This Privacy Policy explains how personal data is collected, used, stored and shared when you visit or purchase from recoveragain.com and use The Recovery System.
The data controller is:
Daniele Marra
Italy
Email: [PRIVACY EMAIL]
Address: [BUSINESS / CONTACT ADDRESS]
We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”).
1. Personal Data We Collect
Depending on how you use the website, we may collect:
- name and contact details;
- email address;
- billing and transaction information;
- information related to your purchase;
- technical information such as IP address, browser, device and security logs;
- information necessary to deliver your digital purchase;
- communications you send to us;
- cookie and consent preferences.
We do not intentionally collect special-category personal data through the website.
2. How We Use Personal Data
We may process personal data to:
- process and confirm purchases;
- deliver The Recovery System;
- send transactional purchase and access emails;
- provide customer support;
- prevent fraud and abuse;
- operate, secure and maintain the website;
- comply with accounting, tax and legal obligations;
- establish, exercise or defend legal claims;
- measure and improve the website where permitted by applicable law.
Under the GDPR, processing may be based on performance of a contract, compliance with legal obligations, legitimate interests, or consent, depending on the specific purpose.
3. Payments — Stripe
Payments are processed through Stripe.
When you complete a purchase, payment and transaction data may be transmitted directly to Stripe. We do not receive or store your full payment-card details.
Stripe may process personal data for payment processing, fraud prevention, regulatory compliance and operation of its services. Depending on the processing activity, Stripe may act as a processor on our behalf or as an independent controller.
Stripe's own privacy terms apply to the information it processes.
4. Digital Delivery and Backend — Supabase
We use Supabase to provide backend functionality and private storage for digital product files.
After a valid purchase, our systems may use purchase information to verify your Stripe Checkout Session and generate a temporary signed download link for the purchased files.
The product files are stored in private storage and are not intentionally made publicly accessible.
5. Transactional Emails — Resend
We use Resend to send transactional emails, including purchase confirmation and product-access messages.
For this purpose, we may provide Resend with information such as:
- your email address;
- email content;
- purchase-related identifiers necessary to provide access;
- delivery and technical metadata.
6. Hosting, DNS and Security Infrastructure
The website is built and operated using third-party infrastructure and development services, including Lovable.
We also use Cloudflare for domain, DNS and security-related infrastructure. Cloudflare may process technical information such as IP addresses and network/security data in connection with providing these services.
7. Legal Bases for Processing
Where the GDPR applies, we generally rely on the following legal bases:
Performance of a contract — to process your order, verify payment, provide access to the purchased product and send transactional communications.
Legal obligation — where processing is necessary for tax, accounting, regulatory or other legal obligations.
Legitimate interests — for security, fraud prevention, maintenance, troubleshooting and protection of our legal rights, where those interests are not overridden by your fundamental rights and freedoms.
Consent — where required for non-essential cookies, analytics, advertising or similar tracking technologies.
8. Cookies and Similar Technologies
The website may use cookies or similar technologies.
Some technologies are strictly necessary for the website, checkout, security or consent management to function.
Other technologies, including analytics or advertising technologies, will only be used where permitted by applicable law and, where required, after obtaining your consent.
More information is available in our Cookie Policy.
9. Analytics and Advertising Services
At the date of this Privacy Policy, analytics and advertising services may not yet be active.
If services such as:
- Google Analytics 4;
- Meta Pixel;
- Microsoft Clarity;
are enabled, this Privacy Policy and the Cookie Policy will be updated accordingly and the relevant technologies will be subject to the appropriate consent controls where required.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, security and contractual requirements.
Different categories of data may have different retention periods.
For example, transaction and accounting information may be retained for the period required under applicable tax and accounting laws.
11. International Data Transfers
Some service providers may process data outside the European Economic Area.
Where required, appropriate safeguards may be used for international transfers, such as adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.
Information about the safeguards used by individual providers may also be available in their respective privacy policies and data processing agreements.
12. Data Sharing
We do not sell personal data.
Personal data may be shared only where reasonably necessary with service providers involved in operating the website and fulfilling purchases, including payment processors, infrastructure providers, storage providers and transactional email providers.
We may also disclose personal data where required by law, court order or competent authority, or where necessary to protect our legal rights.
13. Your Data Protection Rights
Where the GDPR applies, you may have rights including:
- the right to receive information about how your data is used;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restriction of processing;
- the right to data portability;
- the right to object to certain processing;
- rights relating to certain automated decision-making;
- the right to withdraw consent where processing is based on consent;
- the right to lodge a complaint with a competent supervisory authority.
These rights are subject to the conditions and limitations provided by applicable law.
To exercise your rights, contact:
[PRIVACY EMAIL]
14. Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure or misuse.
However, no internet-based service can guarantee absolute security.
15. Children
The Recovery System is intended for adults.
We do not knowingly collect personal data from children through the website.
If you believe that a child has provided personal data to us without appropriate authorization, please contact us so that we can assess and, where appropriate, delete the information.
16. Third-Party Websites and Services
The website may contain links to third-party websites or services.
We are not responsible for the privacy practices of third parties. You should review the privacy information provided by those services before providing them with personal data.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the website, our services, legal requirements or third-party providers.
The updated version will be published on this page with a revised “Last updated” date.
18. Contact
For privacy-related questions or requests:
Daniele Marra
Italy
Email: [PRIVACY EMAIL]
Address: [BUSINESS / CONTACT ADDRESS]