PRIVACY POLICY

prodbyries Last updated: April 2026

1. Introduction and Data Controller

This Privacy Policy explains how prodbyries ("we", "us", "our") collects, uses, and protects your personal data when you visit our store or make a purchase.

Data Controller: prodbyries

Contact: contact@prodbyries.com

We are based in Poland, within the European Union, and this policy is written in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. What Data We Collect

We collect the following categories of personal data:

2.1 Purchase Data When you make a purchase, the following is collected and processed:

Full name;
Email address;
Payment confirmation details (we do not store your payment card or PayPal credentials);
Country of residence (for tax and legal purposes);
Purchase history and order details.

2.2 Email and Marketing Data If you opt in to our email list (either directly or via a lead magnet/free product download), we collect:

Email address;
Any information you voluntarily provide through opt-in forms.

2.3 Technical / Usage Data When you visit our store, basic technical data may be collected automatically by our platform, including:

IP address;
Browser type and version;
Device type;
Pages visited and time spent;
Referring URL.

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

PurposeLegal Basis (GDPR Art. 6)Processing your order and delivering your purchasePerformance of a contract (Art. 6(1)(b))Sending purchase confirmation and download linksPerformance of a contract (Art. 6(1)(b))Responding to customer support inquiriesLegitimate interests (Art. 6(1)(f))Sending marketing emails (newsletters, product updates)Consent (Art. 6(1)(a))Fraud prevention and legal complianceLegal obligation / Legitimate interests (Art. 6(1)(c)/(f))

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

4. Third-Party Services

We use the following third-party services that may process your personal data on our behalf:

4.1 Payhip (Store Platform) Our store is hosted on Payhip. Payhip processes transaction data, stores your purchase history, and delivers your download links.

Data processed: name, email, purchase details, IP address.
Privacy policy: https://payhip.com/privacy

4.2 PayPal (Payment Processor) Payments are processed by PayPal. When you complete a purchase, your payment information is handled directly by PayPal and is governed by their own privacy policy. We receive only a payment confirmation — we do not store your financial credentials.

4.3 Kit (Email Marketing) If you subscribe to our email list, your email address is stored and managed using Kit (formerly ConvertKit). Kit may store your email address and track email engagement (opens, clicks) in accordance with their privacy policy.

All third-party processors are contractually obligated to handle your data in accordance with applicable data protection law, including the GDPR.

5. Cookies

Our store is hosted on Payhip, which uses cookies for essential site functionality (e.g. session management, cart state) and analytics. We do not set additional cookies beyond those placed by Payhip and our third-party tools.

Types of cookies that may be used:

Strictly necessary cookies: required for the store to function (cannot be disabled);
Analytics cookies: used to understand visitor behaviour in aggregate;
Marketing cookies: may be set by PayPal during checkout.

You can control cookie settings through your browser settings at any time. Note that disabling certain cookies may affect store functionality.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected:

Order data: retained for 5 years for accounting and legal compliance purposes (Polish tax law);
Email marketing data: retained until you unsubscribe or request deletion;
Customer support communications: retained for up to 2 years.

7. International Data Transfers

Some of our third-party processors (Payhip, PayPal, Kit) are based outside the European Economic Area (EEA), including in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

Right of access (Art. 15): request a copy of the personal data we hold about you;
Right to rectification (Art. 16): request correction of inaccurate data;
Right to erasure (Art. 17): request deletion of your personal data, where no legal obligation requires us to retain it;
Right to restriction of processing (Art. 18): request that we limit how we use your data;
Right to data portability (Art. 20): receive your data in a structured, machine-readable format;
Right to object (Art. 21): object to processing based on legitimate interests, including direct marketing;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@prodbyries.com. We will respond within 30 days. No fee is charged for exercising your rights unless requests are manifestly unfounded or excessive.

9. Right to Lodge a Complaint

If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the relevant supervisory authority. In Poland, this is:

Urząd Ochrony Danych Osobowych (UODO) Website: https://uodo.gov.pl Postal address: ul. Stawki 2, 00-193 Warsaw, Poland

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our store after changes are published constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at: contact@prodbyries.com