Privacy Policy

This Privacy Policy explains what personal data we collect when you visit reselflabs.com or buy The Ferritin Fix, how we use it, and the rights you have over it. We are committed to protecting your privacy and handling your data in line with the EU General Data Protection Regulation (GDPR) and applicable law.

Who is responsible for your data

The data controller is:

• Oleksii Panchenko, Individual Entrepreneur (FOP), Kharkiv, Ukraine
• Email: support@reselflabs.com

What we collect

• Purchase details — your name, email address and order information, so we can deliver the product and provide support.
• Payment information — your card and billing details are collected and processed directly by our payment provider, Paddle. We never see or store your full card number.
• Email delivery data — your email address is shared with our email provider so we can send your download link and receipt.
• Basic technical data — standard server logs (such as IP address and browser type) needed to run and secure the website.

How we use your data

• To process your purchase and deliver the product (legal basis: performance of a contract).
• To send your download link, receipt and essential service messages (performance of a contract).
• To respond to support requests and handle refunds or complaints (legitimate interests / contract).
• To keep records required by law, such as for tax and accounting (legal obligation).
• To operate and protect the website against fraud and abuse (legitimate interests).

We do not sell your personal data, and we do not send marketing emails without your consent.

Who we share it with

We share data only with the service providers that make the purchase work:

• Paddle.com Market Ltd (Paddle) — our Merchant of Record, which processes payments, billing and taxes.
• Resend — our transactional email provider, which delivers your download link and receipt.
• Umami and Microsoft Clarity — our analytics providers, which receive aggregate, non-identifying usage data (see "Analytics" below).
• Our hosting provider — which stores the website and order records on secure servers.

Each provider only receives the data needed for its task and is required to protect it.

Analytics

To understand how visitors find and use the site — and to improve it — we use two privacy-respecting tools:

• Umami — cookie-free website analytics that measures aggregate traffic (such as page views, referring sites and country) without tracking you across sites or building personal profiles.
• Microsoft Clarity — provides aggregated heatmaps and anonymised recordings of how pages are used (such as scrolling and clicks). Clarity may set cookies and automatically masks any text you type, so sensitive input is not captured.

This information is used only in aggregate to improve the website — never to identify you personally and never for advertising.

Cookies

The site uses the cookies needed to function and to run the checkout, plus analytics cookies set by Microsoft Clarity (described above). Paddle may set cookies as part of the secure checkout process. We do not use advertising-tracking cookies.

International transfers

Some of our service providers are located outside your country — including in the United Kingdom (Paddle) and the United States (Resend). Where personal data is transferred outside the European Economic Area, we rely on legally recognised safeguards — such as the European Commission's adequacy decisions (for example for the United Kingdom) and Standard Contractual Clauses, or equivalent mechanisms such as the EU–US Data Privacy Framework — so that your data remains protected to GDPR standards.

How long we keep it

We keep order and contact records for as long as needed to provide support and to meet legal, tax and accounting obligations, after which they are deleted or anonymised.

Your rights

Under the GDPR and applicable law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where there is no overriding legal reason to keep it;
• restrict or object to certain processing;
• receive a copy of your data in a portable format; and
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@reselflabs.com.

Children

The product and this website are intended for adults and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was last changed, and any significant changes will be reflected here.

Contact

Questions about your privacy? Email support@reselflabs.com.