Privacy Policy
Last updated: 14 September 2026
This policy explains what personal information Global Soft Technologies (“we”, “us”) collects when you use 10MB AI and our websites, hosting and related services, why we collect it, and what rights you have over it.
We are the data controller for the information described here.
Who we are
- Legal entity: Global Soft Technologies
- Trading as: 10MB.com
- Based in: Kelowna, British Columbia, Canada
- Privacy contact: privacy@10mb.com
What we collect, and why
We collect only what we need for a specific purpose. We do not sell personal information.
| What | Why | Lawful basis (UK/EU) | Kept for |
|---|---|---|---|
| Name, email, phone, company | Answering enquiries and providing support | Legitimate interests; steps prior to a contract | 3 years after last contact |
| Billing name, address, account details | Taking payment and meeting tax and accounting duties | Contract; legal obligation | 7 years (statutory retention) |
| Account credentials for the client portal | Operating your account and services | Contract | Life of the account, then 90 days |
| Website content and files you host with us | Delivering the hosting service you bought | Contract | Life of the service, then per your plan’s retention |
| Server and access logs, including IP address | Security, abuse prevention, diagnosing faults | Legitimate interests; legal obligation | Up to 12 months |
| Email address for newsletters | Sending updates you asked for | Consent | Until you unsubscribe |
| Analytics and marketing data | Understanding site usage and measuring campaigns | Consent | Per the tool, see our Cookie Policy |
Analytics and marketing technologies are switched off until you consent to them. If you decline, they are never loaded. See our Cookie Policy.
Who we share it with
We share personal information only with providers who help us run the service, and only as far as they need it. Each is bound by contract to protect it. Our current providers are listed on our Sub-processors page.
We also disclose information where we are legally required to, or to establish or defend legal claims.
International transfers
We operate from Canada and use providers in Canada, the United Kingdom, the European Union and the United States. Where personal information leaves the UK or EEA, we rely on the UK and EU adequacy decisions for Canada where they apply, and otherwise on Standard Contractual Clauses with appropriate safeguards.
Your rights
Wherever you live, you can ask us to give you a copy of your information, correct it, delete it, or stop using it in a particular way. We will not treat you differently for exercising these rights.
If you are in the UK or the European Economic Area
- Access, rectification and erasure of your personal data
- Restriction of processing, and objection to processing based on legitimate interests
- Data portability, where processing is by consent or contract and carried out by automated means
- Withdrawal of consent at any time, without affecting processing already carried out
- To lodge a complaint with your supervisory authority, or with the UK Information Commissioner’s Office
If you are in California
Under the CCPA as amended by the CPRA you may request the categories and specific pieces of personal information we have collected, request deletion, request correction, and limit the use of sensitive personal information.
We do not sell or share your personal information as those terms are defined by the CPRA, and we have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of anyone under 16.
If you are in Canada
Under PIPEDA you may request access to your personal information and challenge its accuracy, and may complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, Law 25 gives you further rights including data portability and the right to be informed of automated decision-making.
If you are in Australia
Under the Privacy Act 1988 and the Australian Privacy Principles you may request access to and correction of your personal information, and may complain to the Office of the Australian Information Commissioner.
To exercise any of these rights, email privacy@10mb.com. We respond within 30 days, or sooner where the law requires it. We may need to verify your identity first.
How we protect it
- TLS encryption in transit across all our sites and client systems
- Access limited to staff who need it, under confidentiality obligations
- Daily backups of hosted services, held separately from live systems
- Malware scanning and firewalling on hosting infrastructure
No system is perfectly secure. If a breach affects your personal information and is likely to result in a risk to your rights, we will notify you and the relevant regulator within the timeframes the law sets.
Children
Our services are sold to businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Changes
We update this policy when our practices change. The date at the top shows the current version. Material changes will be notified to account holders by email.