Privacy Policy

Last updated: July 11, 2026

This Privacy Policy explains how we process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Portuguese data-protection law.

1. Data Controller

Viktoriia Pavlova
Rua de Goa 1, 4700 Braga, Portugal
Email: hello@viktoriiapavlova.com

2. Data we collect and legal bases

Waitlist / newsletter email address. When you sign up, we collect your email and your explicit consent to marketing communications. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time.
Free download requests. To send a printable scripture poster, we collect your email address and marketing consent. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (delivery of the service you requested).
Extension & app data. Favorites and preferences are stored locally on your device via your browser's or OS's storage APIs. This data is not transmitted to us.
Server logs. Our hosting provider may temporarily process technical data (IP address, request time, user agent) to secure and operate the service. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability).

3. Cookies & local storage

We use only strictly necessary storage (e.g. remembering your cookie consent choice and, on the extensions, your saved favorites). We do not use advertising cookies, third-party analytics, or cross-site tracking. Because we set no non-essential cookies, no prior consent under the EU ePrivacy Directive is required for these functions.

4. Recipients & processors

We rely on the following processors, bound by data-processing agreements:

Lovable (hosting & managed backend, EU/US)
Cloudflare (edge network & delivery)

Where personal data is transferred outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

5. Retention

Newsletter and download-request emails are kept until you withdraw consent or request deletion. Server logs are retained for a maximum of 30 days for security purposes.

6. Your rights under the GDPR

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time (Art. 7(3)) without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@viktoriiapavlova.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD, www.cnpd.pt) or the supervisory authority of your EU country of residence.

7. Children

Our services are family-friendly and may be used by children under parental supervision. We do not knowingly collect personal data from children under 16 without parental consent.

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the "Last updated" date.