Privacy Policy

Last updated: February 2026

This privacy policy describes how ZoneDeux (zonedeux.cc) collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with GDPR and applicable data protection regulations.

Data Controller

ZoneDeux is the data controller for the personal data described in this policy. For questions about the processing of personal data, contact us at kontakt@zonedeux.cc.

What Data We Collect

We collect the following personal data:

  • Name — when you create an account
  • Email address — when creating an account, making a purchase, or subscribing to our newsletter
  • Payment information — processed directly by Stripe, we do not store card numbers
  • IP address — for security and fraud prevention
  • Cookies — for authentication and session management

Purpose of Processing

  • Account management — creating and maintaining your user account
  • Purchase handling — delivering digital products and sending receipts
  • Newsletter — sending relevant training content (only with your consent)
  • Service improvement — understanding how the website is used to make it better

Third-Party Processors

We use the following service providers that process personal data on our behalf:

  • Stripe — Payment processing. Stripe handles all payment information directly and is PCI DSS certified.
  • Resend — Email delivery. Used to send confirmations, receipts, and newsletters.
  • Google — OAuth login. Only used if you choose to sign in with your Google account.
  • Neon — Database hosting. Stores account information and purchase history securely.

Data Retention

Account information is stored as long as you have an active account. Purchase data is retained in accordance with Norwegian accounting regulations (5 years). You can request deletion of your account and associated data at any time by contacting us.

Your Rights

Under GDPR, you have the following rights:

  • Right of access — request information about what data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent — withdraw your consent to processing at any time

How to Exercise Your Rights

To exercise your rights, send an email to kontakt@zonedeux.cc. We will respond within 30 days. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we are not processing your personal data correctly.

Cookies

We only use essential cookies for authentication and session management. These are required for login and purchase functionality to work. We do not use analytics or tracking tools that place cookies.