Privacy Policy
Last updated: July 21, 2026
1. Who is responsible
The data controller for hermes-terminal.com is Surfidea, Zdziechowskiego 10/73, 02-659 Warsaw, Poland, operated by Jacob Wlodarczyk. Privacy contact: support@hermes-terminal.com.
2. What we process, and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Purchase data - name, email, country, tax location, payment status (card details go to the payment processor only; we never see them) | Delivering the course, receipts and invoices, refunds, tax compliance | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation |
| Support correspondence - your emails and our replies | Answering questions, handling refunds | Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interest |
| Technical logs - IP address, user agent, requested pages (hosting) | Serving the site, security, abuse prevention | Art. 6(1)(f) legitimate interest |
| Analytics - pseudonymous usage events, if analytics cookies are accepted | Understanding what on the site works | Art. 6(1)(a) consent |
We do not sell personal data, run third-party advertising, or profile you beyond the ordinary sales statistics above.
3. Who receives data (processors and recipients)
- Payhip Ltd (UK) - checkout, course delivery, and (for US/Canada) tax collection as platform
- Stripe / PayPal - payment processing
- Vercel Inc. (US) - website hosting and logs
- Google Ireland Ltd - analytics (GA4), only if you consent to analytics cookies
- Our email provider, for support correspondence; our accountant and tax authorities, where legally required
Some providers process data outside the EEA (notably in the US). Transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses, as applicable to each provider.
4. Cookies
| Cookie type | What it does | Basis |
|---|---|---|
| Strictly necessary (checkout, on Payhip's domain) | Cart, payment session, fraud prevention during checkout | No consent required |
| Analytics (GA4: _ga, _ga_*) | Pseudonymous statistics: visits, scroll, clicks, purchases | Your consent; loaded only after you accept |
- This site sets no marketing or advertising cookies.
- You can withdraw analytics consent at any time (cookie settings link in the footer) and delete cookies in your browser; the site works fully without analytics cookies.
- The embedded course video is hosted with the site itself and sets no third-party cookies.
5. How long we keep data
- Purchase and invoice data: as long as tax law requires (typically 5-6 years).
- Support emails: up to 2 years after the last message, then deleted.
- Hosting logs: rotated automatically by the hosting provider (weeks, not years).
- Analytics: up to 14 months, then aggregated or deleted.
6. Your rights
Under the GDPR you can request: access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting prior processing. Write to support@hermes-terminal.com - we answer within one business day.
You also have the right to lodge a complaint with your supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
7. Children
The site and the course are not directed at children and are intended for adults who trade with their own funds.
8. Changes
We may update this policy as the site or our providers change; the "last updated" date above reflects the current version. Material changes will be noted on this page.
9. Contact
Surfidea · Zdziechowskiego 10/73, 02-659 Warsaw, Poland
support@hermes-terminal.com