Last updated: October 11, 2026
Data Controller
The data controller is [To complete: company name and address], reachable at [To complete: contact email].
Data We Collect
- Orders: first and last name, email address (required); phone number or Telegram username, country and city (optional); order details and amount.
- Payment: processed directly by our payment provider; we never receive or store your card details.
- Contact: name, email and message sent through the contact form or Telegram.
- Customer account (if you create one): username, email and order history.
- Browsing: essential cookies and information about where your visit came from (see “Cookies”).
Purposes and Legal Bases
- Process your orders, activate and provide your subscription (performance of a contract).
- Answer your requests and support you (legitimate interest).
- Meet our accounting and tax obligations (legal obligation).
- Improve the Site and measure where orders come from (legitimate interest).
We never sell your data.
Recipients
Your data is accessed by our team and, where relevant, by our service providers: payment provider, website host ([To complete: hosting provider name]) and email delivery services. Some providers may be located in other countries; in that case, appropriate safeguards are put in place.
Data Retention
- Order data and invoices: 10 years (accounting obligation).
- Customer account data: until the account is deleted.
- Contact requests: 3 years from our last exchange.
- Cookies: 13 months maximum.
Cookies
The Site uses cookies that are strictly necessary for it to work (cart, checkout session, account login) and cookies that measure where visits leading to an order came from (WooCommerce order attribution). You can block or delete them at any time in your browser settings; the cart and checkout may then stop working.
Your Rights
Depending on where you live (for example under the GDPR or US state privacy laws such as the CCPA/CPRA), you may have the right to access, correct, delete, restrict, object to the processing of, and port your data. To exercise these rights, email us at [To complete: contact email]. You may also contact your local data protection authority.
Security
We use appropriate technical and organizational measures (secure connection, restricted access, trusted providers) to protect your data.