Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

EtchwpKits

Operated by Nermin Mesic (Sole Proprietorship)

Sweden

Contact: etchwpkits.com/contact

2. Information We Collect

2.1 Information You Provide

When you create an account or make a purchase, we collect:

• Account Information: Name, email address, password (encrypted)
• Payment Information: Processed by Stripe; we do not store card details
• Communication: Messages you send via our contact form

2.2 Information Collected Automatically

When you visit the Website, we automatically collect:

• Usage Data: Pages visited, time spent, referring URL
• Device Information: Browser type, operating system, screen resolution
• IP Address: Used for analytics and fraud prevention

This data is processed by our hosting platform (Cloudflare Pages) as part of serving the Website, including for security and basic traffic analytics.

3. How We Use Your Information

We use your information to:

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services that may process your data:

These services are GDPR-compliant and process data according to their respective privacy policies.

Note: Third-party services may update their practices. We recommend reviewing their policies for the most current information.

5. Data Retention

We retain your data for as long as necessary:

Upon account deletion, we will erase your personal data within 30 days, except where retention is required by law.

6. Your Rights (GDPR)

As an EU/EEA resident, you have the following rights:

6.1 Right to Access

You can request a copy of all personal data we hold about you.

6.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements.

6.4 Right to Restrict Processing

You can request that we limit how we use your data.

6.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

6.6 Right to Object

You can object to processing based on legitimate interests.

6.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

To exercise your rights: Contact us at etchwpkits.com/contact. We will respond within 30 days.

7. Data Security

We implement appropriate security measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• Regular security updates
• Limited access to personal data

While we take reasonable precautions, no internet transmission is 100% secure. You are responsible for keeping your account credentials confidential.

8. International Data Transfers

Your data may be processed outside the EU/EEA by our service providers (e.g., Stripe). Such transfers are protected by:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Service providers' GDPR compliance measures

9. Children's Privacy

Our Website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for removal.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

For significant changes affecting your rights, we will notify you via email.

11. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):

Integritetsskyddsmyndigheten (IMY)

Website: imy.se

Email: imy@imy.se

12. Contact Us

For privacy-related questions or to exercise your rights:

Website: etchwpkits.com/contact

Your privacy matters to us. Thank you for trusting EtchwpKits with your information.