Privacy policy
It is important to distinguish between the personal data you entrust to us when using our services and the data you choose to host on our infrastructure yourself: these are two different areas, with distinct responsibilities and safeguards.
The most frequently asked questions about the security of the data you host and the related scope of responsibility are gathered in our dedicated data protection area.
This policy applies to all our products and services.
Our commitment to the confidentiality of your personal data
We collect as little information about you as possible. Some personal data nonetheless remains necessary to manage your orders, ensure the security of your accounts or gather your feedback on certain pages.
We handle personal data with care and are committed to protecting your privacy. These are the three principles we follow:
Kept to a minimum
We do not share personal data with third parties unless there is a legitimate and necessary reason to do so.
Responsible processing
We protect and process your data with the same rigour we apply to our own.
Transparent use
We use personal data only for the purposes described in this policy.
What personal data do we keep?
First name, surname and company name
The basic identifying data that allows us to correctly recognise the individual or company that requests, activates or uses a service.
Email address
The address we use for service communications, replies to your requests, account management and updates on active services.
Telephone number
The contact used for operational communications, support, quick verifications and messages related to the services or requests you send us.
Billing details
The information required for orders, invoices, renewals, accounting documentation and administrative obligations relating to the services purchased.
Payment information
The data needed to manage payments, renewals and transactions for the services activated, to the extent useful for the financial and administrative management of the relationship.
Account access data
The information related to authentication, management of the reserved area, access security and monitoring of the activity on your profile.
IP address
The IP address and the essential technical elements used to protect the infrastructure, monitor the proper functioning of the services and prevent unauthorised access or abuse.
Requests sent to support
Tickets, commercial enquiries, technical communications, reports and content you send us through support or the contact forms.
Information on the services activated
The information related to the configuration, provision, management and support of the services you use, depending on the type of solution.
Data provided directly by you
All the information you choose to enter voluntarily in the forms, messages or communications you send through the website or the contact channels.
When do we share your data with third parties?
Personal data is shared with third parties only when this is necessary to provide the services properly, manage administrative or operational aspects, involve the relevant technical parties, comply with legal obligations or manage specific activities linked to the services activated. In any case, it remains limited to what is relevant to the service and to the applicable regulatory context.
Provide the requested services
To provide and operate the services you activate, some data may be transmitted to the parties needed to deliver them, to the extent useful to ensure the service.
Manage payments and obligations
The data needed for payments, invoicing and administrative obligations may be shared with the parties that handle these activities, when this is essential to complete them.
Involve technical providers
For support, maintenance and the proper functioning of the infrastructure, we may rely on relevant technical providers, who process the data only for the intended purposes.
Comply with legal obligations
Where there is a legal obligation or a request from the competent authorities, data may be disclosed within the limits and in the cases provided for by law.
Manage activities linked to the services activated
For specific activities linked to the services activated, such as domain management, providers, registries or accredited partners may be involved, when necessary for the activation, management or maintenance of the service.
NeoFlux Legal and Privacy department
The management of legal, privacy and personal data protection matters is entrusted to a dedicated internal department. It is responsible for ensuring compliance with applicable regulations, defining measures appropriate to the processing of data and overseeing their correct application within our services.
To exercise your rights or for any question regarding your personal data, you can write to [email protected].
Fraud prevention
Your personal data allows us to verify your identity and to take action when someone attempts to impersonate you by providing incorrect information.
Cookies
Cookies may contain information about you, such as your browsing habits and your interests. You will find full details on how we use them in our dedicated policy.
Cookie policyOverview of your personal data
You can view and manage most of your personal data directly from your Customer Area.
For any question, please contact us.
Access the Customer AreaData processing
Legal or contractual obligations
The provision of personal data may be required by law or derive from contractual obligations. To enter into a contract, for example, we must collect and process certain data: without it, the contract cannot be concluded.
No automated decision-making
We do not use automated decision-making processes or profiling activities on the personal data processed.
Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected or to the extent required by law. As a rule, processing ends when the contract is terminated.
- ●You can independently modify or delete the data you manage within our services. When the contract is terminated, we delete it once the retention period provided for by law has expired.
- ●Backup copies are automatically deleted after the period indicated in the general terms and conditions; contractual data is removed at the end of the statutory retention period.
- ●Data entered during the ordering process is retained for a maximum of six months.
Your personal data
The personal data we process depends on the service you use, the requests you send us and the relationship you establish with us.
It may concern, for example, the information needed to identify and contact you, the information related to the use of the services and to the administrative or technical management of your account, as well as the data collected while browsing the website. The categories are described in detail in the dedicated section of this page.
We process personal data for the purposes connected to the provision of our services: managing your account and your requests, providing technical and administrative support, fulfilling administrative, tax and regulatory obligations and ensuring security and operational continuity.
We do not use the data for purposes other than those for which it was collected.
Personal data is processed in the systems and infrastructure involved in the provision of the services and in the management of relationships with users and customers. It is managed in controlled environments, consistently with the type of service used and with our operational structure.
Data may be shared with third parties only when necessary: to provide the service, to offer technical support, for administrative purposes or for legal obligations.
In any case, the involvement of third parties takes place in compliance with the purposes of the processing and the applicable safeguards, and third parties may not use the data for purposes other than those provided for.
We adopt appropriate technical and organisational measures to protect personal data: access control, system monitoring, risk reduction and, where relevant, separation of the environments and data of different customers. These measures are maintained and updated over time to ensure an adequate level of protection.
We do not retain personal data beyond the time necessary in relation to the purposes for which it was collected or processed.
Where legal, administrative, tax, contractual or protective obligations exist, retention periods may extend for the period required by the applicable regulations.
Retention periods are not the same for all data: they are defined on the basis of the purpose of the processing, the nature of the relationship and the applicable regulatory obligations.
At the end of the relevant period, the data is deleted or anonymised, and is retained further only if there is a legal basis or a specific obligation justifying it.
The regulations grant you concrete rights over your personal data, in particular:
- access to the data and rectification of inaccurate data;
- erasure and restriction of processing;
- objection to processing and, where applicable, data portability.
You can exercise these rights within the limits and in the cases provided for by law.
Legal, privacy and data protection matters are handled internally by a dedicated department, which ensures organisational oversight, in-house expertise and continuity in managing the subject. It is to this function that the assessments and decisions relating to the processing of personal data are referred.
To exercise your rights or for any clarification on the processing of personal data, you can use the contact channels indicated in the documentation and on the information pages of the website, or write to [email protected]. We will reply within the times and in the manner provided for by the applicable regulations.
On this page you will always find the up-to-date version of our privacy policy. For requests or clarifications on the processing of your data, you can contact us at any time.
The privacy policy was last modified on 14/07/2026