Effective date: 01.11.2025

Owner / Merchant of Record: Vyrom Digital OÜ, reg. no. 17350997, Narva mnt 174c/2-20, Tallinn, 13914, Estonia

Website: flipfresh.co

Contact: yes@flipfresh.co

This policy explains how we handle personal data under GDPR/UK-GDPR and similar laws.

• 1) Data we collect

  Identity & contact: name, email; optional country/region.

  Transaction data: product purchased, price, timestamps, billing country (from payment processor).

  Technical data: IP address, device/browser info, pages viewed, UTM parameters.

  Communications: your messages to support; your marketing preferences.

  We do not collect sensitive health data.

  Sensitive data: We do not intentionally collect special category data (e.g., health information, biometric or genetic data, political opinions, religious beliefs, trade-union membership, sexual orientation). Please do not submit such information. If you provide it unrequested, we will delete or anonymize it where feasible.

• 2) How we use data (lawful bases)

  Provide products/services (contract): deliver downloads, emails with your access links, customer support.

  Operate the site & prevent fraud (legitimate interests/legal obligation): security logs, abuse prevention, record keeping.

  Marketing with consent: newsletters, product tips, offers. You can unsubscribe anytime.

  Compliance (legal obligation): tax records, accounting, responding to lawful requests.

• 3) Cookies & tracking

  We use cookies and similar technologies to operate the site, improve performance, and (with consent) measure marketing. Non-essential cookies only load after you choose Accept in the banner. Manage preferences in Cookie Settings.

• 4) Email practices

  Lead emails: sent only if you opt in (double opt-in preferred).

  Transactional emails: sent when you purchase/access content (no marketing consent required).

  Unsubscribe links are included in every marketing email.

• 5) Data sharing (processors/sub-processors)

  We use vetted vendors to run FlipFresh (hosting, email delivery, payment processing, analytics, storage). They process data under our instructions and contractual safeguards (DPAs, SCCs where relevant). We don’t sell personal data.

• 6) International transfers

  Where data leaves the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses with supplementary measures as needed.

• 7) Retention

  Leads (no purchase): 18–24 months of inactivity, then deletion.

  Purchases & tax records: 7–10 years as required by law.

  Support tickets: up to 24 months after resolution.

  We may retain minimal suppression data to honor unsubscribe requests.

• 8) Your rights

  Subject to law, you can access, rectify, erase, restrict, object, and port your data, and withdraw marketing consent at any time.

  To exercise rights: yes@flipfresh.co

  We may verify identity. We respond within 30 days.

• 9) Security

  We apply least-privilege access, 2FA for admin tools, encryption in transit/at rest where supported, daily backups, and periodic access reviews. No method is 100% secure, but we strive for industry-standard protection.

• 10) Children

  FlipFresh is for adults (18+). We do not knowingly collect data from children.

• 11) Third-party links

  Our site may link to third-party sites. Their privacy practices are their own.

• 12) Changes to this policy

  We may update this policy. The new date appears at the top; for material changes, we’ll notify registered users by email where feasible.

• 13) Contact

  yes@flipfresh.co