Privacy Policy

Last updated: 27 May 2026

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), we inform you of our privacy policy regarding the personal data we collect when you use the NETKIDO platform.

1. Data Controller

Legal name	[FULL COMPANY NAME]
Trading name	Netkido Tech
VAT / Tax ID	[TAX ID]
Registered address	[FULL ADDRESS — STREET, NUMBER, POSTCODE, CITY, SPAIN]
Email	info@netkido.tech
Website	https://netkido.tech

2. Personal Data We Process

2.1 Account Registration and Management

When you create an account on netkido.tech we collect:

First and last name
Email address
Company name
Password (stored as an irreversible cryptographic hash; never in plain text)

Purpose: Creating and managing your user account, the account-approval process and provision of the SD-WAN service.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) — processing is necessary to provide the requested service.

Retention period: For as long as the account remains active. After voluntary closure or cancellation, data will be retained for the legally required period (5 years for tax obligations, 3 years for contractual claims) and then deleted.

2.2 SD-WAN Platform Technical Data

To provide the SD-WAN connectivity service we process technical data associated with the customer’s nodes (connected devices):

WireGuard tunnel IP address assigned to the node
Node hostname
Performance metrics: latency, bandwidth (RX/TX), CPU and RAM usage
Last-seen timestamp
Configuration and provisioning job log

Purpose: Network health monitoring, fault detection, usage-based billing and delivery of the contracted service.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and the controller’s legitimate interest in ensuring service quality and security (Art. 6(1)(f) GDPR).

Retention period: Real-time metrics are kept for a maximum of 90 days in operational logs. Billing data is retained for 5 years in accordance with applicable tax legislation.

2.3 Contact Form

When you fill in the contact form on netkido.tech we collect:

Name
Email address
Company name (optional)
Subject and message content

Purpose: Responding to your enquiry and, with your prior explicit consent, maintaining a record in our CRM for commercial or support follow-up.

Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR), obtained by accepting the privacy policy on the form.

Retention period: Until the data subject withdraws consent, with a maximum of 3 years since the last contact.

2.4 Access Logs

Web servers automatically record the following access data:

Visitor IP address
Date and time of request
Requested URL and HTTP response code
Browser type and operating system (User-Agent)

Purpose: System security, detection and prevention of unauthorised access, and technical incident diagnosis.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) and legal information-security obligations.

Retention period: Maximum 12 months.

3. Recipients and Processors

We do not share your personal data with third parties except where required by law or in the following cases, where we act as controller and the third parties as processors:

Supplier	Purpose	Country	Safeguards
Brevo (ex Sendinblue)	CRM and web-form contact management; transactional email delivery	EU (France)	Subject to GDPR; DPA available at brevo.com
Web hosting provider	Platform and database hosting	EU / EEA	Data processing agreement; servers in EU territory
WooCommerce (Automattic)	Registration and subscription management	USA	EU Standard Contractual Clauses (SCCs); EU-US Data Privacy Framework

We do not carry out international transfers of data outside the European Economic Area other than those listed above, all of which are covered by adequate safeguards under Chapter V of the GDPR.

4. Your Rights

Under the GDPR you have the following rights regarding the processing of your personal data:

Access: Obtain confirmation of whether we process your data and receive a copy.
Rectification: Request the correction of inaccurate or incomplete data.
Erasure («right to be forgotten»): Request deletion of your data where, among other grounds, it is no longer necessary for the purpose for which it was collected.
Objection: Object to processing based on legitimate interest on grounds relating to your particular situation.
Restriction: Request restriction of processing while a complaint or challenge is resolved.
Portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller, where processing is based on consent or a contract.
Withdrawal of consent: Withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, send an email to info@netkido.tech stating the right you wish to exercise and attaching a copy of an identity document. We will respond within a maximum of one month from receipt of the request (extendable by two further months in cases of particular complexity).

If you consider that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

5. Cookies

Netkido.tech uses only the strictly necessary technical cookies required for the service to function:

Cookie	Purpose	Duration
`wordpress_logged_in_*`	Maintain the authenticated user session	Session
`woocommerce_session_*`	WooCommerce cart and session management	2 days
`wp-settings-*`	WordPress admin panel preferences	1 year

We do not use analytics, behavioural advertising or third-party tracking cookies. No cookie banner is required for strictly technical cookies under GDPR recital 30 and the ePrivacy Directive.

6. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encrypted communications via TLS 1.2 / 1.3 (HTTPS)
VPN tunnels encrypted with WireGuard (ChaCha20-Poly1305)
Passwords stored as irreversible cryptographic hashes (bcrypt)
Role-based access control and manual account-approval process
Regular backups with restricted access
Continuous node monitoring and real-time security alerts

In the event of a personal data breach that is likely to pose a risk to your rights and freedoms, we will notify you without undue delay and, in any case, within 72 hours of becoming aware, as required by Art. 33 GDPR.

7. Minors

NETKIDO is a service aimed exclusively at businesses and professionals. We do not knowingly collect data from persons under 16 years of age. If we detect that data of a minor has been provided, we will delete it immediately.

8. Changes to This Policy

We may update this Privacy Policy to reflect regulatory changes or changes to our services. Material changes will be communicated by email to registered users and published on this page showing the date of the last update. Continued use of the service after publication of changes will constitute acceptance of those changes.