Privacy Policy

Last Updated: September 5, 2026

This Privacy Policy explains how SUFK Digital Products ("SUFK Digital Products," "we," "us," or "our") collects, uses, stores, protects, and shares personal information when you use sufkdigitalproducts.store, purchase our digital products, create an account, contact us, or otherwise interact with our services.

SUFK Digital Products is operated from Pakistan and provides digital products to customers internationally, including customers in the European Union (EU) and European Economic Area (EEA).

We have designed our website to collect and process personal information only where reasonably necessary for operating the store, processing purchases, delivering digital products, providing customer accounts and support, maintaining security, communicating with customers, and complying with legal obligations.

Important: This Privacy Policy is intended to accurately describe our practices. It does not guarantee immunity from legal claims or replace advice from a qualified lawyer. Our technical systems and third-party services must be configured consistently with this policy.

1. Who We Are

• Business: SUFK Digital Products
• Website: sufkdigitalproducts.store
• Country of operation: Pakistan
• Support email: sufkdevelopers@gmail.com
• Business model: Digital products, including eBooks, PDFs, and other downloadable digital content.

For privacy-related questions or requests, you can contact us at: sufkdevelopers@gmail.com

2. Who This Policy Applies To

This Privacy Policy applies to visitors, customers, account holders, and other individuals who interact with our website.

Our website is intended for individuals 18 years of age or older. By using the website or purchasing products, you confirm that you meet the applicable minimum-age requirement. We do not knowingly offer accounts or purchases to individuals under 18.

3. Information We Collect

The information we collect depends on how you use our website.

3.1 Information You Give Us

You may provide:

• your name;
• email address;
• account information;
• billing/order information;
• country or region;
• customer-support messages;
• information submitted through contact forms;
• marketing preferences;
• information you voluntarily provide when communicating with us.

We do not ask customers to provide unnecessary sensitive information.

4. Account Registration and Email Login

Customers may be able to create an account to keep their purchases and access their digital products. Our account system may use email verification codes instead of requiring customers to create and remember a traditional password.

When you request an account login or verification code:

1. You provide your email address.
2. A verification code is sent to that email address.
3. The code is used to verify that you control the email address.
4. Once verified, you can access the applicable account.

We may process information necessary to operate this authentication system, including your email address, account status, authentication events, and relevant security information.

5. Connecting Purchases to Future Accounts

SUFK Digital Products is designed so that customers do not necessarily need to create an account before purchasing. If you purchase a digital product using an email address and later create an account using that same verified email address, we may associate eligible historical purchases with that account.

For example: purchase today with no account created, then create an account months later with the same verified email — eligible previous purchases may appear in the account. This functionality exists so customers do not lose access to products they previously purchased simply because they did not create an account immediately.

We use the email address and relevant order information for this purpose. We may take reasonable security measures to prevent unauthorized individuals from gaining access to another customer's purchase history.

6. Purchase Information

When you purchase a digital product, we may process information such as:

• purchaser name;
• email address;
• product purchased;
• order number or transaction identifier;
• purchase date and time;
• price and currency;
• payment status;
• applicable tax information;
• digital-product access information;
• refund, dispute, or support information.

We use this information to:

• process and verify purchases;
• deliver digital products;
• maintain purchase records;
• connect purchases to customer accounts;
• provide customer support;
• prevent fraud and abuse;
• handle payment disputes;
• meet tax, accounting, and legal obligations.

7. Payments Through Paddle

Payments are processed through Paddle, which may act as the payment processor and/or Merchant of Record for applicable transactions. Payment information may be collected and processed directly by Paddle. SUFK Digital Products does not intentionally store complete payment-card information such as full card numbers or CVV/security codes on our own systems.

Paddle may collect and process information necessary to:

• process payments;
• verify transactions;
• prevent fraud;
• calculate or collect applicable taxes;
• issue receipts;
• handle refunds where applicable;
• comply with legal and regulatory obligations.

