Data Processing Policy

For your personal data (name, email, etc.), Irecon Solutions Ltd acts as data controller. For project and business data you enter into iRecons, Irecon Solutions Ltd acts as data processor on your behalf.

We process data to authenticate users, deliver the iRecons service, generate exports and reports, send notifications, provide support, and maintain security and audit logs.

We may engage trusted sub-processors (e.g. cloud hosting providers) to deliver parts of our service. All sub-processors are contractually bound to the same data protection standards we apply. Current sub-processors are listed at irecons.com/sub-processors.

Your data is processed and stored in cloud data centres operated by our hosting and database providers. We will confirm the region in which your data is currently hosted on request, and we give reasonable notice before moving it to a different region. Where a transfer requires additional safeguards under applicable data protection law, we put those safeguards in place before the transfer.

We implement encryption in transit (TLS 1.2 or higher) and encryption at rest as provided by our hosting and database providers; role-based access control with per-company data scoping; audit logging of privileged actions; rate limiting and input sanitisation on our public endpoints; and documented incident response procedures.

Enterprise customers may request a formal Data Processing Agreement (DPA). Contact admin.irecon@gmail.com.