Privacy Policy

This policy explains what we collect, why, and what you can do about it.

What we collect

• •**Email address**, required for every order, because it is where your purchase is sent.
• •**Account details**, your name, if you give one, and a hashed password. We never store your password itself.
• •**Order history**, what you bought, when, how much you paid, and the details delivered to you.
• •**Payment data**, handled entirely by our payment providers. We receive a confirmation and a reference, never your card number.
• •**Technical data**, IP address and browser information in server logs, kept for security and troubleshooting.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not send marketing email, everything we send relates to an order or your account.

Why we are allowed to hold it

• •To perform the contract with you: delivering what you bought, and letting you access it again.
• •For our legitimate interests: preventing fraud and abuse, and keeping the service running.
• •To meet legal obligations: keeping transaction records for tax and accounting.

Who else sees it

• •**Stripe**, card payment processing.
• •**NOWPayments**, cryptocurrency payment processing.
• •**Our email provider**, to deliver your order and account emails.
• •**Our hosting provider**, which stores the database.

Each acts as a processor on our behalf and is bound to protect your data.

How long we keep it

Order records are kept for as long as required for tax and accounting purposes. If you close your account we delete or anonymise everything not covered by that obligation.

Cookies

We use cookies that are strictly necessary: one to keep you signed in, and browser storage to remember your cart and any discount code. We do not use advertising or tracking cookies.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or stop processing it. Email support@cheepr.cc and we will respond within one month. If you are in the EU or UK you may also complain to your national data protection authority.