Privacy Policy
Last updated: August 11, 2026
1. Introduction
This Privacy Policy explains how Deep Rest Sessions collects, uses, discloses, and protects your personal information when you visit deeprestsessions.com or purchase our digital audio Products. It is designed to comply with the EU General Data Protection Regulation (GDPR), the Polish Personal Data Protection Act, the California Consumer Privacy Act as amended by the CPRA (“CCPA”), and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Data Controller
The data controller responsible for your personal information is:
Wojciech Kania
Towarowa 1, 58-400 Kamienna Góra, Poland
Email: studioalberia@gmail.com
We have not appointed a formal Data Protection Officer, as our processing does not meet the large-scale/systematic-monitoring thresholds that would require one under GDPR Article 37. For all privacy inquiries, contact the email address above, which also serves as our designated privacy contact point for PIPEDA purposes.
3. What Personal Information We Collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact data | Name, email address | Provided by you at checkout |
| Transaction data | Order details, purchase amount, date, product purchased | Generated at checkout |
| Payment data | Processed directly by Stripe/PayPal; we do not receive or store full card numbers | Payment provider |
| Technical data | IP address, browser type, device type, referring URL | Automatically via cookies/analytics |
| Communications | Emails you send us (e.g., refund requests, support questions) | Provided by you |
We do not knowingly collect sensitive categories of data (e.g., health data), and testimonials on our Site reflect voluntarily shared personal experiences, not medical records.
4. Purposes and Legal Basis for Processing (GDPR Article 6)
| Purpose | Legal basis |
|---|---|
| Processing your order and delivering the download link | Performance of a contract (Art. 6(1)(b)) |
| Responding to support/refund requests | Performance of a contract / legitimate interest (Art. 6(1)(b)/(f)) |
| Sending transactional emails (order confirmation, download link) | Performance of a contract (Art. 6(1)(b)) |
| Fraud prevention and Site security | Legitimate interest (Art. 6(1)(f)) |
| Compliance with tax/accounting law | Legal obligation (Art. 6(1)(c)) |
| Marketing emails (only if you opt in) | Consent (Art. 6(1)(a)) |
| Analytics/advertising cookies | Consent (Art. 6(1)(a)), where required |
We only process the minimum data necessary for each of these purposes, consistent with GDPR data-minimization principles.
5. Cookies and Tracking Technologies
Our Site may use cookies and similar technologies for:
- essential site functionality (e.g., checkout, cart);
- analytics (e.g., to understand traffic and conversion); and
- advertising (e.g., Facebook/Instagram Pixel, TikTok Pixel), if enabled.
Where required by law (EU/EEA, UK, and certain US/Canadian jurisdictions), non-essential cookies are only set with your prior consent via a cookie banner, and you can withdraw consent at any time through your browser settings or our cookie preference tool.
6. How We Share Your Information
We do not sell your personal information for money. We share limited data with the following categories of service providers, strictly to operate the Site and fulfill your order:
- Payment processors (Stripe, PayPal) — to process your payment;
- Website/hosting platform (Lovable.app or successor hosting provider) — to host the Site;
- Email delivery service — to send your order confirmation and download link;
- Advertising platforms (Meta/Facebook, TikTok), only if you interacted with an ad and cookie consent was given — for ad performance measurement.
Each provider processes data only as necessary to perform its function and is contractually bound to protect your information.
7. International Data Transfers
We are based in Poland (EU/EEA). Some service providers we use (e.g., Stripe, PayPal, Meta, TikTok, and possibly our hosting provider) may process data in the United States or other countries outside the EEA. Where this occurs, we rely on the EU-US Data Privacy Framework, Standard Contractual Clauses, or another legally recognized transfer mechanism to safeguard your data. If you are located in the US or Canada purchasing from Poland, your data will similarly be processed in Poland/EU and, in some cases, transferred back to US-based processors as described above.
8. Data Retention
We retain:
- Order and transaction data: for the duration required by Polish/EU tax and accounting law (generally 5 years from the end of the tax year of the transaction);
- Email correspondence: as long as necessary to resolve your inquiry, and thereafter per our general retention schedule (up to 3 years for support records);
- Marketing consent records: until you withdraw consent or unsubscribe, plus a reasonable period to evidence compliance.
9. Your Rights
9.1 EU/EEA and Polish consumers (GDPR)
You have the right to: access your data; rectify inaccurate data; request erasure (“right to be forgotten”); restrict processing; object to processing based on legitimate interest or direct marketing; data portability; and withdraw consent at any time without affecting past lawful processing. You may also lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych, UODO) or your local EU supervisory authority.
9.2 California residents (CCPA/CPRA)
Depending on applicable thresholds, you may have the right to: know what personal information is collected; delete personal information; correct inaccurate information; opt out of the sale or sharing of personal information; and non-discrimination for exercising these rights. We do not sell personal information for monetary value. To the extent any data sharing with advertising platforms qualifies as “sharing” under CCPA, you may opt out by emailing studioalberia@gmail.com or via any “Do Not Sell or Share My Personal Information” link provided on the Site, and we will honor recognized Global Privacy Control (GPC) signals.
9.3 Canadian residents (PIPEDA)
Under PIPEDA, you have the right to access the personal information we hold about you, request corrections, and withdraw consent to our collection, use, or disclosure of your data, subject to legal or contractual restrictions. To exercise these rights, contact our designated privacy contact, Wojciech Kania, at studioalberia@gmail.com. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
9.4 How to exercise your rights
Email studioalberia@gmail.com with your request. We will respond within 30 days (GDPR), 45 days (CCPA), or as required by applicable law, and may request identity verification before fulfilling data-related requests.
10. Data Security
We implement reasonable technical and organizational safeguards, including HTTPS/TLS encryption in transit, restricted access to systems containing personal data, and reliance on reputable, security-vetted third-party processors (Stripe, PayPal, hosting provider). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children’s Privacy
The Site and Products are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have inadvertently collected such data, we will delete it promptly.
12. Do-Not-Track Signals
Our Site does not currently respond to browser “Do Not Track” signals beyond honoring Global Privacy Control (GPC) opt-out signals where legally required, as described in Section 9.2.
13. Third-Party Links
The Site may link to third-party services (e.g., payment checkout pages). We are not responsible for the privacy practices of those third parties; please review their respective privacy policies.
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “Last updated” date above indicates the most recent revision. Material changes will be communicated via the Site or, where appropriate, by email.
15. Contact Us
For any privacy-related question, request, or complaint:
Wojciech Kania
Towarowa 1, 58-400 Kamienna Góra, Poland
Email: studioalberia@gmail.com