Privacy Policy

Personal data we process

Depending on how you interact with us, we may process:

Identity and contact information, such as your name and email address.

Purchase information, such as the product purchased, transaction date, amount, currency and order status.

Customer support information, including messages you send to us and information required to resolve refund or access requests.

Technical information, such as IP address, browser or device information and security or server logs generated when the website is accessed.

Payment card information is processed by our payment provider. We do not receive or store your complete card number.

How and why we use personal data

We process personal data where necessary to:

fulfil your purchase and deliver the product; communicate with you about your order; provide customer support; process refunds; comply with accounting, tax and other legal obligations; protect our website and systems against misuse, fraud and security threats; and manage or defend legal claims where necessary.

Our legal bases under the GDPR may include:

Performance of a contract, where processing is necessary to complete and fulfil your purchase.

Legal obligations, including applicable accounting, tax and regulatory requirements.

Legitimate interests, including operating and securing our website, preventing abuse and responding to customer issues.

Consent, where we specifically ask for consent for an optional purpose such as future marketing communications.

The GDPR requires organisations to process data lawfully, transparently, for specified purposes and only to the extent necessary.

Payments

Payments are processed through Stripe / Link.

Stripe receives information necessary to process transactions, prevent fraud, administer payments and comply with its legal obligations.

Depending on the service being provided, Stripe may process personal data in its own capacity or on our behalf. Stripe documents both processor and controller roles in its data-processing terms.

We do not store your complete payment card details.

Service providers

We use third-party providers where reasonably necessary to operate the website and deliver purchases.

These may include:

• Stripe / Link — checkout and payment processing
• Cloudflare — website hosting, delivery and security
• Make — order automation
• Google / Gmail — transactional email delivery

We may also use professional advisers, accountants or other service providers where necessary for legal or business administration.

These providers process information according to their respective agreements, privacy terms and applicable data-protection law.

International transfers

Some service providers may process data outside Estonia or the European Economic Area.

Where required, transfers are protected using mechanisms recognised under applicable data protection law, such as adequacy decisions or contractual safeguards.

Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

Purchase and transaction records may be retained for the period required by applicable accounting, tax and legal obligations.

Customer support communications may be retained where reasonably necessary to resolve disputes, document transactions or protect legal rights.

Our service providers may retain certain information according to their own legal obligations and retention policies.

Marketing

We do not automatically subscribe customers to marketing communications merely because they purchase The 213 Method.

If we introduce optional marketing emails, we will request consent or rely on another lawful basis where permitted and provide a clear way to unsubscribe.

Cookies and tracking

At present, we do not intentionally use non-essential advertising or behavioural-tracking cookies on the main The 213 Method website.

Essential technical technologies may be used to operate and secure the website.

Third-party services such as Stripe may use cookies or similar technologies when you interact with their checkout environment, subject to their own privacy and cookie policies.

If we later introduce analytics, advertising pixels or other non-essential tracking technologies, this Privacy Policy and any required cookie-consent mechanism will be updated.

Your rights

Where the GDPR applies, you may have the right to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, data portability, and to object to certain processing.

Where processing is based on consent, you may withdraw that consent at any time.

These rights may be subject to legal exceptions, for example where we must retain transaction information to comply with accounting or tax obligations.

EU data-protection rules provide individuals with rights including access, rectification, erasure, restriction, portability and objection.

To exercise your rights, contact:

noverisdigital@gmail.com

You also have the right to lodge a complaint with a competent data protection authority. In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss or misuse.

No online system can guarantee absolute security.

Changes to this Policy

We may update this Privacy Policy when our services, providers or legal obligations change.

The latest version will always be published on this page together with its effective date.

Contact

For privacy questions or requests: