Legal

Privacy Policy

Last updated: 14 November 2026

This policy explains what personal data Blackout Zero collects when you use this website, why we collect it, and what rights you have. We keep it short and in plain English.

What we collect

1. Data you give us

• Email address — only if you choose to download the free shopping list or contact us. We use it to send you the file and, if you agree, a short series of follow-up emails about the guide.
• Messages you send us — if you email us, we keep the correspondence while we deal with it.

2. Data from your purchase

Payments are handled entirely by Stripe. We never see or store your card number. Stripe gives us your email address, the product you bought, the amount, and a transaction reference — what we need to deliver your files and handle refunds.

3. Data created when you download

When you open your download page, our delivery service checks the payment reference in the link against Stripe to confirm the payment is complete, then issues a download link that expires after one hour. We log the reference, the product delivered and the time of access. We do not log your IP address for this purpose.

4. Technical data

Our hosting provider records standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. We do not use advertising cookies, tracking pixels or third-party analytics on this site.

Why we are allowed to use it

• To deliver what you bought or asked for — performance of a contract (Article 6(1)(b) GDPR).
• To send follow-up emails — your consent (Article 6(1)(a)), which you can withdraw at any time using the unsubscribe link in every email.
• To keep records and prevent fraud — our legitimate interests (Article 6(1)(f)) and our legal obligations, including tax and accounting rules.

Who we share it with

We do not sell your data. We share it only with the services that make the product work:

• Stripe — payment processing. Stripe is a data controller for payment data and has its own privacy policy.
• Supabase — secure storage of the PDF files and issue of the temporary download links.
• Our email provider — to send the emails you asked for.
• Our hosting provider — to serve this website.

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

• Purchase records — 6 years after the tax year, as Irish revenue rules require.
• Download logs — 12 months.
• Email list — until you unsubscribe, plus a short suppression record so we do not email you again by mistake.
• Support emails — 24 months.

Your rights

Under the GDPR you can ask us to:

• show you a copy of the data we hold about you;
• correct anything that is wrong;
• delete it;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw consent for marketing at any time.

Email rosattova@gmail.com and we will respond within one month. If you are unhappy with our answer, you can complain to the Data Protection Commission (Ireland) at dataprotection.ie.

Cookies

This site sets no cookies of its own and runs no advertising or analytics scripts. Your browser may cache the page files and the webfonts locally to load them faster. If we add analytics later, this page will say so first and ask for your consent where the law requires it.

Children

Our products are written for adults setting up a household. We do not knowingly collect data from anyone under 16. If you believe a child has given us their details, email us and we will delete them.

Changes

If we change how we handle personal data, we will update this page and change the date at the top. Material changes affecting existing customers will be emailed to them.

This policy is a working draft prepared for review. Before launch it should be checked against the final list of processors and against any consumer-law information duties that apply to the seller.