Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) is: Team Rogers Ventures Ltd HE 478971 Larnaca, Cyprus

We collect and process the following personal data: • Account data: email address and name upon registration via Manus OAuth. • Order data: name, email address, delivery address, and payment information for orders in the CheckPept-Club. • Usage data: IP address, browser type, pages visited, and timestamps (server logs). • Cookies: session cookies for authentication (no third-party tracking cookies).

We process your data solely for the following purposes: • Providing and operating the platform (Art. 6(1)(b) GDPR). • Processing orders and payments in the CheckPept-Club (Art. 6(1)(b) GDPR). • Sending transactional emails (order confirmation, shipping notification) (Art. 6(1)(b) GDPR). • Fulfilling legal obligations (Art. 6(1)(c) GDPR).

Payments in the CheckPept-Club are processed via Stripe. Stripe Inc. is an independent data controller for payment data. We do not store full credit card details. For more information, see Stripe's privacy policy: https://stripe.com/privacy

Transactional emails are sent via Resend (Resend Inc.). Your email address is transmitted to Resend for this purpose. More information: https://resend.com/legal/privacy-policy

We do not share your data with third parties, except: • with payment service providers (Stripe) to process transactions. • with email service providers (Resend) for sending transactional emails. • when required by law. No data is shared for advertising purposes.

We store your data only as long as necessary for the stated purposes or as required by law. Account data is deleted upon account deletion. Order data is retained in accordance with statutory retention periods (generally 7 years).

You have the following rights regarding your personal data: • Right of access (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object (Art. 21 GDPR) To exercise your rights, please contact the data controller listed above.

We use only technically necessary session cookies for authentication. These cookies are not used for tracking or advertising and are deleted when the browser is closed.

We reserve the right to update this privacy policy as needed. The current version is always available on this page.