Data Controller: Paul Chifofoma, BA.pth

Address: Stumpergasse 48/23, 1060 Wien, Austria

Email: praxis@chifofoma.com

Effective date: August 12, 2026

This Privacy Policy explains how your personal data is collected and used when you make a purchase through this Payhip store ("the Store").

1. What Data We Collect

When you make a purchase through the Store, the following data is collected via Payhip's checkout:

• Name
• Email address
• Billing address (if required for VAT purposes)
• Payment information — this is collected and processed directly by our payment processors (Stripe and/or PayPal); we do not see or store your full card details
• Purchase history (which products you bought, order date, amount)
• Technical data such as IP address and browser type, collected automatically by Payhip for security and store functionality

2. Why We Collect It (Legal Basis)

We process this data for the following purposes, under the following legal bases (GDPR Article 6):

• Processing your order and delivering your digital product — Performance of a contract (Art. 6(1)(b))
• Responding to support requests about your order — Performance of a contract / legitimate interest (Art. 6(1)(b)/(f))
• Complying with tax and accounting obligations — Legal obligation (Art. 6(1)(c))
• Sending marketing emails (only if you opt in) — Consent (Art. 6(1)(a))

We do not use your data for any purpose beyond fulfilling your order unless you separately consent (e.g. by subscribing to a newsletter).

3. Who We Share Your Data With

Your data is shared only with the third parties necessary to complete your purchase:

• Payhip — the e-commerce platform hosting the Store, processing your order, and delivering your digital files. See Payhip's own Privacy Policy: https://payhip.com/privacy
• Stripe — our payment processor, who handles your payment details directly. We do not store your card information ourselves. (If we enable additional payment processors such as PayPal in future, this policy will be updated accordingly.)

We do not sell your personal data to third parties, and we do not use it for any purpose beyond those listed in Section 2 above. Payhip acts as our data processor for order fulfillment and file delivery under its own standard data processing terms; you can review Payhip's data processing commitments at https://payhip.com/privacy.

4. International Data Transfers

Payhip and Stripe may process or store data on servers located outside the European Economic Area (EEA). Where this occurs, these providers rely on appropriate safeguards such as the EU Standard Contractual Clauses, as required under GDPR. You can find more detail in each provider's own privacy documentation.

5. How Long We Keep Your Data

We retain order and transaction data for as long as required under Austrian tax and commercial record-keeping law (generally 7 years). If you opt in to marketing communications (e.g. a newsletter), we keep your email address for that purpose until you unsubscribe or otherwise withdraw your consent, at which point it is deleted from our marketing list within 30 days.

6. Cookies

Payhip's checkout pages may use cookies necessary for cart functionality, security, and store operation. Please refer to Payhip's own cookie disclosures at https://payhip.com/privacy for details on cookies used specifically during checkout.

6a. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

6b. Children's Privacy

The Store is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

7. Your Rights (GDPR)

As a data subject under GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal retention obligations
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time (for marketing communications)
• Lodge a complaint with the Austrian data protection authority (Österreichische Datenschutzbehörde), www.dsb.gv.at, if you believe your data has been mishandled

To exercise any of these rights, contact us at praxis@chifofoma.com. We may ask you to verify your identity before processing your request.

8. Security

We rely on Payhip and Stripe's industry-standard security measures (including encryption) to protect your data during checkout. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information within our own systems.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted here with a new effective date.

10. Contact Us

Questions about this Privacy Policy or how your data is handled?

Paul Chifofoma

Stumpergasse 48/23, 1060 Wien, Austria

praxis@chifofoma.com

+43 680 3307 130

This document is a draft template and does not constitute legal advice. Please have it reviewed by a lawyer or GDPR consultant familiar with Austrian and EU data protection law before publishing.