Avista Care – Privacy Policy

Last updated: 1st of December, 2025

Your privacy matters to us. This Privacy Policy explains what information Avista collects, how we use it, and the choices you have. By using Avista Care (the “Service”), you agree to the practices described here.

1. Information We Collect

We collect information to deliver and improve the Service. This includes:

1.1 Information you provide

• Account details (name, email, billing information)
• Website information (domain, configuration settings, installed plugins/themes as needed for maintenance)
• Support requests and communication with the Avista team

1.2 Automatically collected data

To keep your websites healthy and secure, Avista Care may automatically collect technical information such as:

• Website performance metrics
• Security scan results
• Update logs (plugins, themes, CMS core)
• Error messages or crash logs
• Hosting environment details (PHP version, server type, etc.)

1.3 Backups & maintenance data

If your plan includes backups or syncing:

• Your website data may be stored securely for the purpose of backup restoration.
• Backups are encrypted and deleted after their retention period.

2. How We Use the Information

We use collected information to:

• Operate and maintain Avista Care
• Monitor website health, uptime, and performance
• Keep websites updated and secure
• Provide customer support
• Improve the Service
• Manage billing and subscriptions
• Detect, prevent, or address technical issues or misuse

We do not sell your data or use it for advertising.

3. Information Sharing

We only share your information when necessary:

3.1 Trusted service providers

Certain tools or systems help us operate the Service (e.g., hosting, monitoring services, security scanners, payment processors).
These partners only receive the minimum data required and must follow confidentiality and security obligations.

3.2 Legal requirements

We may share information if required by law, regulation, or to protect Avista, our users, or the public.

3.3 No selling, trading, or profiling

Avista does not sell, rent, or trade personal data.
We do not use your website data for external AI training, advertising, or profiling.

4. Data Security

We take security seriously and use industry-standard measures to protect your data, including:

• Encrypted communication (HTTPS)
• Secure backup storage
• Access controls and authentication
• Regular security monitoring

No system is completely risk-free, but we work continuously to keep your information protected.

5. Data Retention

We retain different types of data for different periods:

• Account information: kept while your subscription is active
• Backups: deleted after the plan-specific retention period
• Support logs: kept for internal reference and service improvement
• Technical logs: kept only as long as necessary for diagnostics

If you close your account, we delete or anonymize your data within a reasonable period unless legal obligations require longer storage.

6. Your Rights

Depending on your location (e.g., Iceland/EU), you have rights such as:

• Access your personal data
• Request correction or deletion
• Export your data
• Object to certain types of processing
• Withdraw consent (where applicable)

To exercise these rights, contact us at the email address on our website.

7. Cookies & Tracking

Avista Care may use cookies or similar technologies to:

• Keep you logged into your dashboard
• Remember preferences
• Improve functionality
• Measure usage patterns

You can control cookies through your browser settings.

8. Children’s Privacy

The Service is not intended for individuals under 16.
We do not knowingly collect personal data from children.

9. International Data Transfers

If data is transferred outside Iceland or the EEA, we use safeguards such as:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant processors
• Adequate protection measures

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
If the changes are significant, we will notify you (e.g., email or dashboard message).
Continued use of the Service means you accept the updated policy.