Privacy Policy

1. Data Controller

Blindspot Africa operates this website and is responsible for the processing of your personal data. Contact: contact@blindspotafrica.com

2. Data We Collect

We collect the following personal data when you register or purchase:

• Email address (required for account creation)
• First and last name (optional, for personalization)
• Payment information (processed by Stripe — we do not store card details)
• Selected module or region (for access control)
• Login timestamps and session data

We do not collect sensitive personal data (race, religion, health, political opinions).

3. Legal Basis for Processing

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR) — to provide the service you purchased
• Legitimate interests (Art. 6(1)(f) GDPR) — to improve the platform and prevent fraud
• Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting requirements

4. Third-Party Services

We use the following third-party services that may process your data:

• Memberstack (memberstack.com) — authentication and membership management. Data stored in the USA under Standard Contractual Clauses.
• Stripe (stripe.com) — payment processing. Stripe is certified PCI-DSS Level 1. Data stored in the USA/EU.
• Netlify (netlify.com) — website hosting. Servers primarily in the USA under Standard Contractual Clauses.
• Google Fonts — font delivery via CDN. Google may collect IP addresses.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the service. After account deletion, we retain transaction records for 10 years as required by German tax law. All other data is deleted within 30 days of account deletion.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Correct inaccurate data (Art. 16)
• Delete your data ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with a supervisory authority

To exercise your rights, contact: contact@blindspotafrica.com

You may also contact the German data protection authority: bfdi.bund.de

7. Cookies & Tracking

This website uses essential cookies for authentication (Memberstack session cookies). We do not use tracking cookies, advertising cookies, or analytics tools that collect personal data without consent.

Essential cookies cannot be disabled as they are required for the service to function.

8. Data Security

We implement appropriate technical measures to protect your data, including HTTPS encryption, secure authentication via Memberstack, and PCI-compliant payment processing via Stripe. We do not store payment card details on our servers.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.