Privacy Policy

1. What Data We Collect

1.1 Data You Provide

• Name and email address — when you make a purchase, sign up for a waitlist, subscribe to a newsletter, or contact us
• Billing information — name, address, and payment details processed securely by our payment processors
• Phone number — if voluntarily provided at checkout or for SMS communications
• Communication content — messages you send us via email or contact forms

1.2 Data Collected Automatically

• IP address and device information — collected through server logs and cookies
• Browser type and operating system — for website functionality and analytics
• Pages visited and interaction data — collected through analytics tools
• Email engagement data — opens, clicks, and unsubscribes tracked by our email marketing platform

1.3 Data From Third Parties

We may receive data from payment processors (transaction confirmations), advertising platforms (conversion data), and social media platforms (if you interact with our ads or content).

2. Why We Process Your Data

• Contract performance: to process orders, deliver digital products, provide course access, and manage your account
• Legitimate interest: to send transactional emails (order confirmations, access credentials, refund notifications), improve our services, prevent fraud, and protect our business
• Consent: to send marketing emails, newsletters, and promotional content
• Consent: to use analytics and marketing cookies on our websites
• Legal obligation: to comply with tax, accounting, and consumer protection requirements, including processing and recording withdrawal from contract requests.

3. Third-Party Processors

We share your data with trusted third-party service providers who process data on our behalf:

• Payment processors (e.g., Stripe) — secure payment processing
• E-commerce platform (e.g., SamCart) — checkout, order management, and course delivery
• Email marketing platform (e.g., ActiveCampaign) — email communications and automation
• Analytics tools (e.g., Google Analytics) — website analytics with IP anonymization
• Advertising platforms (e.g., Meta Platforms) — advertising and remarketing
• Hosting providers — website and content hosting
• Customer support tools — help desk and communication platforms

Where data is transferred outside the EU/EEA (e.g., to US-based processors), appropriate safeguards are in place including Standard Contractual Clauses or equivalent data transfer mechanisms.

We do not sell your personal data to third parties.

4. Data Controller

The data controller responsible for your personal data is Management Services s.r.o.

("Management Services"). This Privacy Policy applies to all websites, products, services, and brands operated by Management Services. For data protection inquiries, contact us at the email address listed below.

5. Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request limitation of how we use your data
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent for marketing emails at any time via the unsubscribe link in any email
• Right to lodge a complaint — file a complaint with your local data protection authority, or with the Slovak Data Protection Authority

To exercise any of these rights, contact us at the email address listed below. We will respond within 30 days.

6. Data Retention

• Purchase records: retained for the duration required by Slovak tax law (10 years)
• Email marketing data: retained until you unsubscribe or request deletion
• Analytics data: anonymized after 26 months
• Account data: retained for the duration of your account, plus 30 days after deletion request
• Communication records: retained for up to 3 years for customer support purposes

7. Children’s Privacy

Some of our brands offer products designed for use by parents with their children. We do not knowingly collect personal data directly from children under 16. All purchases, account registrations, and communications must be made by a parent or legal guardian.

If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that data promptly.

8. Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted payment processing, secure HTTPS connections, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure.

9. International Data Transfers

Our third-party processors may be located outside the EU/EEA, primarily in the United States. Where personal data is transferred internationally, we ensure appropriate safeguards are in place as required by GDPR, including Standard Contractual Clauses.

10. Email Marketing

If you subscribe to our email list or make a purchase, we may send you marketing communications. You can unsubscribe at any time by clicking the unsubscribe link in any email. Unsubscribing from marketing emails does not affect transactional emails related to your purchases.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on the relevant website with an updated revision date. For significant changes affecting your rights, we will make reasonable efforts to notify you via email.

12. Contact

For any privacy-related questions or requests, contact us by email or at either of our international addresses:

North America, Australia & International: Management Services, 867 Boylston St, Suite 500, Unit #433, Boston, MA 02116, United States.

Europe: Management Services s.r.o., Dolezalova 15C, 821 04 Bratislava, Slovak Republic.

Company ID: 55225802

Email: theo@theothinkerclub.com