Privacy Policy
Last updated: September 29, 2026
This Privacy Policy explains how Wiesmas ("we", "us", "our") collects, uses, shares, and protects your personal data when you visit wiesmas.com (the "Site") or purchase a Product from us.
1. Who is responsible for your data
Wiesmas acts as the data controller for the personal data described in this policy. You can contact us using the details on our Contact page.
2. What data we collect
| Data | When it's collected | Why we need it |
|---|---|---|
| Name and email address | At checkout | To deliver your download link, send order confirmations, and provide support |
| Order details (product, price, date, order ID) | At checkout | To fulfil your order, handle refunds, and keep required business records |
| Payment details (card number, billing address, etc.) | At checkout | Collected and processed entirely by Paddle.com — we never see or store your full payment details |
| Basic technical data (IP address, browser type, device type, pages viewed) | While browsing the Site | To keep the Site secure, understand aggregate usage, and fix bugs |
| Marketing preference and, if given, email for updates | Only if you opt in | To send occasional news about new books, only with your consent |
3. How we use your data
- to process your order and deliver the Product you purchased;
- to send transactional emails (order confirmation, download link, receipts, refund updates);
- to respond to support requests you send us;
- to keep records required for accounting, tax, and legal compliance;
- to detect and prevent fraud or abuse in connection with orders;
- to send marketing emails about new Products, but only if you have opted in, and you can unsubscribe at any time; and
- to maintain and improve the Site (aggregate, non-identifying analysis of technical data).
4. Legal basis for processing (EEA/UK visitors)
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to process and deliver your order), legitimate interests (to keep the Site secure and prevent fraud), legal obligation (to keep tax and accounting records), and consent (for optional marketing emails, which you can withdraw at any time).
5. Who we share your data with
We do not sell your personal data. We share the minimum data necessary with the following categories of service providers, each acting under their own privacy obligations:
- Paddle.com — our Merchant of Record and payment processor. Paddle collects and processes your payment details, billing address, and order information directly, as data controller for that data under its own Privacy Policy, in order to process your payment, issue receipts, and handle applicable taxes and refunds.
- Email delivery services — used to send order confirmations, download links, and (if you opted in) marketing emails.
- Hosting and content-delivery providers — used to host the Site and deliver download files reliably.
- Google Analytics — we use Google Analytics to understand aggregate Site usage and improve the Site. Google Analytics may set cookies on your device; see Google's privacy policy for how Google processes this data.
We may also disclose data where required by law, to protect our legal rights, or in connection with fraud prevention.
6. International data transfers
Depending on where our service providers (such as Paddle, hosting, and email delivery) are located, your data may be processed in countries other than your own, including the United States and countries within the European Economic Area. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect data transferred internationally.
7. How long we keep your data
We retain order and transaction records for as long as required by applicable tax and accounting laws (typically several years), and support correspondence for as long as reasonably necessary to resolve your query and handle any follow-up. If you opted into marketing emails, we keep your email address until you unsubscribe or ask us to delete it.
8. Cookies and similar technologies
We use Google Analytics to collect aggregate, non-identifying data about how visitors use the Site (pages viewed, general location, device type). Google Analytics sets first-party cookies to do this, but only if you accept them in the cookie banner; if you decline, Google Analytics is not loaded. We do not use advertising or cross-site tracking cookies, and all typefaces are served from our own hosting rather than a third party. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. Processing payment via Paddle's checkout may involve its own cookies or similar technologies, governed by Paddle's privacy policy.
9. Your rights
Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent for marketing at any time. To exercise any of these rights, contact us via our Contact page. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.
10. Children's privacy
Our Products and Site are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Data security
We take reasonable technical and organisational measures to protect your data, and rely on Paddle's PCI-compliant infrastructure for all payment card data, which we never store ourselves. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will, where practical, be highlighted on the Site.
13. Contact
For any privacy-related question or request, please use the details on our Contact page.