Effective date: 27 September 2026

1. Who we are

The data controller is L.K.C. Management and Design Services Ltd, company registration HE 442055, VAT CY10442055K, registered at 2 Agiou Therapontos, Anglisides 7571, Larnaca, Cyprus. Email: Linda.lkcsocial@gmail.com.

2. Scope

This Privacy Policy explains how we handle personal data when you visit our Payhip store, buy or download a product, contact us or otherwise interact with us.

3. Data we may collect

We may receive your name, email address, billing country, address where collected, order and transaction details, VAT information, products purchased, download and access records, messages and support correspondence, marketing preferences, and technical data such as IP address, browser, device, cookies and usage information. Payment providers process complete card or account credentials; we normally receive confirmation and limited transaction details rather than full payment credentials.

4. How we receive data

We receive data directly from you, automatically through the store and cookies, and from service providers involved in the transaction, including Payhip, Stripe and PayPal.

5. Purposes and legal bases

We process data to accept and fulfil orders, deliver downloads, provide receipts and support, manage licences and prevent misuse on the basis that it is necessary to perform a contract. We process data to meet tax, accounting, consumer-protection and other legal duties because it is necessary to comply with law. We may protect the store, prevent fraud, improve services and establish or defend legal claims on the basis of legitimate interests, balanced against your rights. We send optional direct marketing only where permitted by law, relying on consent where required. You can withdraw consent at any time.

6. Required information

Certain information is needed to complete a purchase, deliver the product, issue appropriate records and provide support. Without it, we may be unable to fulfil the order or respond effectively.

7. Who receives data

Personal data may be processed by Payhip as the ecommerce platform; Stripe and PayPal as payment providers; hosting, cloud, email, analytics, security, accounting and professional advisers; and public authorities where legally required. These parties receive only the data reasonably necessary for their role and may act as processors or independent controllers under their own privacy terms.

8. International transfers

Some providers may process data outside Cyprus or the European Economic Area. Where GDPR transfer rules apply, we rely on recognised adequacy decisions, approved contractual safeguards or another lawful transfer mechanism, as appropriate.

9. Retention

We keep order, tax and accounting records for the period required by applicable law. Support correspondence, fraud-prevention records and licence information are kept only as long as reasonably necessary for their purpose and any legal claims. Marketing data is retained until consent is withdrawn or it is no longer needed. Retention periods may be extended where required for legal proceedings or obligations.

10. Cookies and analytics

Payhip and connected providers may use strictly necessary cookies for store, checkout, security, login and cart functions. Optional analytics or marketing technologies may be used where configured and legally permitted. You can manage cookies through available consent controls and browser settings, although disabling necessary cookies may affect functionality.

11. Marketing

If you subscribe or lawfully opt in, we may send information about relevant products or updates. You may unsubscribe at any time using the link in a message or by emailing Linda.lkcsocial@gmail.com. Service messages about an order are not marketing.

12. Your rights

Subject to GDPR and applicable conditions, you may request access, correction, erasure, restriction, objection, data portability, and withdrawal of consent. You may also object to direct marketing at any time and lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus. We may request reasonable proof of identity before acting on a request.

13. Security

We use reasonable organisational and technical measures to protect personal data. No online transmission or storage method can be guaranteed completely secure.

14. Children

Our products and store are intended for adults and business or professional users. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data.

15. Contact and complaints

For privacy requests, contact Linda.lkcsocial@gmail.com. You may also contact the Office of the Commissioner for Personal Data Protection, Cyprus, at www.dataprotection.gov.cy.

16. Changes

We may update this policy to reflect changes in our store, processing or legal requirements. The effective date above identifies the current version.