Paddle's own privacy practices may also apply to information it processes. We recommend reviewing Paddle's applicable privacy documentation when completing a purchase.

8. Supabase

Our website may use Supabase for functions such as database services, authentication, customer accounts, purchase records, digital-product access information, and security-related functionality. Information stored through Supabase may include account information, email addresses, purchase-related records, and other information necessary to operate the website. We configure our database and access controls to restrict unauthorized access as reasonably practicable.

9. Lovable Cloud and Website Infrastructure

Our website is hosted and/or operated using Lovable Cloud and related infrastructure. Technical information may therefore be processed by infrastructure providers necessary to operate the website. This may include information such as IP addresses, browser information, device information, requests to the website, error logs, security information, and technical activity required to operate the service. The exact infrastructure providers may change as the website develops.

10. Automatically Collected Technical Information

When you visit the website, certain technical information may be automatically processed. Depending on the configuration of the website and its services, this may include IP address, browser type, device type, operating system, approximate geographic region, pages requested, referring page, date and time of requests, technical error information, and security events.

We use this information primarily to:

• operate the website;
• maintain security;
• identify technical problems;
• prevent abuse;
• detect fraudulent or malicious activity;
• improve reliability and performance.

11. Cookies and Similar Technologies

SUFK Digital Products is designed to avoid unnecessary cookies and tracking technologies. We do not intentionally use advertising cookies, retargeting cookies, marketing cookies, Meta advertising pixels, TikTok advertising pixels, Pinterest advertising pixels, or unnecessary tracking cookies.

However, certain essential technical services may use session identifiers, local storage, tokens, or similar technologies necessary for functions such as authentication, security, or maintaining a session. Because third-party services and website technologies can change, the exact technical mechanisms used by the website may change over time. We will not intentionally introduce non-essential tracking technologies without reviewing the applicable privacy and consent requirements.

12. Google Analytics

SUFK Digital Products may use Google Analytics to understand website performance and visitor activity. Analytics may provide information such as pages viewed, general website usage, device and browser information, traffic sources, approximate geographic information, and interactions with the website. We do not use Google Analytics for the purpose of collecting payment-card information or other unnecessary sensitive information.

Where applicable law requires consent for particular analytics technologies or storage, the website will use an appropriate consent mechanism before enabling those technologies. Our use of Google Analytics may also be subject to Google's own privacy practices.

13. Lovable Analytics

The website may use analytics functionality provided by Lovable or its infrastructure to understand technical and website performance. Such analytics may process technical or usage information. We will seek to configure analytics so that unnecessary personal information is not collected. If the analytics implementation changes materially, this Privacy Policy may be updated accordingly.

14. Google Search Console

We may use Google Search Console to understand how our website appears in search engines and to identify technical issues affecting search visibility. Search Console generally provides website-level search performance information rather than giving us access to a customer's private account information.

15. Social Media

SUFK Digital Products may maintain or use accounts and pages on Instagram, TikTok, and Pinterest. These platforms are operated by independent companies. If you interact with our social-media profiles, those platforms may independently collect information about you according to their own privacy policies. We do not control the privacy practices of third-party social-media platforms.

16. Marketing Emails

If you voluntarily subscribe to marketing communications, we may use your email address to send information such as new digital products, product announcements, promotions, discounts, updates, and other SUFK Digital Products marketing communications. You can unsubscribe from marketing communications at any time using the unsubscribe option provided in the email or by contacting us at: sufkdevelopers@gmail.com

Transactional emails, such as purchase confirmations, digital-product delivery messages, account verification codes, security notifications, and important service communications, may still be sent where necessary even if you unsubscribe from marketing.

17. Why We Process Your Information

Providing products and services. To process purchases, provide digital products, provide account functionality, connect purchases with accounts, and provide customer support.

Security. To prevent unauthorized access, detect fraud, prevent abuse, protect customer accounts, and protect our systems.

