Privacy Policy | Blizarra

1. Data Controller Details

The data controller responsible for the processing of your personal data on this storefront is:

Blizarra Ltd — a company registered in England & Wales, company number 17274848.

Registered office: Office 19361, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA.

This is a UK company selling downloadable digital products (PDF e-books) to a global audience.

2. Data We Collect and How We Use It

We adhere strictly to the principle of data minimization. We only collect information essential to deliver and support your digital purchases:

Email Address: Captured during Stripe Checkout. Used to verify your purchase, generate secure download tokens, enable the My Library purchase lookup, and send product update announcements.
Order & Transaction Records: Purchase timestamp, amount paid, currency, item purchased, and Stripe session identifiers for accounting and VAT compliance.
Support Communications: Name and email provided when you submit our contact form to resolve customer service queries.

3. Third-Party Data Processors

To deliver an enterprise-grade, secure purchasing experience, we partner with trusted global infrastructure providers acting as sub-processors:

Stripe (Payments)

Processes all credit/debit card transactions under PCI-DSS Level 1 compliance. Blizarra Ltd never sees or stores card numbers.

Supabase (Database & Storage)

Houses encrypted transactional records, book metadata, and short-lived signed PDF storage download URLs with strict Row-Level Security (RLS).

4. Lawful Basis for Processing

Under UK GDPR Article 6, we process your personal data based on:

Contract Performance (Art. 6(1)(b)): Necessary to generate and deliver your digital purchase and maintain access via the Library.
Legal Obligation (Art. 6(1)(c)): Maintaining accurate tax, VAT, and company accounting ledgers in the UK.
Legitimate Interests (Art. 6(1)(f)): Preventing fraudulent payment attempts and defending against unauthorized content scraping.

5. Your Data Protection Rights

Under UK GDPR, you have the right to request access to your personal data, request correction of inaccurate records, or request erasure of your details from our active mailing lists. To exercise any of these rights, contact our Data Privacy Officer directly at info@blizarra.co.