Privacy policy

This policy explains what Northmirror OÜ collects when you use uk-mirror-01.bestaislop.com, why we collect it, and how long we keep it.

Last updated: 22 Jan 2026

1. Who we are

Northmirror OÜ operates uk-mirror-01.bestaislop.com and the services described on it. For the purposes of the GDPR we act as the data controller for account data and as a processor for the content you push through the platform.

You can reach our data protection contact at privacy@uk-mirror-01.bestaislop.com.

2. What we collect

Account data. Name, work email, organisation and billing details. Provided by you, kept while the account exists.

Operational logs. Request metadata — timestamp, source network, response code, bytes transferred and the edge that served the request. We need this to bill accurately, to detect abuse and to debug. Retained for 30 days in identifiable form, then aggregated.

Product analytics. Page views and feature usage on the marketing site and console, only if you accept optional cookies.

3. What we do not collect

We do not inspect, index or sell the content you transfer. We do not build advertising profiles, and we do not share operational logs with third parties except where legally compelled — in which case we publish the request in our transparency report unless a gag order prevents it.

4. Legal bases

Contract performance for account and billing data; legitimate interest for abuse prevention and security logging; consent for optional analytics; legal obligation for tax records.

5. Sub-processors

A current list of sub-processors — payment provider, transactional email, and the data centre operators that host our hardware — is available on request and updated 30 days before any change.

6. International transfers

Primary storage stays inside the EEA. Where a customer explicitly enables a region outside it, transfers rely on the European Commission's standard contractual clauses plus supplementary technical measures (encryption in transit and at rest, keys held in the EEA).

7. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interest. We answer within 30 days. If you are unhappy with the outcome you can complain to your national supervisory authority.

8. Cookies

Strictly necessary cookies keep your session and your colour-scheme preference. Optional analytics cookies are off until you accept them and can be withdrawn from the banner at any time.

9. Changes

Material changes are announced by email and on the changelog at least 30 days before they take effect.