Business administration. To maintain transaction records, manage customer relationships, maintain accounting records, and comply with applicable tax and legal obligations.

Communications. To respond to inquiries, provide customer support, send order-related communications, send authentication codes, and communicate important service information.

Marketing. Where legally permitted, to send promotional communications to customers and subscribers who have provided the necessary consent or where another lawful basis applies.

18. Legal Bases for EU/EEA Customers

Where the GDPR applies, we will process personal information using an appropriate legal basis.

Performance of a contract. We may process information necessary to complete your purchase, deliver digital products, provide your account, and provide services you requested.

Legal obligations. We may process information where necessary to comply with tax requirements, accounting obligations, legal requirements, regulatory requirements, and lawful requests from authorities.

Legitimate interests. We may process information where reasonably necessary for legitimate interests such as website security, fraud prevention, maintaining business records, improving our services, and defending or establishing legal claims. Where we rely on legitimate interests, we consider whether our interests are appropriately balanced against your rights and freedoms.

Consent. Where required, we may request your consent for activities such as certain marketing communications or non-essential analytics/tracking. Where processing relies on consent, you may withdraw that consent at any time.

19. Sharing Personal Information

We do not operate a business model based on selling customer personal information. We may share necessary information with service providers that help us operate SUFK Digital Products. These may include Paddle and payment-related providers, Supabase, Lovable Cloud and relevant infrastructure providers, email providers, analytics providers, security providers, hosting/cloud providers, professional advisers, accountants, lawyers, and government authorities where legally required.

We aim to share only information reasonably necessary for the relevant purpose. Where required by applicable law, we seek appropriate contractual and organizational protections when working with service providers.

20. International Data Transfers

SUFK Digital Products operates from Pakistan and serves customers around the world. As a result, personal information may be processed or stored in countries other than the country where you live. This may include countries outside the EU/EEA.

Where GDPR or another applicable law requires specific safeguards for international transfers, we will seek to use an appropriate legally recognized mechanism, such as an adequacy decision, Standard Contractual Clauses, another legally recognized transfer mechanism, or another lawful safeguard. The exact locations of processing may depend on the providers and infrastructure used at the time.

21. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. Different categories of information may be retained for different periods.

• Account information: generally while your account remains active or as reasonably necessary to provide account services.
• Purchase and transaction records: may be retained for longer periods where necessary for tax, accounting, fraud-prevention, dispute-resolution, or legal purposes.
• Support communications: may be retained for a reasonable period necessary to resolve issues and maintain appropriate business records.
• Marketing information: generally retained until you unsubscribe or until it is no longer reasonably necessary.
• Security records: may be retained for an appropriate limited period to protect the website and investigate security incidents.

When information is no longer reasonably required, we will seek to delete, anonymize, or securely dispose of it where reasonably practicable.

22. Your GDPR Rights

If you are located in the EU/EEA and the GDPR applies to your information, you may have rights including: access, correction, deletion, restriction, portability, objection to certain processing (including certain direct marketing), withdrawal of consent, and the right to lodge a complaint with an appropriate data-protection authority.

These rights are not absolute and may be subject to legal exceptions. For example, we may be legally required to retain certain transaction or accounting information even if you request deletion.

23. Exercising Your Privacy Rights

To submit a privacy request, contact: sufkdevelopers@gmail.com. Please provide enough information for us to understand and process your request. We may ask for reasonable verification before releasing, changing, or deleting personal information. This is designed to prevent someone else from pretending to be you and obtaining access to your information. We will handle requests within the timeframe required by applicable law.

