Privacy Policy
[DRAFT – have a lawyer check this before launch, then delete this line.]
Controller
Pap Noémi E.V., [ADDRESS], email: [CONTACT EMAIL].
What we process and why
- Name, e-mail address, shipping address, the world and plan you chose: to deliver your subscription (contract, GDPR Art. 6(1)(b)). - For gifts, the recipient's name, e-mail address and your note: to deliver the envelope and the notification (contract, and legitimate interest, Art. 6(1)(f)). - Billing name and address, payments: to issue and keep invoices (legal obligation, Art. 6(1)(c); accounting records are kept for 8 years). - We never process your card details: only Stripe does.
Who else handles the data (processors)
- Stripe Payments Europe Ltd. (Ireland) – payments, renewals, customer portal. - Brevo (Sendinblue SAS, France) – sending e-mails. - Railway Corporation (USA) – hosting of the website and database; transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. - [INVOICING SERVICE, e.g. Billingo Technologies Zrt. (Hungary)] – invoicing and reporting invoices to the Hungarian tax authority. - The postal services – delivering the envelopes.
How long we keep it
Subscription data for [PERIOD] after the subscription ends; invoices for 8 years, as the law requires.
Your rights
You can ask for access, correction, deletion, restriction of processing, a copy of your data (portability), and object to processing based on legitimate interest. Write to [CONTACT EMAIL]; we reply within 30 days. You can complain to the Hungarian data protection authority (NAIH, naih.hu) or the authority in your country.
Cookies
See the Cookie settings page.