Privacy Policy
Translaty (“we”, “us”, “our”) is a professional document translation service that provides accurate and confidential translations in line with the highest standards of quality and data protection. This Privacy Policy explains what personal data we process, for what purposes, on what legal bases, and what rights data subjects have, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data we collect
- Identifiers: first name, last name, company, address, phone number and email address
- Account credentials and language preferences
- Documents uploaded for translation and associated metadata
- Billing information processed by the payment provider, without storing full card numbers
- Technical data: IP address, browser, operating system, time zone and cookies
2. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Provision of translation services and support | Performance of a contract 6(1)(b) |
| Billing and fraud prevention | Legal obligation 6(1)(c) |
| Direct marketing (newsletters) | Consent 6(1)(a) |
| Analytics and platform improvement | Legitimate interests 6(1)(f) |
| Compliance with legal or judicial requirements | Legal obligation 6(1)(c) |
3. Recipients and transfers
We share data only with our hosting and infrastructure providers, our payment provider, the error-monitoring service that alerts us to technical faults, translators bound by confidentiality agreements and, for orders placed through a partner's ordering site, that partner and the Visa Advisor chosen for the order, if any. International transfers are based on the Standard Contractual Clauses adopted by the European Commission.
4. Retention
We permanently retain translated documents and their metadata in order to (a) respond to any subsequent request, comment or correction, and (b) ensure continuity and terminological consistency if the client requests new translations. Upon a deletion request, we will irreversibly delete such documents within a maximum period of 30 days. Other data will be deleted or anonymised when it is no longer needed or when the applicable statutory retention periods have expired.
5. Security
| Measure | What it means | Status |
|---|---|---|
| Encryption in transit | Protection of client–server communication via TLS 1.2/1.3 | Implemented |
| Encryption at rest | Encrypted storage with AES-256 keys managed by the cloud provider | Implemented |
| Role-based access control | Permissions assigned by function to prevent unauthorised access | Implemented |
| Audits and pentests | Regular internal and external reviews in line with Art. 32 GDPR | Implemented |
| Redundant backups | Encrypted replicas in different locations to ensure availability | Pending implementation |
6. Data subject rights
Users may exercise their rights of access, rectification, erasure, restriction, portability and objection by sending a request to contact@translaty.co and attaching proof of identity. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
7. Cookies and similar technologies
We use a small number of cookies and similar technologies, such as your browser's local storage. These remember your language and whether you have closed a notice, store a copy of current exchange rates, keep users of the affiliate, partner and sales areas signed in and, if you arrive through an affiliate's referral link, credit that referral to the affiliate for 30 days. Our payment provider, Stripe, sets its own cookies during payment to help prevent fraud. We do not use advertising or analytics cookies.
8. Minors
The service is not directed at children under 16 years of age; we will only process minors’ data with parental authorisation, in accordance with Art. 8 GDPR.
9. Changes to this Policy
We will publish any changes on this page and, if they are substantial, we will notify registered users at least 30 days in advance.
10. Contact
Data controller: Translaty, 60 Kitchener Street, Wynnum QLD 4178, Australia Email: contact@translaty.co Date of last update: 28 May 2025