Put.mk

Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Put.mk - КСЕНИЈА 2024 ДООЕЛ Скопје (“Put.mk”, “we”, “us”), as the owner and provider of the website, collects, uses, stores, and protects personal data when you use put.mk and purchase domains, SSL certificates, or shared hosting through our online store.

We process personal data in accordance with the Law on Personal Data Protection of the Republic of North Macedonia and the principles of the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

1. Data controller

Controller: Put.mk - КСЕНИЈА 2024 ДООЕЛ Скопје
Email: domains@put.mk
Phone: +389 2 123 4567

For privacy questions or to exercise your GDPR rights, contact us at the email above with the subject “Privacy / GDPR request”.

2. What data we collect

Depending on how you use our services, we may process:

  • Account and contact data: name, company name, address, email, phone number, tax / VAT ID where required.
  • Domain registration data: registrant details, administrative/technical contacts, and documents required by the national .mk registry or applicable registry rules.
  • Order and billing data: products ordered (domains, SSL, hosting), invoice details, payment status, and correspondence related to your order.
  • Payment data via virtual POS: when you pay online, card payments are processed through a secure e-commerce virtual POS terminal that accepts Visa and Mastercard cards. Card numbers, CVV/CVC, and full PAN data are entered directly on the payment processor’s secure page and are not stored on Put.mk servers. We may receive confirmation of payment, masked card digits (e.g. last 4), authorisation codes, and transaction references.
  • Technical data: IP address, browser type, device information, and basic usage logs needed for security and service operation.
  • Support communications: messages you send to our support team.

3. Why we process your data (purposes & legal bases)

  • Contract performance: to create accounts, register domains, issue SSL certificates, provision hosting, issue invoices, and provide customer support.
  • Legal obligation: accounting, tax, and registry/regulatory requirements.
  • Legitimate interests: fraud prevention, securing our systems, improving service quality, and defending legal claims — balanced against your rights.
  • Consent: where required (e.g. optional marketing newsletters). You may withdraw consent at any time without affecting prior lawful processing.

4. Payments and card security

Online purchases on put.mk are completed through an e-commerce checkout integrated with a virtual POS. We accept payments with all Visa and Mastercard branded cards supported by the acquiring bank / payment service provider.

Cardholder data is encrypted in transit (TLS) and handled by the payment provider according to applicable PCI DSS requirements. Put.mk does not receive or store full card numbers. Failed or disputed transactions may generate limited logs needed to assist you and to cooperate with the payment provider or bank.

5. Sharing of data

We share personal data only when necessary with:

  • Domain registries and related registration channels;
  • SSL certificate authorities and hosting infrastructure providers;
  • Payment service providers / acquiring banks operating the virtual POS;
  • Accounting, legal, or IT service providers bound by confidentiality and data-processing agreements;
  • Public authorities when required by law.

We do not sell your personal data.

6. International transfers

Some processors (e.g. certificate authorities or cloud infrastructure) may be located outside North Macedonia or the EEA. Where personal data is transferred, we apply appropriate safeguards consistent with GDPR principles (such as standard contractual clauses or equivalent lawful mechanisms), where applicable.

7. Retention

We keep personal data only as long as needed for the purposes above: active service relationships, then as required by accounting and legal retention periods (typically up to the periods mandated by North Macedonian law for invoices and contracts), or until a shorter period applies for technical logs. When data is no longer needed, it is deleted or anonymised.

8. Your GDPR rights

Subject to applicable law, you have the right to:

  • Access your personal data;
  • Rectify inaccurate or incomplete data;
  • Erase data (“right to be forgotten”) where grounds apply;
  • Restrict or object to certain processing;
  • Data portability where processing is based on contract or consent and carried out by automated means;
  • Withdraw consent at any time where processing is based on consent;
  • Lodge a complaint with the Personal Data Protection Agency of North Macedonia or another competent supervisory authority.

To exercise these rights, email domains@put.mk. We may need to verify your identity before responding.

9. Security

We apply organisational and technical measures appropriate to the risk, including access controls, encrypted connections (HTTPS), segregated payment handling via virtual POS, and staff need-to-know access. No method of transmission or storage is completely secure; we continuously improve our safeguards.

10. Cookies and similar technologies

We may use essential cookies or local storage for language preference, theme, and shopping-cart functionality. These are necessary for the site to work. We do not use them to sell advertising profiles. You can clear browser storage at any time; doing so may reset preferences or an empty cart.

11. Children’s data

Our services are intended for persons who can enter into contracts. We do not knowingly collect personal data from children under 16. If you believe we have received such data, contact us for deletion.

12. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The “Last updated” date at the top will change when we publish a revision. Continued use of put.mk after an update constitutes acknowledgement of the revised policy where permitted by law.

Summary: We collect only what we need to deliver domains, SSL, and hosting; card payments run through a secure virtual POS accepting Visa and Mastercard; we do not store full card numbers; and you can exercise GDPR rights by contacting domains@put.mk.