Privacy & Data Protection

Privacy Policy

Effective Date: September 9, 2026 • GDPR, CCPA & Consumer Privacy Compliant Active

1 Overview & Data Protection Commitment

Digimek ("we", "us", or "our") treats your personal privacy with paramount importance. This Privacy Policy details our operational data handling procedures, the lawful basis for data collection, how we protect customer data, and your statutory rights under global regulations including the General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

2 Information We Collect & Sources

We restrict data collection exclusively to what is strictly necessary to deliver digital purchases and fulfill commercial obligations:

  • Order & Transaction Data: Your name, billing address, email address, and order history needed to generate unique instant download access links and tax receipts.
  • Financial Information: All payment transactions are handled directly through PCI-DSS Level 1 certified payment merchants (such as Lemon Squeezy and Stripe). We never see, receive, or store your raw payment card credentials.
  • Technical & Analytical Telemetry: Anonymized device information, approximate geographical region (country level for VAT calculation), browser type, and interaction metrics to diagnose technical errors and ensure mobile responsiveness.

3 Lawful Bases for Processing (GDPR Article 6)

We process personal data solely under the following recognized legal grounds:

  • Performance of Contract: To fulfill digital file delivery, transmit access keys, and provide ongoing product updates.
  • Legal Compliance: To satisfy statutory bookkeeping, tax filing (EU VAT, US State Tax), and anti-fraud mandates.
  • Legitimate Interests: To secure our digital infrastructure against distributed denial-of-service (DDoS) attacks and unauthorized bulk scraping.

4 Zero Sale of Personal Data (CCPA / CPRA Notice)

Pledge: We do not sell, rent, or trade your personal information to third parties, data brokers, or commercial advertising networks for monetary or other valuable consideration.

5 Your Statutory Privacy Rights

Regardless of your geographic location, you possess the right to:

  • Access: Request a comprehensive export of all personal information we hold concerning you.
  • Rectification: Request correction of incomplete or outdated personal records.
  • Erasure ("Right to Be Forgotten"): Request immediate permanent deletion of your customer record, subject to mandatory tax retention periods.
  • Data Portability: Receive your data in a structured, machine-readable format.

To exercise any of these rights, email our Data Protection Office at: nailafatinchowdhury@gmail.com.

6 Cookies & Storage Technologies

Our website uses minimal, privacy-preserving session cookies and local storage items solely to remember your UI category preferences and maintain cart contents across browser sessions. We do not deploy invasive cross-site tracking cookies.

7 Security Standards

All communications between your device and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / 256-bit encryption). Digital delivery endpoints utilize time-limited signed cryptographic tokens to prevent unauthorized interception.