Privacy notice

The controller is the seller named below. This notice covers the Sectutor website.

Seller legal name: Sectutor (Intellfence)

Seller address: Opaallaan 1180, 2132 LN Hoofddorp, Netherlands

What we collect

Orders. Name, email, the product SKU, the amount, the order id from Stripe, and whether you agreed to the licence and to immediate access, including the loss of the right of withdrawal. For each paid order we store the buyer’s email address and the Stripe order id (the Checkout Session id). Download links expire 72 hours after they are issued, and each file can be downloaded five times. We keep the email address and the order id with the order record for accounting, then delete or reduce that record when the accounting retention period ends. Stripe processes the card data. We do not store the card number.
Downloads. A count per file, so the five-download cap can be enforced, and a log when the PowerPoint or the question-bank zip is delivered (order id and file name, not a copy of the file).
Watermarks. Your name, email and order id are written into the footer of each purchased PDF page. That is how a leaked copy can be tied back to an order.
Samples. Name, email, course, the exact consent sentence, the time you agreed, whether you ticked the newsletter, and the IP address of the request. The IP is kept as part of the consent record.
Support and unsubscribe. The order id or email address, and the time, when you report a defective or undelivered file or when you unsubscribe.

The site itself does not set analytics cookies and does not run a tracking script. Stripe’s checkout runs on Stripe’s website and has its own notice.

Why

Contract. Taking payment, sending download links, watermarking the PDFs, enforcing the licence, and fixing, replacing or refunding files that are defective or not delivered.
Consent. Emailing you about new samples and course updates, only if you submit the optional form and tick the consent box. Sending the optional newsletter only if you tick that separate box. You can read and download the current samples with no form and no account.
Legitimate interests. Rate limiting and keeping the shop from being abused, balanced against your rights. You can object.
Legal obligation. Tax and accounting records for paid orders.

The exact sample consent sentence and the exact newsletter sentence are stored with a timestamp. They are the sentences shown on the form.

How long

Order records are kept for as long as tax and accounting rules require, then deleted or reduced. Consent records are kept so we can show what was agreed, and are deleted when they are no longer needed for that. Unsubscribe requests are kept so we do not email you again. Download counts stay with the order.

Who else sees it

Stripe (payments), the hosting provider (hosting and the private file store), and the email provider (email, when a receipt is sent). Each is a processor. They may process data outside the EEA under their own transfer safeguards. We do not sell personal data and we do not use it for advertising profiles. Order email is the receipt and the download links only.

Unsubscribe

Every sample email and every order email includes an unsubscribe link. Using it stops the optional newsletter. It does not delete an order you have already paid for.

Your rights

You can ask for access, correction, erasure, restriction, or a copy of your data, and you can object to processing based on legitimate interests. You can withdraw consent for optional email at any time. That does not affect processing that already happened. You can complain to the data protection authority where you live.

Write to support@sectutor.com. We may need to confirm it is you before we act.

Children

The shop is not aimed at children.