Tenant Privacy Policy

1. Introduction

Floating Energy Limited Ireland ("we", "us", "our") provides the 2DSM – Online Booking System for Service Businesses SaaS platform. This Privacy Policy explains how we collect, use, store, share, and protect personal data in compliance with the GDPR and other applicable laws.

Data Controller: Floating Energy Limited Ireland

Platform: 2DSM – Online Booking System for Service Businesses (www.ireturn.life)

Contact: support@ireturn.life

2. Roles and Scope

• Tenant account data: We are the Data Controller.
• Tenant business data (end-customer data): We are the Data Processor and act only under tenant instructions.
• Tenants: Act as Data Controllers for their own customers and must provide their own privacy notices.

3. Legal Bases for Processing

• Contract: Provide the service, manage subscriptions, and deliver support.
• Legal obligation: Tax, accounting, and regulatory compliance.
• Legitimate interests: Security, fraud prevention, service improvement.
• Consent: Optional marketing or analytics (where required).

4. Personal Data We Collect

• Account details (tenant name/code, admin name, email, contact info).
• Billing data (plan, invoices, tax info, payment status).
• Usage and audit logs (access logs, security events, device/browser metadata).
• Support communications (tickets, emails, chat messages).
• Preferences and technical data (cookies, language, timezone).

5. How We Use Data

• Account registration and authentication.
• Subscription management, invoicing, and payment processing.
• Customer support and service improvements.
• Security monitoring and fraud prevention.
• Legal compliance and enforcement requests.

6. Sharing and Disclosure

We do not sell personal data. We only share data with:

• Service providers (hosting, email, logging, support tools).
• Payment processors (subscription billing and transactions).
• Legal authorities when required by law.
• Successors in the event of a merger or acquisition.

7. International Transfers

If data is transferred outside the EEA, we apply GDPR-compliant safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

8. Data Retention

• Account and subscription data: retained during the contract and as required by law.
• Security logs: retained as needed for compliance and incident response.
• Financial records: retained per tax and accounting requirements.

9. Security Measures

• Access control and least-privilege policies.
• Encryption in transit and at rest (where applicable).
• Security monitoring, logging, and incident response procedures.
• Supplier assessments and contractual safeguards.

10. Your GDPR Rights

• Right to access, rectify, or erase personal data.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent (where consent is the legal basis).
• Right not to be subject to solely automated decisions (where applicable).
• Right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at support@ireturn.life.

11. Cookies

We use essential cookies to operate the platform. Non-essential cookies are used only when required and based on your choices.

12. Children’s Privacy

Our services are intended for business use and are not directed to children.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via platform notice or email.

14. Contact

• Company: Floating Energy Limited Ireland
• Email: support@ireturn.life
• Phone: +353-830687699