Privacy Policy – Iconic VPN 

1. Who We Are
   Iconic VPN is a privacy-focused VPN service provider based in the United Kingdom. Our website address is: https://iconicvpn.com

We are committed to protecting your personal data and respecting your privacy rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws. 

2.What Data We Collect
We operate under a strict no-logs policy. This means we do not collect or store: 

• Your browsing history  

• Your DNS queries  

• Your connection timestamps  

• Your IP address while connected to our VPN 

However, we may collect limited personal data when you interact with our website or services, including: 

• Account registration details (name, email address, username)  

• Payment information (processed securely via third-party providers)  

• Support communications  

• Website usage data (via cookies and analytics tools) 

3. How We Use Your Data
   We use your data only for the following lawful purposes:

• To provide and maintain our VPN services  

• To process payments and manage subscriptions  

• To respond to customer support requests  

• To improve our website and user experience  

• To comply with legal obligations 

We do not sell, rent, or share your personal data with third parties for marketing purposes. 

4. Cookies and Tracking Technologies
   Our website uses cookies to enhance functionality and user experience. These may include:

• Session cookies for login and navigation  

• Preference cookies to remember your settings  

• Analytics cookies (e.g., Google Analytics) to understand site usage 

You can manage or disable cookies through your browser settings. 

5. Data Sharing and Third Parties
   We may share your data with trusted third-party providers who help us deliver our services, such as:

• Payment processors (e.g., Stripe, PayPal)  

• Customer support platforms  

• Hosting and infrastructure providers 

All third parties are contractually bound to protect your data and comply with applicable privacy laws. 

6. International Data Transfers
   If we transfer your data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• UK adequacy decisions  

• Standard contractual clauses (SCCs)  

• Binding corporate rules (BCRs) 

7. Data Retention
   We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. For example:

• Account data is retained while your subscription is active  

• Support communications may be retained for up to 12 months  

• Payment records are retained for financial compliance 

8. Your Rights
   Under UK GDPR, you have the right to:

• Access your personal data  

• Request correction or deletion  

• Object to or restrict processing  

• Withdraw consent (where applicable)  

• Request data portability 

To exercise your rights, contact us at [Insert Contact Email]. 

9. Data Security
   We implement robust security measures to protect your data, including:

• End-to-end encryption  

• Secure server infrastructure  

• Access controls and authentication  

• Regular security audits 

10. Changes to This Policy
    We may update this Privacy Policy from time to time. Any changes will be posted on our website, and your continued use of our services constitutes acceptance of the updated policy.
11. Contact Us
    If you have questions or concerns about this Privacy Policy or your data rights, please contact us at:
    Email: [email protected]