PRIVACY POLICY
Digital Mistress Operating System (DMOS)
Last updated: February 2026
1. Data Controller
The controller of your personal data is:
Spark Sylwia Rytarowska, NIP: PL8131196628
Malawa 786C, 36-007 Krasne, Podkarpacie, Polska
Email: hello@digitalmistress.tech
We are responsible for deciding how and why your personal data is processed. If you have any questions about this Privacy Policy or how we handle your data, please contact us at the email address above.
2. Data We Collect
We collect and process the following categories of personal data:
Account data: first name, last name, email address, username, password (hashed).
Payment data: billing name, last 4 digits of card, billing country. Full card details are processed and stored by Stripe, Inc. — we do not store full payment card information.
Technical data: IP address, browser type, device type, pages visited, time of access — collected automatically via server logs and analytics tools.
Consent records: timestamp and IP address of your agreement to our Terms & Conditions, Privacy Policy, and EU digital content withdrawal notice.
Communications: emails and messages you send us.
3. Why We Process Your Data (Purposes and Legal Bases)
We process your personal data for the following purposes, each supported by a legal basis under Article 6 of the GDPR:
Contract performance (Art. 6(1)(b)): to create and manage your account, process payments, deliver access to the Service, and provide customer support.
Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and invoicing obligations under Polish and EU law; to maintain records of your consent where required.
Legitimate interests (Art. 6(1)(f)): to prevent fraud and protect the security of our platform; to analyse usage patterns and improve the Service.
Consent (Art. 6(1)(a)): to send you marketing emails, if you have opted in. You can withdraw consent at any time by clicking “unsubscribe” in any email or contacting us directly.
4. Data Retention
We retain your data for as long as necessary for the purposes described in this Policy:
Account data: for the duration of your membership and for 5 years after account closure (for tax and legal compliance).
Payment and invoice data: for 5 years from the date of the transaction, as required by Polish tax law.
Consent records: for 5 years from the date of consent, as evidence of compliance.
Technical/log data: for up to 12 months.
Marketing data: until you withdraw consent or we determine the data is no longer needed.
5. Who We Share Your Data With
We share your data only with trusted service providers who process it on our behalf:
Stripe, Inc. (USA) — payment processing. Stripe is certified under the EU-US Data Privacy Framework. Data transfer is covered by Standard Contractual Clauses and Stripe’s Data Processing Agreement.
WordPress / WooCommerce / Restrict Content Pro — platform infrastructure hosted on our servers.
Google LLC (USA) — Google Meet for live calls; Google Analytics (if enabled). Transfer covered by Standard Contractual Clauses.
Meta Platforms, Inc. (USA) — private Facebook group for community support. Transfer covered by Standard Contractual Clauses.
Email service provider — for transactional and marketing emails.
We do not sell your personal data to third parties. We do not share your data for third-party advertising purposes.
6. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
(a) Standard Contractual Clauses approved by the European Commission;
(b) transfers to recipients certified under recognised adequacy frameworks.
7. Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to have inaccurate data corrected.
Right to erasure: to request deletion of your data, subject to legal retention obligations.
Right to restriction: to request that we limit processing of your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at hello@digitalmistress.tech. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority (UODO: uodo.gov.pl) or the supervisory authority in your country of residence.
8. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small files stored on your device that help us operate the website, remember your preferences, and analyse traffic.
You can control cookies through your browser settings and our cookie consent banner. Disabling certain cookies may affect the functionality of the website.
9. Children’s Privacy
Our Service is intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and secure payment processing via Stripe.
No method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email and/or a prominent notice on our website before the changes take effect.
12. Contact and Complaints
For any questions, requests, or complaints regarding this Privacy Policy, contact us at: hello@digitalmistress.tech
We take privacy complaints seriously and will respond promptly.
© 2026 Spark Sylwia Rytarowska. All rights reserved.
