Who are we, and who is responsible for your data?
In plain languageIllevante Cloud in Dubai is responsible for your data.
Illevante Cloud LLC, located at Office No 6, AlKhabeesi Bldg., AlKhabeesi, Dubai, UAE, is responsible for your personal data: it provides our services and contracts for them, and it operates this website and its tools.
Wherever this policy says “Illevante” or “we”, it means Illevante Cloud LLC. For any question or request about your data, write to us at data-protection@illevante.com.
How do we process personal data?
In plain languageWe use your data to carry out your requests, communicate with you, and run and protect the site’s tools, and for the newsletter if you subscribe to it.
We store and use your personal data to process your requests and communicate with you, and to run the site’s tools and protect them from abuse. If you subscribe to our newsletter, we also use your email address to send it to you. We also send you system status messages from the address (noreply-status@illevante.com) if you ask to receive them in your settings in the client area. We also process the data that job applicants send us, and we publish the reviews customers write on the “Customer reviews” page, with their consent.
What categories of data do we collect?
In plain languageTen categories, from your account details to what the site’s tools and their protection need, customer reviews and the Trustpilot button; we never store your card numbers.
Every time you visit our website, technical information about the visit is recorded in the server logs. If you create an account with us, we store your contact information, and when you order a service we also store your address and payment information.
1. Registration data
When you create an account, we collect your personal data as registration data. We need your name, address, phone number, payment information and email address to process your order.
Credit cards: if you pay by card, we do not store card numbers or verification codes, as these are provided directly to the payment service provider. The only exception is the so-called “pseudo card number”, which is stored so that you can pay later without entering your details again; it is a number that does not match your real card number.
Data deletion: we undertake to delete registration data within 24 months, or when your account is deleted, or when the statutory retention period ends. You can ask for your account to be deleted by email: data-protection@illevante.com.
Legal basis: Article 6(1)(b) of the General Data Protection Regulation (GDPR).
2. The newsletter
Our newsletter is one email a month, and offers are separate emails that reach you only if you chose them when subscribing. We use “double opt-in”: we do not store your address until you press the confirmation button in the email we send you, and the confirmation link is valid for 48 hours.
What we store: your email address, the lists you chose, the language of the emails, and the time of your request and the time of its confirmation (which is proof of your consent). We send the newsletter from our own mail server and store this data on our servers, and we do not share it with anyone.
Unsubscribing: every email has a link to unsubscribe, and when you unsubscribe we delete your address from our lists entirely.
Legal basis: your consent, Article 6(1)(a) of the GDPR.
3. Server log files
When you visit our website, we automatically record: your IP address, the browser type and version, the time and date of the request, and the page you came from. We use them only for the site’s security and to diagnose its faults, and we do not link them to your identity.
Legal basis: Article 6(1)(f) of the GDPR.
4. Contacting us, job applications and reports
The contact, job application and abuse report forms on our website send nothing to our servers: they open the email program on your device or the WhatsApp app with a ready-made message, so your data reaches us when you send it yourself, as an email or a WhatsApp message.
Application documents (CV, certificates and cover letter): if you are not hired, they are deleted after 6 months (or 24 months if you agreed to their being kept for future opportunities). If you are hired, they are transferred to the human resources department.
5. Domain tools and signed reports
The WHOIS, DNS propagation check and SSL certificate check tools work without an account. The domain name or site you enter is sent to the parties that answer for it: the WHOIS/RDAP services of domain registries, the global measurement points of the Globalping network, public DNS resolvers (Cloudflare, Google, Quad9, OpenDNS and AdGuard), and the server whose certificate you are checking. We do not link these requests to your identity.
Reports: when you request a signed report on a check result, we store it on our servers with its number, its content and its time of issue, so that it can still be verified. Anyone who has the report number or the QR code printed on it can verify it and see its content on the verification page, so do not put anything in the report that you do not want the person you give it to to see.
Legal basis: Article 6(1)(f) of the GDPR, that is, our legitimate interest in providing the tools and proving the authenticity of their reports.
