Privacy

⚠️ DRAFT — must be completed and reviewed before launch.

Controller: Kelsey Hopper, [FULL ADDRESS], Luxembourg — [email].

What is collected. When you buy, the merchant of record collects your name, email, billing country and payment details. I never see your card details. I receive your name, email and country so I can deliver the product and answer support questions.

Why. To perform the contract (Art. 6(1)(b) GDPR) and to meet tax and accounting obligations (Art. 6(1)(c)).

Country data. EU VAT rules require evidence of your location, so billing country and IP-derived country are recorded. This is a legal obligation, not marketing.

Sharing. With the merchant of record ([NAME]) as seller and processor, and with my accountant for bookkeeping. No sale of data, ever.

Retention. Transaction records for the statutory period under Luxembourg law ([confirm: 10 years]). Marketing contacts until you unsubscribe.

Your rights. Access, rectification, erasure, restriction, portability, objection — email [email]. You may complain to the CNPD (cnpd.public.lu).

Marketing. Only if you opt in separately. Buying something does not subscribe you.