1. Introduction
This Privacy Policy explains how aipromptera.com ("we", "us", or "our") collects, uses, stores, and protects your personal data when you access or use our website and services.
We are fully committed to complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Revised Payment Services Directive (PSD2), including Strong Customer Authentication (SCA) requirements where applicable.
By accessing our site or purchasing from us, you acknowledge that you have read and understood this policy and agree to our data practices.
2. What Personal Data We Collect
We collect the following types of personal data:
- Account Data: Full name, email address, password, and login credentials
- Payment Data: Billing name and address (note: we do not store card numbers or CVV data)
- Transaction Data: Order history, digital product access logs
- Technical Data: IP address, browser type, device information, referring pages, and site usage
- Communication Data: Emails, support tickets, and customer service interactions
3. Lawful Basis for Processing (GDPR)
We process your data based on one or more of the following legal grounds:
- Consent – When you explicitly provide permission (e.g., newsletter signup)
- Contract – To fulfill a transaction or provide services to you
- Legal obligation – To comply with laws, including tax and regulatory requirements
- Legitimate interest – For fraud prevention, analytics, business development, and securing our platform
4. Strong Customer Authentication (SCA) & PSD2 Compliance
In line with PSD2 regulations, we ensure that Strong Customer Authentication (SCA) is implemented for all applicable electronic payments. This includes multi-factor authentication (MFA) when required, using:
- Something you know (e.g., a password)
- Something you own (e.g., your phone or device)
- Something you are (e.g., fingerprint or facial recognition)
Our payment gateways (e.g., Stripe, PayPal) are compliant with PSD2 and automatically apply SCA to qualifying transactions.
5. Cookies and Tracking
We use cookies to enhance your experience and analyze traffic. This may include session cookies, analytics cookies, and functionality cookies. You may opt out or configure your browser settings. For more details, view our Cookies Policy.
6. How We Use Your Data
Your personal data is used for the following purposes:
- To process orders and deliver digital products
- To provide customer support and manage your account
- To comply with legal and financial obligations
- To improve our services, website functionality, and security
- To send service-related or promotional emails (with your consent)
7. Data Sharing & Processors
We only share data with third parties necessary for the operation of our business, such as:
- Payment processors (e.g., Stripe, PayPal) for secure transactions
- Hosting and infrastructure providers
- Analytics and email service tools
All third parties are vetted and bound by data protection agreements to process your information in compliance with GDPR and PSD2 regulations.
8. International Transfers
If your data is transferred outside the UK or EEA, we ensure it is protected by:
- Adequacy decisions by the UK/EU Commission, or
- Standard Contractual Clauses (SCCs) or other appropriate safeguards
9. Data Retention
We only retain your data for as long as necessary to:
- Deliver our services
- Meet legal, tax, and regulatory obligations
- Resolve disputes or enforce agreements
After this period, your data will be securely deleted or anonymized.
10. Your Rights Under GDPR
You have the following rights under UK/EU GDPR:
- Right to access – Request a copy of your personal data
- Right to rectification – Correct inaccurate or incomplete data
- Right to erasure – Request deletion of your data (“right to be forgotten”)
- Right to restrict processing – Temporarily limit how we use your data
- Right to object – Object to certain types of data processing
- Right to data portability – Transfer your data to another service provider
- Right to withdraw consent – Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at info@aipromptera.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.
11. Data Security
We use industry-standard encryption and secure protocols (e.g., HTTPS, TLS) to protect your data from unauthorized access, disclosure, or destruction.
Our systems and partners are monitored and updated regularly for compliance and security vulnerabilities.
12. Automated Decision-Making & Profiling
We do not use your personal data for automated decision-making or profiling that produces legal effects or significantly affects you.
13. Changes to This Policy
We may update this Privacy Policy as needed to reflect changes in legal requirements or business operations. Changes will be posted on this page with an updated effective date.
14. Contact Information
If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us at:
QWIPEX LIMITED
Company number 16722361
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