6. Sending by email from the legal center
When you send a legal document or an excerpt from it to another person’s email address, we use their address to send that one email only, and we neither store it nor add it to any list. We keep an encrypted fingerprint of it in the server’s memory for some hours, to prevent any address from being flooded with emails. Your name appears in the email if you enter it.
7. Your consent to cookies
We record every choice you make in the cookie notice, as proof of your consent: the consent ID, the categories you chose, the version of the cookie list, the language of the notice, and the time. We do not record your IP address or any other data that identifies you in it. The details are in the “Privacy and Cookie Statement”.
Legal basis: Article 6(1)(c) of the GDPR, that is, our obligation to prove consent.
8. Protection against bots (Google reCAPTCHA)
We use the reCAPTCHA v3 service from Google LLC to protect the search and check tools, and the forms that send something to our servers, from automated use and abuse, namely: domain search, the DNS propagation check, the SSL certificate check, WHOIS lookup, issuing and verifying these tools’ reports, newsletter subscription, sending customer reviews, and sending by email from the legal center. The service runs in the background without asking you to solve any challenge, and it loads only when you start typing in one of these fields or open a link that runs a check.
Data processed: so that reCAPTCHA can tell a person from a bot, Google collects technical information about your device and your interaction with the page, such as your IP address, the browser and device type and their settings, pointer or touch movement, and time spent on the page, and it may read Google cookies already on your device. We send Google the token the service generates together with your IP address, and Google returns an assessment of the request to us (a score between 0 and 1). We do not store this assessment, and we do not link it to your account or to any other data about you.
Verification cookie: after verification we place on your device a necessary cookie named illevante-human, which proves the verification was passed, for 15 minutes, so that it is not repeated with every check. This cookie carries no personal data, is read only by our servers, and is deleted automatically when it expires.
Processing by Google: Google processes this data on its servers, including servers in the United States, in accordance with its privacy policy (https://policies.google.com/privacy) and its terms of service (https://policies.google.com/terms). If you block the service from loading in your browser, you will not be able to use the tools and forms it protects, and the rest of the site remains available to you.
Legal basis: Article 6(1)(f) of the GDPR, that is, our legitimate interest in protecting our tools and servers from abuse and automated use.
9. Customer reviews
When you write a review on the “Customer reviews” page, we store what you send in it: what you are reviewing (one of our services, technical support, customer service, or your dealings with us in general) and which side of it, your rating out of 5, the title if you wrote one, the text of your experience, the mentions you choose, the name you choose to show with it, your email address, and the time it was sent.
What is published: once we have read it, we publish your review on the “Customer reviews” page, and we may also publish it on the page of the service it reviews and on the home page, together with the name you chose, its date, our reply and how many people found it helpful. Any visitor can read it, and so can search engines, including Google, which may show it in their results. So choose a name you are happy to have shown, and do not write personal data you do not want published in your review.
Your email address is never published: we use it to confirm that the person who wrote the review is our customer (if we confirm it, we may show “Verified customer” beside your review), and to write to you about your review if we need to. We do not add it to any mailing list. Each new review reaches our team that reads it before publication as an email.
Moderation: we publish low ratings just as we publish high ones, and we never edit your words. We hold back only spam, abuse and what is not about our services, and we keep a review we hold back in our internal records without showing it anywhere.
“Helpful?”: when you press “Yes” under a review we add one to its count, and we do not store who voted. To prevent repeated votes and automated sending, we keep an encrypted fingerprint of your IP address in the server’s memory, for an hour after you send a review and for a day after you vote, and then it is deleted. We place no file on your device for this.
Deletion: your review stays published for as long as we show reviews, and at any time you may ask us to delete it, change the name shown with it, or delete your email address from our records, at data-protection@illevante.com.
Legal basis: your consent to publishing your review and the name you wrote, Article 6(1)(a) of the GDPR, which you withdraw by asking for its deletion; and our legitimate interest in confirming that reviews come from real customers and protecting them from abuse, Article 6(1)(f).
