Privacy Policy

This Privacy Policy explains what personal data we collect when you use this website, operated under the name piprompty ("we", "us", "our"), why we collect it, and the rights you have over it. The short version: we collect the minimum needed to sell you digital products and deliver them to your library — and we do not use third-party advertising or analytics trackers.

1. Data we collect

We collect only the data needed to operate the store:

• Account data — your email address, a display name if you choose to set one, and a hashed password. We never store passwords in plain text.
• Order data — the products you purchase, order amounts and currency, order status, and timestamps. This is required to deliver your purchases and to keep the transaction records we are legally obliged to keep.
• Library and progress data — which purchased products are in your library and, for courses, which lessons you have opened or completed. This exists so your access and progress work.
• Technical logs — standard server logs (IP address, request time, user agent) kept for a limited period for security and troubleshooting.

We do not collect data we do not need. We do not ask for your physical address or phone number, and we do not build advertising profiles.

2. Payment data

Card and payment details are processed by the payment provider handling your checkout. We do not receive or store full card numbers. We receive only what is needed to confirm the order: a payment reference and its status.

3. How we use your data

• To create and secure your account and let you sign in.
• To process orders and deliver purchased content to your library.
• To send transactional email strictly related to your account and orders (order confirmations, access links, password resets). We do not send marketing email without your consent.
• To provide support when you contact us.
• To prevent fraud and abuse, and to comply with legal obligations such as tax and accounting rules.

4. Legal bases (GDPR)

Where the EU General Data Protection Regulation applies, we rely on:

• Performance of a contract — account, order, and library data are processed because they are necessary to sell and deliver what you bought.
• Legal obligation — retention of transaction records required by tax and accounting law.
• Legitimate interests — limited security logging and fraud prevention.
• Consent — for anything optional, such as marketing email if we ever offer it. Consent can be withdrawn at any time.

5. No third-party trackers

This website does not use third-party advertising trackers, social media pixels, or third-party analytics scripts. The only cookies or similar storage we use are essential ones — session and cart — described in the Cookie Policy.

6. Sharing of data

We do not sell or rent personal data. We share it only with:

• Service providers strictly needed to run the store — hosting infrastructure, the payment provider, and the email delivery service used for transactional messages. They process data only on our instructions.
• Authorities, where disclosure is required by law.

7. Retention

• Account and library data are kept for as long as your account exists — your purchases grant lifetime access, so the record of them must persist.
• Order and invoicing records are kept for the period required by applicable tax and accounting law, even if you delete your account.
• Technical logs are kept for a short, limited period and then deleted.

8. Your rights

Depending on where you live (and always, under the GDPR, if you are in the EU/EEA or UK), you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (you can change your email display name and password from your account).
• Erasure — request deletion of your account and associated data, subject to records we must keep by law. Note that deleting your account will remove access to your purchased library.
• Restriction and objection — restrict or object to processing based on legitimate interests.
• Portability — receive the data you provided in a structured, machine-readable format.
• Complaint — lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us through the contact options published on this website. We will respond within the timeframes required by applicable law.

9. Security

We use technical and organizational measures appropriate to a store of this kind: encrypted connections (HTTPS), hashed passwords, access controls on our systems, and minimal data collection in the first place. No system is perfectly secure; if a breach affecting your personal data ever occurs, we will notify you and the competent authority as required by law.

10. Children

This website is intended for professional use by adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version, with its "last updated" date, is always available on this page. If a change materially affects how your data is handled, we will take reasonable steps to bring it to your attention.