Privacy Policy
This policy explains what personal data BADAR (“we”, “us”) collects when you use this website, buy products or book services, why we use it, who we share it with and the rights you have. We keep the data we collect to the minimum needed to run the store.
1. Who is responsible
BADAR is the controller of your personal data. Contact: business@badar.com. Business details are listed in our Terms of Service.
2. What we collect
- Account data: your name and email address. If you sign in with Google we receive your name, email address and profile picture from Google. Passwords are handled and securely hashed by Google Firebase Authentication — we never see them.
- Order data: the products or services you buy, prices, order numbers, payment status and your acceptance of our terms at checkout (including the date, IP address and browser used, which we keep as proof of consent).
- Payment data: payments are processed by Stripe or Lemon Squeezy. They collect your card or wallet details and billing address directly. We only receive limited information such as payment status and receipt details — never your full card number.
- Messages: what you send through the contact form or by email (name, email, the plan and services you’re interested in, budget and your message).
- Project materials: footage, images, brand assets and other files you share with us for service work.
- Newsletter: your email address if you subscribe.
- Technical data: IP address, browser, device and log information processed by our hosting provider to deliver and secure the site; and, only if you accept analytics cookies, usage statistics from Google Analytics.
3. How we use your data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, process orders, deliver downloads and services, send receipts and order emails | Performance of a contract |
| Reply to messages and provide support | Performance of a contract / legitimate interests |
| Prevent fraud and abuse, keep the site secure | Legitimate interests |
| Keep order and tax records | Legal obligation |
| Send the newsletter | Consent — unsubscribe at any time |
| Analytics to understand how the site is used | Consent (cookie banner) |
We don’t sell your personal data, and we don’t use it for automated decisions that have legal effects on you.
4. Who we share it with
- Google Firebase / Google Cloud — hosting, sign-in, database, file storage and server functions.
- Stripe — card and wallet payments.
- Lemon Squeezy — payments and tax handling as merchant of record for orders paid through it (Lemon Squeezy also processes your data under its own privacy policy).
- Google Analytics — only if you accept analytics cookies.
- Professional advisers and authorities when required by law, or to protect our rights.
These providers only process your data as needed to provide their services and are bound by data-protection terms.
5. International transfers
Our providers may process data in the United States and other countries. Where data leaves the EEA or UK, they rely on safeguards such as the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Account data: while your account is active; deleted on request.
- Order and payment records: as long as tax and accounting laws require.
- Messages: up to 24 months after the conversation ends.
- Project materials: up to 90 days after the project is delivered, unless you ask us to keep them longer.
- Newsletter: until you unsubscribe.
- Analytics data: according to the retention setting in Google Analytics (14 months).
7. Security
The site is served over HTTPS. Access to data is restricted by strict database and storage security rules, admin access is limited to the store owner, and paid files are only delivered through short-lived personal links. No system is perfectly secure, but we take reasonable measures to protect your data.
8. Your rights
Depending on where you live, you can ask us to access, correct, delete or export your personal data, restrict or object to processing, and withdraw consent at any time. Email business@badar.com and we’ll respond within one month. You can also complain to your local data-protection authority.
California residents: you have the right to know, delete and correct your personal information and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising.
9. Cookies and local storage
| Name / type | Purpose | Kind |
|---|---|---|
| Firebase Authentication (browser storage) | Keeps you signed in | Essential |
badar:cart:v1 (local storage) | Remembers your cart | Essential |
badar:consent (local storage) | Remembers your cookie choice | Essential |
_ga, _ga_* (cookies) | Google Analytics usage statistics | Analytics — only after you click “Accept” |
You can change your choice at any time:
10. Children
The site is not intended for children under 16, and we don’t knowingly collect their data.
11. Changes
We may update this policy. The latest version is always on this page with its effective date.
12. Contact
Privacy questions or requests: business@badar.com.