Privacy Policy

Last updated: Oct 26, 2026

This policy explains what personal data Habits Over Donuts collects, why, and what rights you have. "Darcie" and "Habits Over Donuts" are brand names.

Who is responsible for your data

Habits Over Donuts is run by [Your full name], a private individual based in Slovenia, EU. If Habits Over Donuts is later registered as a business, this policy will be updated to name it.

This person is the data controller for the personal data described here. For any privacy question or request, email hello@habitsoverdonuts.com.

What data we collect

We collect only what we need to send you free guides, emails and products you buy.

• When you sign up for a free guide or emails: your email address, the date and time you signed up and confirmed, and whether you opened or clicked our emails.

• When you buy a product: your name, email address, country, order details and the information needed for tax and invoicing. Card or PayPal details are handled by the payment provider. We never see or store your full card number.

• When you email us: your email address and whatever you choose to write.

• Technical data: our email and store providers may record your IP address, browser and device type to deliver their service and prevent abuse.

We don't ask for health information. If you choose to share personal details in an email to us, we use them only to reply.

Why we use it and on what legal basis

To send the free guide you asked for and our emails, we use your email address, your signup details and your email activity. Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time.

To deliver products you buy and to handle support or refunds, we use your name, email and order details. Legal basis: performing our contract with you (GDPR Art. 6(1)(b)).

To keep invoices and accounting records, we use order and payment records. Legal basis: legal obligation (GDPR Art. 6(1)(c)).

To keep our services secure and working, we use technical data. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)).

Service providers and international transfers (replaces the second table)

We use these providers to run Habits Over Donuts. They process your data on our behalf and only for these purposes.

Kit (kit.com): email list, signup pages and sending our emails. Based in the United States.

Namecheap Private Email: hosting our mailbox (darcie@ and hello@habitsoverdonuts.com). United States and other locations.

Payhip (payhip.com): online store, checkout, product delivery and EU/UK VAT, once products are sold. Based in the United Kingdom.

Stripe and PayPal: processing payments, once products are sold. EU, United States and other locations.

The United Kingdom has an EU adequacy decision. For transfers to the United States and other countries outside the EU, the providers rely on safeguards recognized under GDPR, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework where they are certified. You can ask us for more information about these safeguards.

Each provider also has its own privacy policy, which applies to the data it processes as an independent controller (for example, Stripe and PayPal for payment and fraud checks).

How long we keep it

• Email list data: until you unsubscribe or ask us to delete it. After you unsubscribe, we may keep your address on a suppression list so we don't email you again by mistake.

• Order and invoice records: for as long as Slovenian tax and accounting law requires. [Check the exact period with the accountant.]

• Emails you send us: as long as needed to answer you, then deleted within a reasonable time.

Your rights

Under GDPR you have the right to:

• access the personal data we hold about you

• correct data that is wrong or incomplete

• ask us to delete your data

• restrict or object to how we use it

• receive your data in a portable format

• withdraw your consent at any time, without affecting what we did before you withdrew it

To use any of these rights, email hello@habitsoverdonuts.com. We'll answer within one month.

You can also complain to a data protection authority. In Slovenia, that's the Information Commissioner (Informacijski pooblaščenec), ip-rs.si. You can also contact the authority in the EU country where you live.

Cookies

Our signup pages and store are hosted by Kit and Payhip. They use cookies needed for the pages and checkout to work, and may use others as described in their own cookie notices. We don't add advertising or tracking cookies of our own.

Children

Our guides and emails are for adults. We don't knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we'll delete it.

Changes to this policy

We may update this policy when our services or the law change. The date at the top always shows the latest version.

Contact

[Your full name], Slovenia, EU Email: hello@habitsoverdonuts.com