Privacy Notice

1. Who we are

This Privacy Notice describes how Krystian Slawomir Matuszewski, an individual sole trader based in the United Kingdom (trading as "Urban Survival"), collects and uses your personal data. We act as the data controller for the personal data described below. Contact: krystianmatuszewski04@gmail.com.

2. Personal data we collect

• Order data: your email address, the product purchased, the transaction ID and timestamp.
• Download activity: the time you used your download link and how many times the file was accessed.
• Support correspondence: the contents of any email you send us.
• Technical data: basic server logs (IP address, user-agent, request timestamps) collected automatically when you visit the site.

Payment card details are collected directly by our payment provider (Paddle) and are not seen or stored by us.

3. How we use it and the legal basis

• Delivering the e-book and your download link — performance of a contract.
• Providing customer support — performance of a contract and our legitimate interests in helping customers.
• Preventing fraud and securing the service — legitimate interests.
• Meeting tax, accounting and other legal obligations — legal obligation.

4. Who we share data with

• Paddle — our Merchant of Record, processes your payment, handles billing, tax and refunds, and sends you a purchase receipt.
• Resend — our transactional email provider, used to deliver your download link.
• Hosting and backend providers — our website, database and file storage are hosted on Lovable Cloud infrastructure (built on Supabase and Cloudflare).
• Professional advisers and authorities — where required by law (e.g. tax authorities, courts).

5. International transfers

Some of our service providers are based outside the UK and EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

6. How long we keep data

We keep order records for up to 7 years to meet UK tax and accounting obligations. Support emails are kept for up to 2 years. Server logs are kept for up to 90 days. After these periods data is deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise any of these rights, email krystianmatuszewski04@gmail.com. We aim to respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls and a private storage bucket for the PDF file with single-use, time-limited download links.

9. Cookies

We use only essential cookies needed to operate the site and the checkout. We do not use marketing or advertising cookies. The checkout (operated by Paddle) may set its own cookies necessary to process your payment securely.

10. Changes to this notice

We may update this notice from time to time. The current version will always be available on this page with the "Last updated" date.