Privacy notice for video courses

Seller details

Seller:

PE Pylyp Borysov

Tax number:

3081105655

Address:

04213, м.Київ, вул.Прирічна, б.19, кв.313

Email:

pylyp.borysov@gmail.com

Who is responsible

The controller of your data is the seller of the courses, the individual entrepreneur named in the Seller details above. Write to the seller’s email address there about anything in this notice.

What we collect

Your email address, which you give before paying. It is how you sign in and how we know which courses are yours. Your confirmation of this offer and of the immediate start of access, when you gave it, and which version of the offer you accepted. The course, the amount, the currency, and WayForPay’s references for your payment. If you used a discount code: the code, the percentage it took off and the price before it. A one-way, keyed hash of your IP address, used against spam and abuse and deleted within two days of when you started your order. If you try a discount code that is not accepted, the same kind of hash is kept with the time of the try, to limit guessing, and is deleted within two days. The address itself is never stored. We never see or store your card details: you enter them on WayForPay’s page.

Why we use it

To sell you the course and give you access to it (performing our contract with you). To keep the payment records tax law requires (a legal obligation). To protect the payment form from spam and abuse, and to remind you if a payment you started does not go through (our legitimate interests).

Who else is involved

WayForPay processes your payment. For the payment data it holds, it acts as a separate controller under the financial-services law that applies to it, and its own privacy notice applies. Cloudflare hosts the site and its database. SMTP2GO delivers our emails: confirmation of access, sign-in links and reminders. If you join a course’s Telegram group, Telegram processes your membership under its own terms. We do not sell your data or use it for advertising.

Reminder emails

If you start a payment and it does not complete, we may email you up to two reminders, about an hour and about a day later, in case something went wrong. They contain no advertising. Every reminder has a one-click unsubscribe link, and they stop as soon as you buy.

How long we keep it

While you have access to a course, we keep your email address and your purchase, because they are what gives you access. If your access ends (for example after a refund), we delete the access record 90 days later. An order that was started but never paid for is deleted after 30 days. Once your access has ended, your purchase is kept until 1095 days after the date you made it, and then deleted; so are the payment records we keep, without your email address, after you delete your data. Sign-in links expire after 15 minutes and are deleted within two days.

Your rights

You can ask for a copy of your data, for its correction or erasure, for its use to be restricted, or for it in a portable form, and you can object to how we use it. If you are in the EU or the UK, you can also complain to your national data protection authority.

Downloading or deleting your data yourself

In your cabinet, at the bottom of the page under “Your data”, you can download everything we hold about you as a file, or delete it. Deleting ends your access to every course you bought, without a refund, and cannot be undone. Payment records we must keep are kept without your email address. Because anyone can pay under any address, downloading or deleting your data needs the sign-in link we email you, which proves the address is yours. To make sure a restored backup cannot bring your data back, we keep a one-way, keyed fingerprint of your address (never the address itself) and the date of the deletion for 100 days, a little longer than a backup can hold your data, and then delete it. It is used only to recognise your data in a restored backup, so that it can be deleted again. What we cannot delete: WayForPay’s records of your payment, SMTP2GO’s delivery logs for their retention period, and your membership of a Telegram group, which you leave yourself. Backups can hold your data for up to 90 days; if one is ever restored, your deletion is applied again.

Cookies

Signing in sets one session cookie that keeps you signed in for up to seven days. Starting an order sets a short-lived cookie that lets the site sign you in automatically after your payment, on the device you paid from. Neither is used for tracking or advertising.

Changes to this notice

If this notice changes, we update it and the revision date at the top.