Privacy Policy

The data controller responsible for your personal data is: Mira Maria Belniak, trading as Inkscript, based in Poland, email: contact@inkscript.net. If you have any questions about how your data is handled, or if you wish to exercise any of your rights under this policy, please contact us at the email address above.

We collect only the data necessary to operate the Website and to process purchases. The specific categories are:

When you make a purchase:

• Name
• Email address
• Billing address (required by our payment processor)
• Payment information (processed by our third-party payment provider — we do not see or store your full card details)
• Order details (products purchased, date, amount paid)

When you create an account:

• Name
• Email address
• Password (stored in encrypted form)

When you browse the Website:

• IP address
• Browser type and version
• Operating system
• Pages visited, time spent, and referring URL
• Cookie data (see Section 7 below)

When you contact us:

• Your name and email address
• The content of your message

We do not collect phone numbers, physical shipping addresses (we sell only digital products), or any special categories of personal data (such as health data, ethnic origin, or religious beliefs).

If you purchased a product but have not yet accessed or downloaded it, and you contact us within 14 days of purchase, we will consider your refund request on a case-by-case basis and may issue a refund at our discretion.

Under the GDPR, we must have a legal basis for each type of data processing. The table below sets out the purposes and legal bases for the data we collect.

Processing your purchase and delivering digital products
Legal basis: Performance of a contract (Article 6(1)(b) GDPR). We need your name, email, and billing address to process your order, take payment, and deliver your download link.

Managing your account
Legal basis: Performance of a contract. Your account allows you to access your purchased downloads.

Sending order confirmations and transactional emails
Legal basis: Performance of a contract. These emails are necessary to complete the transaction.

Responding to your enquiries
Legal basis: Legitimate interest (Article 6(1)(f) GDPR). When you contact us, we use your name and email to reply. Our legitimate interest is in providing customer support.

Analysing website usage and improving the Website
Legal basis: Legitimate interest. We may use anonymised or aggregated data about how the Website is used to improve its content and functionality. Our legitimate interest is in maintaining and improving the Website.

Complying with legal obligations
Legal basis: Legal obligation (Article 6(1)(c) GDPR). We are required by tax and accounting law to retain transaction records for a specified period.

We do not use your data for automated decision-making or profiling. We do not send marketing emails unless you have given your explicit consent, and you can withdraw that consent at any time.

We do not sell, rent, or trade your personal data. We share data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
Payment processor. Your payment is handled by a third-party payment provider (such as Stripe or PayPal, depending on the payment method you choose). The payment provider receives your billing information and payment details to process the transaction. They operate under their own privacy policies.

Website hosting provider. The Website is hosted by a third-party hosting service. The hosting provider may have access to server logs containing your IP address and browsing activity as part of providing the hosting service.

WordPress and WooCommerce. The Website is built on WordPress and uses WooCommerce for the shop. These platforms process data as described in their respective privacy policies. WooCommerce stores order data on our server.

Analytics (if applicable). If we use analytics tools (such as Google Analytics), they may collect anonymised browsing data. See the Cookie section (Section 7) for details. If analytics are used, data may be transferred to servers outside the EU — see Section 6.

Legal authorities. We may disclose your data if required by law, by a court order, or in response to a valid request from a public authority.

We retain your data for as long as necessary for the purpose it was collected:

• Account data is retained for as long as your account is active. If you request account deletion, we will delete your account and associated personal data within 30 days, except where we are required by law to retain certain records.
• Order and transaction records are retained for the period required by Polish tax and accounting law (currently five years from the end of the tax year in which the transaction occurred).
• Enquiry correspondence is retained for up to two years after the last communication, unless a longer retention is needed for legal or dispute-resolution purposes.
• Server logs and analytics data are retained for up to 12 months.

Cookies are small text files placed on your device when you visit a website. We use cookies on inkscript.net for the following purposes:

Strictly necessary cookies

These cookies are essential for the Website to function. They include:

• WooCommerce session cookies, which allow the shopping cart to work and remember your cart contents during a browsing session.
• WordPress login cookies, which keep you logged in if you have an account.
• A cookie consent cookie, which remembers your cookie preferences so you are not asked repeatedly.

These cookies cannot be turned off without breaking core Website functionality. They do not collect data used for marketing or analytics.

Analytics cookies (if used)

If we use analytics tools such as Google Analytics, they place cookies that collect anonymised information about how visitors use the Website — which pages are visited, how long visitors spend on the Website, and where they arrive from. This data is used in aggregate to improve the Website and is not used to identify individual visitors.

You can opt out of analytics cookies through your browser settings or through the cookie consent tool on the Website.

We do not use:

• Advertising or tracking cookies.
• Third-party marketing cookies.
• Social media tracking pixels.
• Managing cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies may affect the Website’s functionality (for example, the shopping cart may not work).

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access. You can request a copy of the personal data we hold about you.
• Right to rectification. You can ask us to correct any data that is inaccurate or to complete data that is incomplete.
• Right to erasure (“right to be forgotten”). You can ask us to delete your personal data, subject to any legal obligations that require us to retain certain records.
• Right to restrict processing. You can ask us to limit how we use your data in certain circumstances.
• Right to data portability. You can request that we provide your data in a structured, commonly used, machine-readable format, or that we transfer it directly to another controller where technically feasible.
• Right to object. You can object to our processing of your data where we rely on legitimate interest as the legal basis. We will stop processing unless we have compelling legitimate grounds that override your interests.
• Right to withdraw consent. Where we rely on your consent for processing (for example, marketing emails), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before you withdrew consent.
• Right to lodge a complaint. If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, the relevant authority is: Urząd Ochrony Danych Osobowych (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, website: https://uodo.gov.pl, phone: +48 22 531 03 00. If you reside in another EU member state, you may also lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at contact@inkscript.net. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

The Website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please get in touch with us at contact@inkscript.net, and we will delete it promptly.

For any questions about this Privacy and Cookie Policy, or to exercise your data protection rights, contact:
Mira Maria Belniak / Inkscript, email: contact@inkscript.net, website: https://inkscript.net.