• 1. Introduction

This online store operating at www.digitalcrafthouse.com (the “Store”) is operated by Sabat Consulting S.C., Jan Sabat, Dorota Sabat, with its registered office at ul. Piłsudskiego 14/4, 33-100 Tarnów, Poland, Tax Identification Number (NIP): 8732822326 (the “Seller”, “we”, “us” or “our”).

This Privacy Policy describes how we collect, use, disclose and protect the personal data of individuals who visit the Store, create an account, place an Order for a Digital Product, or otherwise communicate with us. It applies together with our Terms and Conditions, available on the Store website. If there is a conflict between the Terms and Conditions and this Privacy Policy, this Privacy Policy controls with respect to the processing of your personal data.

We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and, where applicable, other data protection laws of the country in which you reside. By using the Store, you acknowledge that you have read this Privacy Policy.

• 2. Data Controller

The controller of your personal data is Sabat Consulting S.C., Jan Sabat, Dorota Sabat, ul. Piłsudskiego 14/4, 33-100 Tarnów, Poland, NIP: 8732822326. You can contact us regarding any matters relating to this Privacy Policy or the processing of your personal data by e-mail at info@digitalcrafthouse.com, or by post at the address above.

• 3. Personal Data We Collect

Depending on how you interact with the Store, we may collect the following categories of personal data:

• Contact details – your name, e-mail address, billing address and country of residence, provided when you place an Order or create an account.
• Payment information – information relating to your payment, such as the payment method used and confirmation of payment. Our payment service providers collect and process full payment card or account details directly; we do not store your full card number.
• Account information – if you create an account, your username, password (stored in encrypted form), and account preferences.
• Order and transaction information – the Digital Products you view, purchase, or make a complaint about, your Order history, and download activity relating to Digital Products.
• Communications – the information you provide when you contact us, for example a customer support or complaints e-mail.
• Device and usage information – information collected automatically when you visit the Store, including your IP address, browser type, device type, referring pages, and information about how you navigate and interact with the Store, collected through cookies and similar technologies (see § 6 below).
• 4. Sources of Personal Data
• Directly from you – when you browse the Store, create an account, place an Order, or contact us.
• Automatically – through cookies and similar technologies as you use the Store.
• From our service providers – including our payment service providers, who share confirmation of payment and limited transaction details with us.
• 5. How and Why We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:

• Performance of the Agreement (Art. 6(1)(b) GDPR) – to process your Order, deliver Digital Products (including sending download links and, where applicable, granting account access), manage your account, provide customer support, and handle complaints regarding the conformity of Digital Products, as described in our Terms and Conditions.
• Compliance with legal obligations (Art. 6(1)(c) GDPR) – to issue invoices and keep accounting and tax records as required under Polish law, and to respond to lawful requests from courts or public authorities.
• Legitimate interests (Art. 6(1)(f) GDPR) – to keep the Store secure and prevent fraud, to enforce our Terms and Conditions and licensing terms, to maintain and improve the Store and our Digital Products, and to establish, exercise or defend legal claims.
• Consent (Art. 6(1)(a) GDPR) – to use non-essential cookies and analytics tools, and to send you marketing communications where you have opted in. You may withdraw your consent at any time, which will not affect the lawfulness of processing carried out before its withdrawal.
• 6. Cookies and Similar Technologies

The Store uses cookies and similar technologies. “Cookies” are small data files placed on your device that allow us to recognize your browser and remember certain information about your visit. We use:

• Essential cookies – necessary for the Store to function, such as maintaining your shopping cart and keeping you logged in to your account.
• Analytics cookies – we use Google Analytics to help us understand how visitors use the Store, such as which pages are viewed and how visitors navigate the site. Google Analytics collects information such as your IP address (which may be truncated), device and browser information, and your interactions with the Store. You can read more about how Google uses this data at https://policies.google.com/privacy, and you can opt out of Google Analytics using the browser add-on available at https://tools.google.com/dlpage/gaoptout.

You can control or delete cookies through your browser settings; general information about cookies and how to manage them is available at https://www.allaboutcookies.org. Please note that disabling certain cookies may affect the Store’s functionality.

• 7. How We Disclose Your Personal Data

We do not sell your personal data. We may disclose your personal data to the following categories of recipients, each of whom is only permitted to use your data for the purposes described in this Privacy Policy or as required by law:

• Payment service providers – such as Stripe, PayPal or another payment provider indicated at checkout, to process your payment. These providers act as independent controllers of the payment data you provide directly to them.
• IT, hosting and e-mail delivery providers – who host the Store, store our data, and deliver transactional e-mails such as Order confirmations and download links on our behalf.
• Analytics providers – Google, in connection with Google Analytics, as described in § 6 above.
• Professional advisers – such as our accountants and legal advisers, where necessary for their services to us.
• Public and judicial authorities – where required to comply with applicable law or a valid legal request.
• Successors in a business transaction – in connection with a merger, acquisition, or sale of some or all of our business or assets.
• 8. International Transfers

Some of our service providers, including our payment and analytics providers, may process personal data outside the European Economic Area (“EEA”), including in the United States. Where we transfer personal data outside the EEA, we rely on appropriate safeguards recognized under the GDPR, such as the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.

• 9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In particular, invoicing and accounting data is retained for the period required under Polish tax and accounting law (generally five years from the end of the calendar year in which the relevant tax obligation arose). We retain account data for as long as your account remains active, and analytics data in accordance with our Google Analytics data retention settings.

• 10. Your Rights

Subject to the conditions and exceptions set out in the GDPR, you have the right to:

• Access the personal data we hold about you and obtain a copy of it;
• Request that we correct inaccurate or incomplete personal data;
• Request that we erase your personal data;
• Request that we restrict the processing of your personal data;
• Object to the processing of your personal data, including for direct marketing purposes;
• Receive your personal data in a structured, commonly used, machine-readable format, and request that we transfer it to another controller, where technically feasible;
• Withdraw your consent at any time, where processing is based on consent.

You may exercise these rights by contacting us at info@digitalcrafthouse.com. We may need to verify your identity before responding to your request. If you are not satisfied with our response, or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl), or with the supervisory authority of your country of habitual residence within the EEA. If you reside outside the EEA, you may have similar rights under the law of your own country; please contact us, and we will address your request to the extent required by applicable law.

• 11. Children’s Data

The Store is not directed at children, and we do not knowingly collect personal data from children under the age of 16 (or the age of majority in their jurisdiction, where lower protections do not apply). If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@digitalcrafthouse.com so that we can delete it.

• 12. Security

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. We recommend that you do not send sensitive information to us through unsecured channels.

• 13. Third-Party Links

The Store may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policy of any third-party website you visit.

• 14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for legal or operational reasons. We will post the revised Privacy Policy on the Store website and update the “Last updated” date above. We encourage you to review this Privacy Policy periodically.

• 15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@digitalcrafthouse.com or by post at Sabat Consulting S.C., ul. Piłsudskiego 14/4, 33-100 Tarnów, Poland.