This policy explains what personal data we collect when you visit divilover.com, buy a product, join a course, or sign up for the newsletter, why we collect it, and what rights you have.
Who we are
This website is run by Divi Lover Anna Romańska, ul. Maurycego 10, 42-256 Olsztyn, Poland, VAT ID: PL5732490650 ("Divi Lover", "we", "us").
We are the data controller for the personal data described in this policy. If you have any questions, write to hello at divilover dot com.
What data we collect
When you buy a product or create an account: your name, email address, billing address, country, VAT number (if you provide one), order history, and license keys. Payment card details are handled directly by our payment providers. We never see or store your full card number.
When you sign up for the newsletter or download a freebie: your email address and, if you provide it, your first name.
When you contact us or open a support ticket: your name, email address, and anything you include in your message, such as your website URL.
When you join Divi Stylist Academy: the data needed to give you access to the course and the community, plus anything you choose to share in the community.
When you join the affiliate program: your name, email address, payout details, and data about referred sales.
When you browse the website: technical data such as your IP address, browser type, pages visited, and referring URL, collected through cookies and server logs.
Why we use your data, and on what legal basis
- To process orders, deliver products, manage licenses and updates, and provide support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting and tax records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- To send the newsletter and occasional emails about new products and offers. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
- To keep the website secure, prevent fraud, and improve our products and website. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
Who we share your data with
We never sell or rent your personal data. We share it only with trusted service providers that help us run the business, and only as much as they need:
- SureCart: online store, checkout, customer accounts, licenses, and the affiliate program
- Stripe and PayPal: payment processing
- MailerLite: newsletter and email delivery
- Circle: Divi Stylist Academy community and course platform
- Cloudflare: website security and performance
- Hetzner: website hosting (servers in Germany)
- Our accountant: for invoices and tax records
Some of these providers are based outside the European Economic Area, for example in the United States. In those cases, data is transferred under appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
We may also disclose data if required by law.
How long we keep your data
- Account and order data: for as long as your account is active, and afterwards as long as needed to handle claims related to your purchases.
- Invoices and accounting records: for the period required by Polish tax law (currently 5 years from the end of the tax year).
- Newsletter data: until you unsubscribe.
- Support messages: for up to 3 years after the conversation ends.
Your rights
Under the GDPR, you have the right to:
- access your personal data and get a copy of it
- correct inaccurate data
- have your data deleted, unless we are required to keep it (for example, invoices)
- restrict or object to certain processing
- receive your data in a portable format
- withdraw your consent at any time, without affecting processing that happened before
You can update most of your details yourself in your account. For anything else, write to hello at divilover dot com and we'll reply within 30 days.
You also have the right to lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes UODO), uodo.gov.pl. If you live elsewhere in the EU, you can contact your local authority.
Cookies
Cookies are small text files stored in your browser when you visit a website.
Strictly necessary cookies keep the website working: they remember what's in your cart, keep you logged in, and keep checkout secure. These don't need your consent.
Affiliate cookies remember which affiliate referred you, so they can get credit for a purchase.
We don't use analytics or advertising cookies. You can delete or block cookies at any time in your browser settings, but without the strictly necessary ones the cart, login, and checkout may not work.
Security
We use HTTPS encryption across the whole website and work only with providers that follow recognized security standards. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.
Changes to this policy
We may update this policy from time to time, for example when we add a new tool or service. The date at the top always shows the latest version. If the changes are significant, we'll let customers know by email.
Contact
Questions about this policy or your data? Write to hello at divilover dot com.