10. The Trustpilot review button
At the bottom of every page, a “Review us on Trustpilot” button invites you to review us on Trustpilot, a platform run by Trustpilot A/S in Copenhagen, Denmark. The button loads only when you come near the bottom of the page: your browser then requests it from Trustpilot’s servers, and Trustpilot thereby receives your IP address and technical information about your browser and device, as happens with any content loaded from another website. The button places no cookie on your device, stores nothing on it, and sends us no data about you.
If you press the button, you go to Trustpilot’s website. What you write there, including your review and the name shown with it, is processed by Trustpilot A/S as its controller and published on its platform, in accordance with its privacy policy (https://corporate.trustpilot.com/legal/for-reviewers/privacy-policy-end-user). We see your review published there as any visitor does, and we may reply to it. Reviews you write on our own website are described in item 9.
Legal basis: Article 6(1)(f) of the GDPR, that is, our legitimate interest in inviting our customers to review our services on an independent platform.
Who do we share your data with?
In plain languageOnly with those needed to provide the service: domain registries, the payment provider, Google and Globalping for the check tools, WhatsApp when you message us there, and Trustpilot when its button loads at the bottom of the page; your published review, though, is seen by everyone.
External service providers may access your data while helping us provide our services. In some cases, third parties may receive your data, such as government authorities, external advisers or our business partners. This happens in particular in the following cases:
Domain name registration
If we register a domain on your behalf, we provide the relevant domain registry with the required data. The registry may publish some of the domain holder’s data in public WHOIS/RDAP services, or keep it with an escrow agent, according to its rules.
Payment by credit card
If you pay by credit card, the payment is processed by an external service provider.
Protection against bots (Google reCAPTCHA)
When you use the search and check tools and the protected forms on our website, Google LLC receives technical data about your device and your interaction with the page to assess the request, as set out in item 8 of “What categories of data do we collect?”.
Check tools (Globalping and public resolvers)
The domain name you check is received by the Globalping network of global measurement points, by public DNS resolvers, and by WHOIS/RDAP services, as set out in item 5 of “What categories of data do we collect?”.
Your published reviews
What we publish of your review is seen by every visitor to our website, and search engines read it and may show it in their results, as set out in item 9 of “What categories of data do we collect?”. Your email address is seen by no one outside our team.
The Trustpilot button
When the review button at the bottom of the page loads, Trustpilot A/S receives your IP address and technical information about your browser and device, as set out in item 10 of “What categories of data do we collect?”.
WhatsApp (Meta)
When you register a domain or message us on WhatsApp, your message passes through Meta’s WhatsApp service, in accordance with its privacy policy.
Debt collection agency
If you do not pay your invoices by the due date, your necessary data will be sent to an external debt collection agency.
Transfers between countries
We operate from the United Arab Emirates, and the data centers we work with are in Europe, the Middle East, North America and Asia, so your data may move between these countries. We transfer it only where this is necessary to perform our contract with you, with your consent, to establish, exercise or defend a legal right, or where other legal exceptions apply. For customers in the European Economic Area, we transfer their data only to a country for which there is an adequacy decision under Article 45 of the GDPR, or where appropriate safeguards exist under Article 46 of it.
Where do we process your data?
In plain languageHosting data in the data center you choose, the site’s data on its servers; and of cookies, only those you agree to are used.
Data for hosting and server services is stored in the data center you choose for them from among our centers in Europe, the Middle East, North America and Asia. This website’s data (the consent log, the newsletter, signed reports and customer reviews) is stored on its servers. The exception is what the reCAPTCHA service collects (item 8 of “What categories of data do we collect?”), which Google LLC processes on its servers, including servers in the United States; and what Trustpilot A/S receives when its button loads (item 10), which it processes on its servers under its own policy.
Cookies and the right to object to direct advertising
“Cookies” are small files stored on the user’s device, and they can store various types of data. They are used primarily to store information about users on their devices during or after a visit to a website or online store.
- Session cookies: deleted as soon as the user leaves the site and closes the browser. They are used, for example, to store the contents of a shopping cart or the login status.
