Privacy Notice — zcvisuals

1. Who we are

This Privacy Notice describes how zcvisuals ("we", "us", "our"), the data controller, processes your personal data when you visit our website, contact us, or purchase our video production services.

2. Data we collect

Account data: name, email address, login credentials.
Order data: products purchased, order history, fulfillment status.
Communications: messages you send via our contact form or email.
Project content: briefs, scripts, footage, and other content you submit for editing.
Technical data: IP address, device identifiers, browser type, usage telemetry.

Payment information (card details, billing address) is collected and processed directly by our payment provider, Paddle, and is not stored on our servers.

3. Why we use your data

To create and manage your account (legal basis: contract performance).
To deliver the video production services you ordered (contract performance).
To provide customer support and respond to inquiries (legitimate interests).
To prevent fraud and secure our service (legitimate interests, legal obligation).
To comply with tax, accounting, and legal obligations (legal obligation).
To improve our service and website (legitimate interests).

4. Who we share data with

Paddle.com Market Limited — our Merchant of Record for all sales. Paddle handles payments, billing, tax compliance, invoicing, subscription management, and refunds. See Paddle's Privacy Policy.
Hosting and infrastructure providers for website hosting, database storage, and authentication.
Email service providers for transactional notifications (e.g. balance payment links, order confirmations).
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

5. Data retention

We keep account and order data for as long as your account is active and for a reasonable period afterwards to comply with tax and accounting obligations (typically 7 years). Project content is deleted on request or within 12 months of project delivery, whichever comes first. Support communications are retained for up to 3 years.

6. Your rights

Subject to applicable law, you have the right to: access your personal data, correct inaccuracies, request deletion, restrict or object to processing, request portability, and withdraw consent at any time. To exercise these rights, email zevic1234@gmail.com. We will respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local supervisory authority.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and secure authentication, to protect your data against unauthorised access, loss, or disclosure.

8. International transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use essential cookies to keep you signed in and to operate the website. We do not use advertising or tracking cookies. You can control cookies through your browser settings.

10. Contact

For privacy questions or to exercise your rights, contact us at zevic1234@gmail.com.