Privacy Policy

1. Summary

• We collect only the information needed to provide the Site and process purchases (name, email, payment info via Stripe, and minimal technical data).
• We use Stripe to process payments — Stripe collects payment details and may set cookies when customers are redirected to Stripe checkout.
• We do not sell your personal information.
• You have rights under applicable privacy laws (access, correction, deletion, objection).
• You control cookies and consent for non‑essential tracking.

2. Information we collect

We collect information you provide directly and certain technical information automatically.

Information you provide

• Contact details: name, email, billing/shipping address (when you place an order).
• Payment information: payment method details are processed by Stripe; we do not store full card details on our servers.
• Communications: messages you send to us (support requests, feedback).

Information collected automatically

• Usage data: IP address, browser type, pages visited, referrer, device information, and timestamps (server logs).
• Cookies and similar technologies: see the Cookies section below.

3. How we use your information

We use personal data to:

• Provide and operate the Site, process orders, and manage billing.
• Communicate with you about orders, account, or support requests.
• Comply with legal obligations and prevent fraud.
• Improve the Site (aggregate/anonymous analytics only if you consent).

We will only use your email for transactional messages (order confirmations, receipts) unless you opt into marketing communications.

4. Legal basis for processing (for EU/EEA users)

If you are in the EU/EEA, our legal bases for processing are:

• Performance of a contract: processing necessary to fulfill your order and process payments.
• Legitimate interests: running, securing, and improving the Site (where not overridden by your rights).
• Consent: for non‑essential cookies and tracking (you can refuse or withdraw consent at any time).

5. Payments and third parties

Payments are processed by Stripe. When you pay, Stripe collects payment information and may set cookies or use trackers as described in Stripe’s privacy policy. We recommend reviewing Stripe’s privacy policy at https://stripe.com/privacy.

We may use third‑party services to host the Site, send emails, or provide analytics. We disclose third-party processors below.

Third‑party processors we use

• Stripe (payment processor)
• SimpleTrack - for analitics https://simpletrack.tech/privacy-policy
• Gmail — only if you subscribe to marketing.

6. Cookies and similar technologies

We use cookies for essential site functionality and, with your consent, for analytics/marketing.

• Essential cookies: required for the Site to function (e.g., session, cart).
• Functional/analytics cookies: used only if you accept them (e.g., Google Analytics).
• Stripe cookies: Stripe may set cookies during checkout; these are documented by Stripe and should be disclosed here.

Example cookie table — customize to match your site:

You can control or delete cookies through your browser settings. To opt out of non‑essential cookies on this Site, use the cookie banner or change your preference in site settings (if provided).

7. Your rights

Depending on your jurisdiction, you may have rights including:

• Access: request a copy of personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data (subject to legal exceptions).
• Restriction or objection: limit or object to certain processing.
• Data portability: obtain an electronic copy of data you provided.
• Withdraw consent: withdraw any consent you previously gave for cookies/marketing.

To exercise any right, contact us at the details below. We may ask for information to verify your identity before responding. We will respond within the time required by applicable law.

8. Data retention

We retain personal data only as long as necessary to:

• Provide the services and process orders,
• Comply with legal obligations (e.g., tax records),
• Resolve disputes and enforce agreements.

Typical retention periods (customize):

• Order and billing information: retained for [X years — e.g., 7 years] for tax/accounting needs.
• Support communications: retained for [e.g., 2 years].
• Cookies: retained per cookie settings and your consent.

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure — we cannot guarantee absolute security. If a breach affecting your data occurs, we will notify you and regulators as required by law.

10. International transfers

Your information may be stored and processed in the United States or other countries. Where data is transferred outside the EU/EEA, we will ensure appropriate safeguards are in place (e.g., standard contractual clauses) or rely on lawful transfer mechanisms. Contact us for details about transfers affecting your data.

11. Children

The Site is not directed at children under 16. We do not knowingly collect personal data from children under the applicable minimum age. If you believe we have collected such data, contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy occasionally. When we do, we will revise the “Effective date” at the top. Significant changes will be communicated by prominent notice on the Site or directly to you if we have your contact details.

13. Contact information

Controller: DIYGuideHub

Email: diyguidehub@gmail.com

Address: [Your postal/business address — optional]

If you are in the EU/EEA and have unresolved complaints, you may also lodge a complaint with your local data protection authority.

14. Additional notes for a Stripe checkout flow

Stripe is the data controller/processor for payment information when the payment is processed on Stripe’s systems. We do not retain full card numbers or CVV codes. When a customer is redirected to Stripe-hosted checkout, Stripe may collect information and set cookies — disclose this in the Payments/Third Parties and Cookies sections.

If you use Stripe Webhooks, the webhook payload may include customer identifiers or email addresses; handle and store that data according to this policy.

Legal disclaimer

This template is provided for informational purposes only and does not constitute legal advice. Depending on where you and your users are located, and the specific data you collect and process, you may need to adapt this policy or consult a qualified attorney to ensure full compliance with applicable laws (GDPR, CCPA, etc.).