Privacy Policy

1. Who We Are

Theo Riven (“we”, “us”, “our”) operates the website theoriven.com and delivers digital educational publications. Our contact address for privacy matters is orders@integrana.co.

2. Information We Collect

We collect only the information necessary to process your purchase and deliver your product:

• Account and purchase data — name, email address, billing country, and payment transaction reference (we never store raw card data; payments are processed by Stripe).
• Device and usage data — IP address, browser type, pages visited, and session duration, collected via our own analytics infrastructure for operational purposes.
• Communications — any email you send us, retained solely to resolve your query.

We do not collect sensitive personal data, and we do not sell, rent, or trade your personal information to any third party for marketing purposes.

3. How We Use Your Information

• To process your order and deliver your digital purchase by email.
• To send transactional emails (order confirmation, download link, support replies).
• To detect and prevent fraud or abuse.
• To comply with applicable legal obligations.
• To improve our website and publications based on aggregated, anonymised usage data.

We will only contact you for marketing purposes if you have separately opted in. You may withdraw that consent at any time.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal data are:

• Contract — processing your order and delivering your purchase.
• Legitimate interests — fraud prevention, site security, and aggregate analytics.
• Legal obligation — tax record-keeping and regulatory compliance.
• Consent — optional marketing communications.

5. Cookies

We use strictly necessary cookies (session management, cart state) and, with your consent, analytics cookies to understand aggregate site usage. No advertising or tracking cookies are placed without consent. You may withdraw consent at any time via the cookie settings link in our site footer.

6. Service Providers

We share your data only with trusted sub-processors who help us operate the service:

• Stripe — payment processing (governed by Stripe's own privacy policy).
• Resend — transactional email delivery.
• Vercel — website hosting and edge delivery.

Each sub-processor is contractually bound to handle your data only as instructed by us and in compliance with applicable data protection law.

7. Data Retention

Purchase records (name, email, transaction reference) are retained for seven years to comply with tax and accounting obligations. Usage logs are deleted or anonymised after 12 months. You may request deletion of your personal data at any time; we will comply unless retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at orders@integrana.co. We will respond within 30 days.

9. Security

We implement industry-standard technical and organisational measures to protect your personal data — including TLS encryption in transit and access controls at rest. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take all reasonable precautions.

10. Children

Our publications are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after a change constitutes acceptance of the updated policy.

12. Contact

Privacy questions, data requests, or complaints may be sent to orders@integrana.co. We aim to respond within five business days.