- Persistent cookies: remain stored after the browser is closed. They are used, for example, to keep the login status for several days, or to measure the site’s reach or the user’s interests for marketing purposes.
- Third-party cookies: files set by partners other than the site’s operator.
We use only necessary cookies unless you agree to others: you choose the categories you accept (preferences, statistics and marketing) in the cookie notice on your first visit, and you change your choice or withdraw your consent whenever you like from “Cookie settings” at the foot of every page. The list of every cookie we use, kept up to date by an automatic scan of the site, is in the “Privacy and Cookie Statement”.
Our website uses no statistics or marketing cookies today, and if it uses them later they will only run with your consent. You can also delete the cookies stored on your device from your browser settings; the steps are in “Privacy in Your Browser”. Blocking necessary cookies may disable some features of the site and the client area.
Social media presence
In plain languageWhen you message us on Facebook, Instagram or LinkedIn, those platforms’ terms also apply.
We maintain a presence on social networks to communicate with our customers and those interested in our services and to inform them about our services. We use Facebook, Instagram and LinkedIn, among other platforms. When you visit any of them, the terms and conditions and data processing guidelines of the platform concerned apply to you.
We process the data of users who contact us through these platforms, for example by posting on our pages or sending us messages, so that we can reply to them and follow up on their requests. The legal basis is Article 6(1)(b) of the GDPR where the contact relates to a contract or a service request, and Article 6(1)(f) otherwise.
The conversation shown on the home page under the name “Levi Smart Assistant” is an animated demonstration: no messages are written in it and no data is collected from it.
In the “Name finder” tool, by contrast, users describe their business to Levi: what they write is sent to Anthropic in the United States, the provider of Claude, the AI model Levi runs on, to suggest names, and the names suggested are sent to their extensions’ registries to check they’re free. We don’t keep the conversation on our servers or link it to any account, and it ends when the page is closed. Legal basis: Art. 6 (1) (b) GDPR, as users ask for suggestions before they register. So don’t write personal data it doesn’t need.
Your rights as a “data subject”
In plain languageYou may know what we hold about you, and correct, delete, restrict, object to or move it, and withdraw your consent.
You are entitled to obtain information about your personal data that we process. If your request is not in writing, we may ask you for proof of your identity. You also have the following rights, as they apply to you under the law:
- Right of access: to know what data we hold about you and what we do with it, and to obtain a copy of it.
- Right to rectification: to ask for any inaccurate data to be corrected.
- Right to erasure: to ask for your personal data to be erased in specific cases.
- Right to restriction of processing: to ask us to limit how we use your data.
- Right to object: to object to our processing of your data in accordance with the legal requirements.
- Right to data portability: to receive your data in a structured, machine-readable format so you can transfer it to another party.
- Right to withdraw consent: at any time, for whatever is based on it (such as the newsletter, publishing your review and non-essential cookies), without affecting the lawfulness of what came before.
To exercise any of these rights, write to us at data-protection@illevante.com. To ask about a particular cookie, it is enough to give the consent ID shown in the “Privacy and Cookie Statement”.
Right to lodge a complaint
In plain languageWrite to us first; you may also complain to a competent data protection supervisory authority.
If you have an objection to our processing of your data, write to us first at data-protection@illevante.com so that we can resolve it with you. You are also entitled to lodge a complaint with a competent data protection supervisory authority.
Voluntary nature of providing data
In plain languageProviding your data is optional, but some services do not work without it.
There is no legal obligation requiring you to provide your data to Illevante. However, you will not be able to use some of our services if you do not provide it to us. Your decision to provide us with your personal data is therefore entirely voluntary.
Contact information
In plain languageFor privacy: data-protection@illevante.com; for any other legal question: legal@illevante.com.
For any question or request about your personal data, or any other question about our legal documents, write to us or call us:
- Your personal data
- data-protection@illevante.com
- Legal questions
- legal@illevante.com
Address
Illevante Cloud LLC
Office No 6, AlKhabeesi Bldg., AlKhabeesi, Dubai, UAE
The plain-language summary is for quick reading only; the full text is the reference.
Full and authoritative text: · Printed on