their role and are subject to applicable contractual and legal requirements.
6. International Transfers
Some technical or service providers may process data outside the country in which the User is located. Where personal data is transferred outside the European Economic Area and applicable law requires safeguards, an appropriate transfer mechanism or other lawful safeguard will be used.
7. Retention
Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, taking into account operational requirements, security, dispute handling, accounting or legal obligations and applicable data-protection principles.
Different categories of technical, transaction and message-related information may have different retention periods. Data that is no longer required is deleted, anonymised or otherwise made unavailable in accordance with applicable procedures.
Where a valid preservation order, production order, investigation request or other lawful requirement applies, specified data may be preserved for the period required by that legal process. The European electronic-evidence framework does not itself create a general obligation to retain all user data in anticipation of future requests.
8. Cookies and Local Storage
The Website may use cookies, local storage or similar technologies that are necessary for sessions, security, language settings, preferences and other requested functionality.
Where applicable law requires consent before using non-essential analytics, advertising or similar technologies, those technologies should be enabled only after the required consent has been obtained.
9. Security
Reasonable technical and organisational measures are used to protect information against unauthorised access, alteration, loss or disclosure. No internet, cloud or telecommunications system can be guaranteed to be completely secure.
10. Your Data-Protection Rights
Subject to the conditions and limitations of applicable law, an individual may have rights to request access, rectification, erasure, restriction of processing, data portability or objection to processing, and to withdraw consent where processing is based on consent.
An individual may also have the right to lodge a complaint with the competent data-protection supervisory authority.
Requests concerning personal data may be submitted using the address shown in the Controller Details section above. We may request information reasonably necessary to verify identity before acting on a request.
11. Law Enforcement and Legal Requests
Information may be preserved or disclosed to competent law-enforcement, judicial or regulatory authorities where required or permitted by applicable law. We may be prohibited from notifying a User about such a request or may delay notification where disclosure would prejudice an investigation or legal process.
Official-request information for competent authorities is available on the local Law Enforcement page.
12. Changes to this Policy
This Privacy Policy may be updated where reasonably necessary to reflect changes in the Services, processing activities, legal requirements or operational practices. The current version is the version published on this page.