Privacy Policy

EMAGA DIGITAL STUDIO

Privacy Policy — updated 7 September 2026

Who is responsible for your data?

Okazora Sp. z o.o., operating Emaga Digital Studio at emagadigitalstudio.com, is the controller of the personal data described in this notice. Registered office: Partyzantów 17/116, 75-411 Koszalin, Poland. Correspondence: Broniewskiego 11, 75-526 Koszalin, Poland. VAT ID: PL6692593544. Contact info@okazora.eu or +48 535 063 195.

Data we process and why

• Purchases and downloads: your name, email, billing details, purchased products, chosen licence, payment status, transaction references and download permissions. We use these to process your purchase, supply files and provide support, based on performance of our contract (GDPR Article 6(1)(b)).
• Tax and accounting: transaction records, billing location and relevant tax information, processed to comply with legal obligations (Article 6(1)(c)).
• Consent and licence records: your immediate-delivery consent, its date, and the licence terms recorded with your order, to document supply, fulfil legal requirements and establish the rights granted.
• Accounts and correspondence: account details where an account exists, and information you send us when requesting help. We use these to provide the requested service and resolve enquiries.
• Security and store administration: IP addresses, browser and device information, access and download logs, and order records needed to prevent abuse, investigate problems and understand sales. Our legitimate interests are protecting customers and operating a reliable store (Article 6(1)(f)), balanced against your rights.

Information needed to process a purchase and deliver files is required for that transaction. Without it, we may be unable to fulfil your order. Guest checkout is available. Do not send passwords or complete payment-card details in support messages.

Payments

Card payments are handled through WooPayments and Stripe. They receive information needed to process and secure the transaction, including billing and payment details and technical fraud-prevention information. Full card numbers and security codes are entered into the payment provider’s hosted fields; our store receives transaction references and limited payment details instead. If you choose an available digital wallet, its provider also processes information under its own notice.

Payment providers may act as independent controllers for purposes such as fraud prevention and regulatory compliance. See Automattic’s Privacy Policy and Stripe’s Privacy Policy.

Who receives information?

Access is limited to people and providers who need it for the purposes above. Our WordPress and WooCommerce store is hosted by Hostinger. Cloudflare R2 stores and delivers purchased files; download requests expose technical connection information such as your IP address to the delivery provider. Selecting EU storage for files does not mean every provider operation takes place only in the EU.

Business email and communication providers handle order messages and support correspondence. Authorised staff and accounting or professional advisers may process records needed for their work. We disclose records to tax authorities or other competent bodies when legally required. We do not sell customer data.

International processing

Our providers operate internationally, including in the United States, and some processing may occur outside the European Economic Area. Transfer arrangements depend on the provider and processing activity. Relevant safeguards include European Commission standard contractual clauses and adequacy decisions where applicable. Information on the providers’ arrangements is available in Hostinger’s Data Processing Addendum, Cloudflare’s Data Processing Addendum, and the payment-provider notices above. Contact us for information about safeguards applicable to your data or a copy, subject to protection of confidential information.

Cookies and similar technologies

The store uses cookies and similar storage for shopping sessions, sign-in, currency preferences and payment security. Payment providers may use their own cookies and device signals to process payments and detect fraud. Browser settings let you remove or restrict cookies; blocking those needed for checkout may prevent a purchase from completing.

WooCommerce order-source tracking is disabled. Sales statistics are calculated within the store from order records. If we introduce optional analytics or advertising technologies, we will update this notice and obtain consent where required before enabling them.

How long we retain information

• VAT OSS records: records required by the scheme are retained for 10 years from the end of the calendar year of the transaction. Other tax and accounting records follow their applicable statutory periods.
• Download access and licence evidence: the minimum records needed to provide continuing access and establish the purchased licence are retained while those purposes remain necessary. Removing unrelated account data does not automatically remove records needed for a purchase or a legal obligation.
• Enquiries, complaints and disputes: records are retained while the matter is being resolved and, where necessary, for applicable legal-claim periods or ongoing proceedings.
• Unpaid orders, account and technical records: retention is assessed according to whether the information is still needed for the requested service, a security investigation or a legal obligation. Data no longer needed for these purposes should be deleted or anonymised. The store does not currently apply an automatic account or completed-order deletion schedule.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. Where consent is the basis, you may withdraw it without affecting the lawfulness of earlier processing. We may need to verify your identity before handling a request. Erasure rights do not override duties to retain required records.

Contact info@okazora.eu. You may complain to the Polish supervisory authority, UODO, or another competent data protection authority. Mandatory rights that apply in your country remain unaffected.

Changes

We update this notice when our services or processing practices change. The date above identifies this version.