Privacy Policy

RescueKits, operated by a sole proprietorship registered in the Netherlands. Contact: support@rescuekits.store.

Purchase data (email, country, amount, products bought): to deliver your purchase and keep required accounting records. Legal basis: performance of contract; legal obligation (tax).

Payment data: handled entirely by Stripe — we never see or store card numbers.

Delivery and access logs (access-page visits, downloads, with IP address and browser user-agent): to deliver files securely, prevent abuse, and document delivery in the event of a payment dispute. Legal basis: performance of contract; legitimate interest (fraud prevention and dispute defense).

Email: we send the transactional access email for your purchase. No marketing emails without separate consent.

Analytics: basic, aggregated usage analytics (Google Analytics 4) to understand site performance.

Stripe (payments & tax calculation), Supabase (database & file storage), Resend (transactional email), Vercel (hosting), Google Analytics (analytics). Each processes data under its own data-processing agreement.

Order records: 7 years (Dutch tax law). Delivery/access logs: 24 months, or longer where needed for an active payment dispute. Access tokens expire after 90 days (renewable).

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to legitimate-interest processing: email support@rescuekits.store. You can also complain to the Dutch DPA (Autoriteit Persoonsgegevens) or your local authority.

Some processors operate globally; transfers outside the EEA rely on adequacy decisions or standard contractual clauses maintained by those processors.