GDPR Compliance
Your privacy rights under the General Data Protection Regulation
Last updated: March 15, 2026
Our Commitment to GDPR
CloudContactPro is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we ensure compliance with European data protection laws.
The GDPR applies to the processing of personal data of individuals in the European Economic Area (EEA), regardless of where the processing takes place. As a provider of cloud-based communication services, we act as both a data controller and data processor depending on the context of our services.
Your Rights Under GDPR
The GDPR grants you several important rights regarding your personal data. You can exercise any of these rights by contacting us.
Right to Access
You have the right to request access to your personal data and obtain information about how we process it.
Right to Rectification
You can request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
Also known as the 'right to be forgotten,' you can request deletion of your personal data in certain circumstances.
Right to Restrict Processing
You can request that we limit how we use your personal data while concerns are being addressed.
Right to Data Portability
You can request to receive your personal data in a structured, machine-readable format.
Right to Object
You can object to the processing of your personal data for direct marketing or legitimate interests.
Under GDPR, we must have a lawful basis to process your personal data. Depending on the type of processing, we rely on the following legal bases:
Contract Performance
Processing necessary to fulfill our contractual obligations to you, such as providing VoIP services.
Legal Obligation
Processing required to comply with telecommunications regulations, tax laws, and other legal requirements.
Legitimate Interests
Processing necessary for our legitimate business interests, such as fraud prevention and service improvement.
Consent
Processing based on your explicit consent, such as marketing communications or optional analytics.
Data Controller Information
CloudContactPro acts as the data controller for personal data collected through our website, marketing activities, and account management. For data processed on behalf of our customers through our communication services, we act as a data processor.
CloudContactPro (Data Controller)
30 N Gould St, #62961
Sheridan, Wyoming 82801, US
Email: support@cloudcontactpro.net
International Data Transfers
As CloudContactPro is based in the United States, personal data may be transferred outside the EEA. We ensure appropriate safeguards for international transfers through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules where applicable
- Adequacy decisions for transfers to approved countries
- Supplementary measures including encryption and access controls
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary based on:
- Account data: Duration of the business relationship plus 7 years
- Call records: 18 months minimum for regulatory compliance
- Support tickets: 3 years from resolution
- Marketing data: Until consent is withdrawn or 3 years of inactivity
- Website analytics: 26 months (anonymized after 14 months)
Data Security Measures
We implement appropriate technical and organizational measures to protect personal data:
- End-to-end encryption for voice communications (TLS/SRTP)
- AES-256 encryption for data at rest
- Multi-factor authentication for account access
- Regular security audits and penetration testing
- SOC 2 Type II certified infrastructure
- Employee training on data protection
- Incident response procedures
Data Protection Officer
For questions about our GDPR compliance or to exercise your data protection rights, please contact our Data Protection team:
Data Protection Team
Email: support@cloudcontactpro.net
Phone: 307-224-8409
Submitting a Data Request
To exercise any of your GDPR rights, you can submit a request through the following methods:
- Email your request to support@cloudcontactpro.net
- Use our contact form on the website
- Write to us at our postal address
We will respond to your request within 30 days. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
Right to Lodge a Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. You can file a complaint with the data protection authority in the EU member state where you live, work, or where the alleged infringement took place.
Have Questions About Your Data?
Our team is here to help you understand your privacy rights and how we protect your data.