Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is VP Digital s.r.o., Korunní 2569/108, 101 00 Praha 10, Czech Republic, Company ID: 17409411.

Contact: hello@thorboost.io

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address (provided when you place an order or contact us)
• Payment data: processed securely by our payment providers (Stripe, PayPal); we do not store full card numbers
• Order data: products purchased, order date, amount paid
• Technical data: IP address, browser type, device information, pages visited (collected automatically)
• Communication data: messages sent through our contact form

3. Purpose and Legal Basis

We process your data for the following purposes:

• Contract performance (Art. 6(1)(b) GDPR): processing orders, delivering digital products, providing customer support
• Legal obligations (Art. 6(1)(c) GDPR): tax records, invoicing, compliance with applicable law
• Legitimate interests (Art. 6(1)(f) GDPR): website analytics, fraud prevention, service improvement
• Consent (Art. 6(1)(a) GDPR): marketing communications (only with your explicit opt-in)

4. Data Sharing

We may share your personal data with:

• Payment processors: Stripe, PayPal (for secure transaction processing)
• Hosting providers: Vercel (website hosting)
• Email service: for order confirmations and support communication

We do not sell your personal data to third parties. All processors are bound by data processing agreements compliant with GDPR.

5. Data Retention

We retain your personal data only as long as necessary for the purposes described above. Order and invoice data is retained for the legally required period (typically 10 years for tax purposes under Czech law). Contact form submissions are retained for up to 2 years unless an ongoing business relationship exists.

6. Cookies

Our website uses essential cookies required for basic functionality. We may also use analytics cookies (e.g., Google Analytics) to understand how visitors use our site. You can manage cookie preferences through your browser settings. For detailed information, see our cookie banner upon first visit.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — for consent-based processing, at any time

To exercise any of these rights, contact us at hello@thorboost.io. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure payment processing, and access controls.

9. International Transfers

Some of our service providers may process data outside the EEA. In such cases, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective upon publication on this page. We encourage you to review this page periodically.

12. Contact

For any privacy-related questions, contact us at hello@thorboost.io or via our contact page.