Privacy Policy

Applies to website: https://sanelapavlovic.com
Website owner / responsible person: Sanela Pavlović, Izletnička 43, 11300 Smederevo, Serbia
Contact email: pavlovicmakeup@gmail.com

Effective date / last updated: September 22, 2025

1) Who we are and what this Policy covers

This Policy explains which personal data we collect when you use our website and purchase digital courses, how we process it, for what purposes, and what your rights are. It applies to all website visitors and customers of our digital products (courses).

2) Data we collect

Purchase data: full name, email address, billing/shipping address (if applicable), order number, purchased course, transaction date/amount.
Support data: information you send us via email (questions, attachments, complaints/refunds).
Technical data: IP address, device/browser, cookies and similar technologies necessary for site functionality; basic traffic analytics.
Account / course access (if an account exists): email, access status, progress through lessons (aggregated, used to confirm refund conditions and provide support).

Note: We do not store payment card numbers on our website.

3) Data sources

We obtain data directly from you (purchase, support, contact form) and automatically through cookies and server logs when you use the site.

4) Purposes and legal bases for processing

Performance of a contract – enabling purchase and access to the digital course; sending order and access information.
Customer support – responding to inquiries, troubleshooting, refunds (legitimate interest / contract).
Legal obligations – accounting, tax compliance, and recordkeeping.
Security and fraud prevention – protecting accounts/content and our rights (legitimate interest).
Basic analytics – understanding site usage for improvement (legitimate interest).

We currently do not send marketing newsletters. If we introduce them in the future, we will request your consent and provide an easy way to unsubscribe.

5) Payments (Lemon Squeezy as “merchant of record”)

Payments, invoicing, and collection are processed by Lemon Squeezy as the merchant of record. Lemon Squeezy may process data necessary for payment and fraud prevention (e.g., name, email, billing address, transaction details) in accordance with its privacy policy. We do not store payment card data on our site.
More information: https://www.lemonsqueezy.com/privacy

6) Cookies and analytics

We use necessary cookies for site functionality (e.g., session/course access) and basic traffic analytics (aggregated data). You can control cookies through your browser settings. If we introduce additional cookies in the future (e.g., marketing), we will update this Policy and the consent banner accordingly.

7) Sharing of data

We share data only when necessary and with appropriate contractual safeguards:

with service providers (hosting, email, Lemon Squeezy as processor/merchant of record for billing and invoicing, course delivery platform);
with accounting/tax authorities when legally required;
when needed to protect our rights or pursuant to a lawful request by a competent authority.

All partners process data solely for the stated purposes and under our instructions/agreements.

8) International transfers

Our service providers (including Lemon Squeezy) may process data outside Serbia/EU. Where this occurs, we implement appropriate safeguards (e.g., EU Standard Contractual Clauses or other transfer mechanisms), where applicable, to ensure an adequate level of protection.

9) Security

We apply reasonable technical and organizational measures (HTTPS, access controls, data minimization) to reduce the risk of unauthorized access, loss, or misuse.

10) Retention period

We retain data for as long as necessary for:

the purchase and delivery of the course and support;
fulfillment of legal obligations (e.g., accounting records—per applicable retention periods);
dispute resolution and protection of our rights.

After retention periods expire, we delete or anonymize the data.

11) Your rights

Under applicable laws (e.g., ZZPL/GDPR), you have the right to: access, rectification, deletion (“right to be forgotten”) where there is no legal basis for further processing, restriction of processing, data portability, and to object to processing based on legitimate interests.
You can submit a request to pavlovicmakeup@gmail.com. We respond within a reasonable time.

12) Minors

The content is not intended for persons under 16 years of age. We do not knowingly collect data from minors; if you believe we have, please contact us to arrange deletion.

13) Changes to this Policy

We may update this Policy from time to time. The current version is always published on this page with the date of last update.

14) Contact

For any questions regarding privacy and data protection, please contact:
Sanela Pavlović
Izletnička 43, 11300 Smederevo, Serbia
Email: pavlovicmakeup@gmail.com

32.50€