This policy explains what data the Maru Family pastry club collects about you, why it is needed, who it is shared with and how to have it deleted.
The data controller is self-employed entrepreneur Katsiaryna Kurbatava (NIP 8992971388), Republic of Poland — hereinafter the “Club”. For anything about your data: [email protected].
What data we collect
What you give us: your name and email address when setting up access; a password (stored encrypted — neither we nor anyone else can read it); a phone number, only if you chose to add one, the field is optional; the text of a review and a photo of your bake, if you sent them.
What appears as you use the site: which lessons you opened and when; dates and amounts of payments, the chosen plan, the state of the subscription; IP address, country, browser and device when you sign in; a Telegram identifier — if you linked your account to join the private chat.
We do not have your card details. The card number is entered on the payment system's page and never reaches us — we only see that the payment went through, the amount and the last digits of the card on the receipt.
Why the data is needed
— to open and maintain access to the lessons and recognise you at sign-in;
— to take payment, renew the subscription and issue a receipt;
— to write to you about your account: payment confirmation, sign-in link, notice of an upcoming charge, a reply from support;
— to send news about the club and new lessons — one click unsubscribes, and it does not affect your access;
— to see which lessons are being used, so we do not email someone who is already watching and do not retire lessons nobody needs;
— to show reviews and photos of members' bakes, if you sent them;
— to count overall site traffic.
Who we share data with
Only those without whom the service does not work, and only as much as they need:
— payment systems Stripe, bePaid, YooKassa — your name, email and the amount, to process the payment;
— Brevo (Sendinblue) — your email and name, to send the message;
— Vimeo — the video lessons are hosted there, and playing them passes the technical details of your request to the service;
— Telegram — if you linked your account for the private chat;
— Google — anonymous traffic statistics, if you accepted analytics cookies.
We do not sell data and do not pass it on for anyone else's advertising. Data goes to public authorities only on a lawful request.
Cookies
Technical cookies keep you signed in and stop the checkout from losing your order — the site does not work without them. Analytics cookies are switched on only with your consent in the banner on your first visit; declining breaks nothing.
You can change your mind at any time by clearing the site's cookies in your browser.
How long we keep it
Account data is kept while the account exists. Payment records are kept for as long as accounting law requires — that period is not up to us.
Sign-in records and lesson-view records are kept for no longer than two years.
Your rights
As the data is processed in Poland, you have the rights given by the General Data Protection Regulation: to access your data, to have it corrected or erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time. You can also delete your account together with the data, unsubscribe from emails and ask us to remove your review and photo from the site.
Write to [email protected] from the address the account is registered to. We reply within 30 calendar days. If our answer does not satisfy you, you may complain to the Polish data protection authority (UODO).
Deleting the account closes access to the lessons, and the paid period is not refunded — this is set out in the offer.
How we protect the data
The site runs over HTTPS, passwords are stored as irreversible hashes, and access to the database is limited to those who need it for their work. Nobody can promise absolute security on the internet, but we do what is within our power.
Changes to this policy
A new version is published on this page and takes effect on publication. If the changes are significant, we will let you know by email.
Details
Self-employed entrepreneur Katsiaryna Kurbatava
NIP 8992971388, Republic of Poland
E-mail: [email protected]