24. Deleting Your Account

Where customer accounts are available, you may request deletion of your account. Account deletion may remove or anonymize information that is no longer necessary. However, deleting an account does not necessarily require us to delete every record associated with you. For example, we may need to retain certain purchase, transaction, tax, fraud-prevention, or legal records for a period required by law. If you request account deletion, contact: sufkdevelopers@gmail.com

25. Data Security

We use reasonable technical and organizational measures intended to protect personal information. Depending on the system, these measures may include encrypted HTTPS connections, secure authentication, email verification, database access controls, Supabase security controls, restricted administrative access, input validation, protection against unauthorized requests, rate limiting where appropriate, secure handling of credentials and secrets, and monitoring for suspicious activity.

Sensitive credentials and secret keys should not be stored directly in publicly accessible website code. Despite these safeguards, no internet-connected system can be guaranteed to be completely secure.

26. Personal Data Breaches

If we become aware of a personal-data security incident, we will take reasonable steps to investigate the incident, contain the issue, protect affected systems, assess potential impact, take reasonable remedial measures, and notify affected individuals or regulators where required by applicable law. We will not intentionally conceal a legally reportable breach.

27. Third-Party Websites

Our website may contain links to websites operated by third parties. These may include payment providers, social-media platforms, or other external services. Once you leave our website, the third party's privacy policy may apply. We are not responsible for the privacy practices of websites that we do not control.

28. Fraud and Abuse Prevention

We may process technical, account, transaction, and usage information to identify and prevent fraudulent purchases, unauthorized account access, payment abuse, attempts to obtain products without authorization, malicious activity, and abuse of digital-product delivery systems. Where appropriate, information may be shared with payment providers or relevant authorities to prevent fraud or comply with law.

29. Digital Product Access

Because SUFK Digital Products sells downloadable digital content, information may be associated with product access to help us verify legitimate purchases, provide customers with access to purchased products, prevent unauthorized distribution, investigate abuse, and resolve customer-support issues. We will not use purchase/access information for unrelated purposes simply because it is technically available to us.

30. Copyright and Intellectual Property

Personal information may be processed when we receive copyright or intellectual-property complaints. This may include information contained in a complaint or communication necessary to investigate and respond to the issue. We may disclose information where reasonably necessary to handle a legitimate intellectual-property dispute or where required by law.

31. Legal Requests

We may disclose personal information if we reasonably believe disclosure is necessary to comply with applicable law, respond to a valid legal process, comply with a court order, protect the rights or safety of SUFK Digital Products or others, investigate fraud or security incidents, or establish, exercise, or defend legal claims. We will seek to limit disclosures to what is reasonably necessary.

32. Changes to This Privacy Policy

We may update this Privacy Policy when our website changes, our services change, we add or remove third-party providers, our analytics configuration changes, privacy laws change, security practices change, or our business model changes. The “Last Updated” date at the beginning of this policy will be changed when the policy is materially updated. If applicable law requires us to provide additional notice of a material change, we will take appropriate steps to do so.

33. Contact Us

For privacy questions, requests, complaints, or concerns: SUFK Digital Products, Website: sufkdigitalproducts.store, Email: sufkdevelopers@gmail.com, Country: Pakistan.

Privacy Requests: Send privacy-related requests to: sufkdevelopers@gmail.com. Please put “Privacy Request” in the subject line where possible.

34. Important Information for EU/EEA Customers

SUFK Digital Products welcomes customers internationally, including customers in the EU/EEA. If you are located in the EU/EEA, applicable data-protection and consumer-protection laws may provide you with additional rights. Nothing in this Privacy Policy is intended to remove or restrict rights that cannot lawfully be excluded under applicable law. Where mandatory local law provides you with greater protection than this Privacy Policy, the mandatory law will apply to the extent required.

35. No Waiver of Mandatory Legal Rights

Nothing in this Privacy Policy is intended to exclude mandatory consumer rights, exclude mandatory privacy rights, prevent you from exercising statutory rights, prevent you from contacting a regulator, or restrict rights that cannot legally be restricted. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue to apply to the extent permitted by law.

36. Making a Privacy Request

To exercise any of the rights described above, see our Data Request & Privacy Rights page, or email sufkdevelopers@gmail.com.