Privacy at Francis Rise

1. Data controller

Francis Rise (PMV), Francisca Zemke, CVR 45050491, Nørrebjerg Runddel 198B, 5220 Odense SØ, Denmark. Email: kontakt@francisrise.com.

This notice describes processing when you visit francisrise.com, contact us or purchase digital downloads. It applies to the functions actually used.

2. Website, hosting and security

Hostinger provides hosting, email infrastructure, a CDN and backups; LiteSpeed supports caching. When pages are requested, the data processed includes in particular the IP address, time, requested resources, browser and device information, and technical error data.

The purpose is to provide, stabilise and secure the service. The legal basis is Article 6(1)(f) GDPR; the legitimate interests are a functioning service and protection against misuse. Backups may contain website and order data. Locally hosted fonts do not require a connection to Google Fonts.

3. Orders, delivery and contact

For a purchase, we process your name, email address, billing address and country, selected products, language, currency, amounts, order status and payment references. Information marked as required is needed to process the order, payment, delivery and necessary records. Without it, the purchase cannot be processed. An optional phone number or order note is not required.

We also store the wording and time of your declaration requesting immediate delivery, the applicable text version and the separate international order context. Download permissions and requests may be logged with an order reference, time and IP address to deliver files and investigate unauthorised use.

The contract and delivery are based on Article 6(1)(b) GDPR. Necessary accounting and record-keeping obligations are based on point (c); necessary defence of legal claims and prevention of misuse are based on point (f). We process support enquiries under point (b), and other enquiries under point (f). If you contact us by email, we also process the content of your message.

Guest orders are possible; public customer registration is not currently provided. The website is intended for adult purchasers. Please do not include children’s personal data in order notes.

4. Payments through Stripe

We use Stripe for payments. Stripe processes the payment details entered in the payment form and the contact, transaction, device and connection data necessary for payment and fraud prevention. Francis Rise receives the payment status, references and, where applicable, truncated payment information; full card numbers and security codes are not stored as order data by Francis Rise.

Depending on the activity, Stripe processes data as a processor or as an independent controller, particularly for its own legal obligations and fraud prevention. If you select a wallet or Link, the selected service’s notices also apply. Information about Stripe, recipients, retention and international transfers: https://stripe.com/privacy and https://stripe.com/legal/privacy-center.

The legal bases for our transmission of data necessary for payment are Article 6(1)(b) GDPR and, where applicable, points (c) and (f) for legal obligations and payment security. Automated checks by the payment service may result in a payment being declined. If you encounter a problem, you can contact us for clarification.

5. Cookies and browser storage

The previously selected shop language is stored in the session cookie fr_shop_language. It contains a language code, not a determination of your country or currency. WooCommerce uses technically necessary cart and session functions, such as woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_*. The two cart cookies usually last for the session; the WooCommerce session cookie normally lasts for up to two days.

WordPress may use technical cookies when you log in and session storage to test emoji support. Stripe uses its own technologies for payment processing and fraud prevention, such as __stripe_mid and __stripe_sid. The specific technologies depend on the payment method used; further details are available in the Stripe Privacy Center.

Storage necessary for a function you have expressly requested is used to provide that function. Non-essential analytics or marketing technologies require prior consent where legally required. Francis Rise does not currently run its own marketing tracking such as Google Analytics or Pinterest Tag. The payment integration is distinct from this.

6. Recipients and international transfers

Where necessary, recipients include Hostinger and its subprocessors, Stripe, the selected payment services, and competent authorities or advisers engaged to fulfil legal obligations. WooCommerce is the shop software operated on our website; this does not automatically mean that all order data is transferred to Automattic.

Service providers may process data outside the European Economic Area. The legal requirements must be met, in particular applicable adequacy decisions or appropriate safeguards such as EU standard contractual clauses. Details of Hostinger’s processing: https://www.hostinger.com/legal/dpa. You can request information about the safeguards used for your data and copies of them from kontakt@francisrise.com .

7. Retention

We retain order and accounting records to meet applicable retention obligations; Danish accounting records are generally kept for five years from the end of the relevant financial year. Specific tax-related retention obligations may require longer periods.

Other data is retained only for as long as its purpose requires: enquiries until resolved and, where applicable, for existing claims; download permissions for the delivery owed; security and access logs for investigating technical errors and specific cases of misuse. The data must then be deleted or anonymised unless an obligation or unresolved dispute justifies further retention. Backups are overwritten according to the applicable backup cycle.

8. Your rights and contact

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent to data processing at any time with effect for the future; the lawfulness of processing before withdrawal is unaffected.

To exercise these rights, contact kontakt@francisrise.com. You can complain to a data protection supervisory authority, in particular the Danish Datatilsynet (https://www.datatilsynet.dk/) or the competent authority where you normally live. Consent to advertising is not a condition of purchase.