Privacy Policy

Controller: Unplain Media (trade name of S&D CASEY BROS LTD, ΗΕ 429874)

Address: Αρχαγγέλου Μιχαήλ, 18B, Μονή 4525, Λεμεσός, Κύπρος

Email: hello@unplainmedia.com

• Enquiries: name, email/phone, company, message content.
• Client administration: contract details, invoice/payment status (payments via Stripe).
• Website: technical only; basic logs for security and functionality.
• If you interact with a Client's automation we operate: chat transcripts, call transcripts (no recordings), interaction metadata, and for clinics only: service requested, treatment zone, plus booking contact details (name and phone) where provided.

• Respond to enquiries and manage relationships (legitimate interests / pre-contract steps).
• Provide Services to Clients (contract).
• Billing and accounting (legal obligation).
• Security and abuse prevention (legitimate interests).

When we operate automations for a clinic or business, that clinic or business is typically the Controller of end-user data, and Unplain Media acts as Processor under a DPA. In those cases, the client's privacy notice governs the main purposes.

• Transcripts and interaction metadata: 12 months rolling; exceptionally up to 24 months where the Client instructs and documents necessity.
• Contract end: production service data deleted or returned within 30 days as a company policy; backups expire within up to 90 days.
• Invoices, tax, and accounting records: retained 7 years to meet statutory and audit needs (Cyprus VAT record-keeping requires at least 6 years).

We may share personal data with:

• Stripe and other billing or payment service providers and subprocessors needed to deliver Services, maintained under the DPA;
• professional advisers and regulators where legally required.

If any service provider processes data outside the EEA, appropriate safeguards will be used where required.

You may have rights of access, rectification, erasure, restriction, objection, and portability. If we are acting as Processor, requests should be directed to the relevant Client (Controller); we assist on their instruction.

We use essential cookies only (no analytics or pixels by default).

You can lodge a complaint with the Cyprus supervisory authority for data protection.