Privacy Policy

This Privacy Policy applies to kbeautyplanner.com, operated by Jorge Andere Gonzalez Calderon (Made by Jorchi), Friedrich-Hebbel-Straße 29, 81369 München, Germany.

1. Data Controller

2. What Data We Collect

• Name and email address — when you purchase a product or subscribe to our newsletter
• Payment information — processed exclusively by our payment providers (Lemon Squeezy, Gumroad, Stripe, PayPal). We do not store payment card data.
• IP address and browser data — recorded in our hosting provider’s server logs, which are kept for security and error diagnosis only. We run no analytics software on this website.
• Purchase history — to deliver your digital products and provide customer support

3. Legal Basis for Processing (GDPR Art. 6)

• Art. 6(1)(b) — Performance of a contract: processing necessary to fulfil your purchase
• Art. 6(1)(a) — Consent: for email list subscriptions
• Art. 6(1)(c) — Legal obligation: tax and invoicing records
• Art. 6(1)(f) — Legitimate interests: fraud prevention and website security

4. Payment Processors

We use the following third-party payment processors. By completing a purchase, your payment data is processed by these providers under their own privacy policies:

• Lemon Squeezy (Lemon Squeezy LLC) — acts as Merchant of Record and handles EU VAT
• Gumroad (Gumroad Inc.)
• Stripe (Stripe Inc.)
• PayPal (PayPal Holdings Inc.)

We do not receive or store your full payment card details.

5. Email Service Provider

Our free guides and email list are operated by Kit (formerly ConvertKit), Kit.com Inc., United States. If you subscribe, the email address and any information you enter in the subscription form are stored and processed by Kit on our behalf under a data processing agreement, on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw at any time using the unsubscribe link in any email. Subscription forms are hosted on Kit’s own domain; this website itself sets no cookies for that purpose.

6. Digital Product Delivery

Upon purchase, your email address is used solely to deliver the download link for your digital product. Order confirmation and download access are sent to the email address provided at checkout.

7. Cookies and Tracking

This website sets no cookies at all. It uses no analytics, no advertising pixels, no social media plugins and no third-party fonts or scripts. Nothing is written to your browser’s local or session storage. Because nothing is stored on or read from your device beyond what is strictly necessary to deliver the pages you request, no consent banner is required under § 25 TTDSG/TDDDG, and none is shown.

Everything on these pages — images, fonts, stylesheets and scripts — is served from our own domain. Your browser makes no request to any third party while reading this site. Leaving the site by following a link to a payment provider or to our email service is the only point at which another company sees your request, and only then.

If we ever introduce analytics or advertising measurement, this section will be updated before those tools are switched on, and non-essential cookies will only ever be set after your explicit opt-in.

8. Data Retention

• Purchase records and invoices — 10 years (German tax law, § 147 AO)
• Email addresses for product delivery — until deletion is requested
• Newsletter subscriptions — until you unsubscribe
• Server logs — deleted or anonymised by our hosting provider within 30 days

9. Data Transfers Outside the EU

Some of our service providers (Lemon Squeezy, Gumroad, Stripe, PayPal, Kit) are based in the United States. Those transfers are protected by Standard Contractual Clauses approved by the European Commission, or by the EU-U.S. Data Privacy Framework where the provider is certified. No data is transferred to any of them merely by visiting this website — only by purchasing or subscribing.

10. Your Rights Under GDPR

As a data subject within the EU/EEA, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / ‘right to be forgotten’ (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise any of these rights, contact us at jorchi@kbeautyplanner.com.

You also have the right to lodge a complaint with the competent supervisory authority. In Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Postfach 606, 91511 Ansbach, Germany.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The current version is always available on this page. Material changes will be communicated via the website.