Privacy Policy
Contents
1. Who is responsible for your data
The controller of the personal data described in this policy is:
Ivan Zifčák ASSAYHOUSE, Self-employed person (sole trader)Slnečnicová ulica 40, 949 01 Nitra, Slovak RepublicEmail: info@assayhouse.eu · Telephone: +421 918 191 015
This policy covers the Assayhouse website at https://assayhouse.eu (the "Website") and the digital Products sold on it. It does not cover Stripe, which processes payments and is responsible for its own handling of payment and tax data (section 5). We have not appointed a data protection officer.
2. The short version
- We do not use advertising or analytics cookies, tracking pixels or marketing tools, and we do not send marketing emails.
- The Label check tool runs entirely in your browser. What you select or type there is not sent to us and is not stored.
- We receive your order details from Stripe so that we can deliver the Product and help you.
- We use your details when you contact us, make a complaint, or withdraw from a contract, and only for that.
- We never sell your data.
3. What we collect, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| Visiting the Website | IP address, date and time, pages requested, browser and device type, kept in server logs by our hosting provider | Deliver the pages, keep the Website secure, fix faults | Legitimate interests, Art. 6(1)(f): running and securing the Website | For the period our hosting provider keeps them, normally a few weeks |
| Your order | Name, email address, country, order number, Product, date and payment status, which we receive from Stripe; we do not receive your card or bank details | Deliver the Product, verify the order, give support, meet legal duties | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) | 3 years from the order for support and claims; invoice data as in the accounting row |
| Emailing us (support, corrections, questions) | Your email address, name if you give it, the content of your message and our reply | Answer you and resolve the matter | Contract, Art. 6(1)(b), if you are a customer; otherwise legitimate interests, Art. 6(1)(f): answering you | 3 years from the last contact |
| Withdrawing from a contract (the form at /withdraw, or by email) | Name, email address, order number, and, if you give them, country, Product, purchase date and a note; the date and time we receive your withdrawal | Receive your withdrawal, confirm it to you by email with its content, date and time, and process the refund | Legal obligation, Art. 6(1)(c); contract, Art. 6(1)(b) | 3 years from the withdrawal |
| Complaints and disputes | What you tell us, order data, our replies | Handle your complaint; establish, exercise or defend legal claims | Legal obligation, Art. 6(1)(c); legitimate interests, Art. 6(1)(f): protecting our legal position | 3 years from the last contact, or until the dispute ends if longer |
| Accounting and tax | Order and invoice data | Keep the books and tax records the law requires | Legal obligation, Art. 6(1)(c) | As the Slovak accounting and tax law requires (up to 10 years) |
You are not required by law to give us this data, but without it we cannot deliver a Product, answer you or process a withdrawal.
4. The Website, fonts and cookies
The Website uses only technologies that are strictly necessary for it to work and be secure. It sets no cookies and loads no code or fonts from other companies' servers: our typefaces are served from our own domain.
If we ever add analytics or marketing tools, we will ask for your consent first where the law requires it, and update this policy before they go live.
5. Who receives your data
| Recipient | Role | What it receives |
|---|---|---|
| Stripe (acting through Link as Merchant of Record under Stripe Managed Payments) | Merchant of Record. It is an independent controller for payment, tax, fraud-prevention and receipt data, under its own privacy notice (link in your receipt). It shares order details with us as described in section 3. | Your payment and checkout details |
| Cloudflare, Inc. (Cloudflare Pages) | Processor: hosts the Website and runs the withdrawal function | Server logs; the data you submit through the Website |
| Resend | Processor: sends the confirmation of your withdrawal to you and a copy to us | Your name, email address and withdrawal details, only for as long as needed to send the message |
| Our email service | Processor: stores our mailbox, including the messages you send us | Your emails |
| Accountants, tax and legal advisers | Professional confidentiality | Order and invoice data, or case details, where necessary |
| Courts, supervisory and other public authorities | Where the law requires it | Only what the law requires |
We do not sell your data and we do not use it for advertising.
6. Transfers outside the European Economic Area
Some of the recipients above, including Stripe and its operating entity, Cloudflare, Inc. (Cloudflare Pages) and Resend, are based in the United States or may process data there. Where they do, the transfer relies on an adequacy decision of the European Commission (for example, certification under the EU-US Data Privacy Framework) or on the Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at info@assayhouse.eu.
7. Your rights
Under the GDPR you have the right to:
- access the data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data erased where the law gives you that right;
- restrict how we use it;
- object to processing based on legitimate interests;
- receive the data you gave us in a portable format where Art. 20 applies;
- withdraw consent at any time, where we rely on consent (we currently do not).
To use any of these rights, email info@assayhouse.eu. We may ask you to confirm your identity. We answer within one month. For payment and tax data held by Stripe, contact Stripe using the link in your receipt.
You may also complain to a supervisory authority. In Slovakia that is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk. You may instead complain to the authority in the EU country where you live or work.
8. Automated decisions
We do not make decisions about you by automated means, and we do not profile you.
9. Children
Our Products are for adults. You must be at least 18, or the age of majority where you live, to buy without a parent or legal guardian. We do not knowingly collect data from children. If you believe a child has sent us personal data, email info@assayhouse.eu and we will delete it.
10. Security
We protect the data we hold with measures appropriate to the risk: encrypted connections (HTTPS) to the Website, access limited to those who need it, and trusted service providers bound by data-processing terms. No system is perfectly secure. If a breach is likely to put you at risk, we will tell you and the authority as the law requires.
11. Changes to this policy
We may update this policy, for example when the law, our providers or our Website change. Each version shows its effective date, and earlier versions remain available on request. Material changes are shown at the top of this page.
12. Contact
Ivan Zifčák ASSAYHOUSE · Slnečnicová ulica 40, 949 01 Nitra, Slovak Republic · info@assayhouse.eu · +421 918 191 015 · Legal notice