Privacy Policy

1. Data Controller

The data controller for personal data is the operator of the SocFlare website (hereinafter "we" or "SocFlare"), available at socflare.com. If you have any questions, contact us at support@socflare.com.

2. What Data We Process

Data	Why we collect it	How long
Email address	Order confirmation, communication	3 years from order
Username (Instagram / TikTok)	Launching the advertising campaign	3 years from order
Payment details	Payment processing (Stripe, Inc.)	Not stored by us — processed by Stripe
IP address (anonymized)	Fraud protection, analytics	90 days
Website behavior (anonymous ID)	Improving user experience	90 days

3. Legal Basis for Processing

We process personal data based on:

• Performance of a contract (Art. 6(1)(b) GDPR) — order processing and service delivery
• Legitimate interest (Art. 6(1)(f) GDPR) — fraud protection, analytics
• Consent (Art. 6(1)(a) GDPR) — marketing communications, if you request them

4. Recipients of Data

We share your data only with the following third parties:

• Stripe, Inc. — payment processing (based in the USA, Privacy Shield certification / EU standard contractual clauses)
• Google LLC — email infrastructure provider (Gmail)
• Smartsupp — live chat support

We do not sell your data or provide it to third parties for marketing purposes.

5. Cookies

Our website uses only technical cookies necessary for the site to function. We do not use third-party tracking cookies or cookies for targeted advertising.

6. Your Rights

You have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Object to processing or request restriction of processing
• Data portability
• Lodge a complaint with your local data protection supervisory authority (for EU residents, a full list is available at edpb.europa.eu; for the Czech Republic specifically, the Office for Personal Data Protection (uoou.cz))

Send requests to support@socflare.com. We will respond within 30 days.

7. Security

The website uses an encrypted HTTPS connection. Payments are processed by Stripe, which is certified under the PCI DSS Level 1 standard. We never store payment card numbers.

8. Changes to This Policy

We will inform you of any material changes by email or via a notice on the website. The current version is always available on this page.