At Habitualk, our approach to handling your information is built on the core principles of legality, legitimacy, and transparency. This statement describes the journey of your data through our systems—from the moment it is collected to the point it is no longer needed—and explains how we safeguard it along the way.

Core Principles & Scope

This policy applies to all information collected by Habitualk. When we refer to “personal data,” we mean any information that can identify you, either directly or indirectly. This includes anonymous data that is linked to identifying details. However, it does not cover data that has been irreversibly anonymized or aggregated to the point where re-identification is impossible, whether by us or in combination with other information.

How Data Enters Our Systems

Information comes to us through two main channels: what you actively provide and what is observed when you interact with our services.

First, there is the data you share directly. This happens when you create an account, reach out to our support team, complete a survey, or use our online help tools. When you make a purchase, we collect the necessary transaction details, which include your payment information such as your credit or debit card number and other card details, along with your billing, shipping, and contact information.

Second, we gather data about your usage automatically. When you visit our websites, we may collect details like your device’s unique identifier, your IP address, operating system, browser type, usage patterns, and diagnostic information. We may also determine your device’s approximate location through technologies like GPS and your IP address, which helps us improve how our products and services function.

How Data Is Used During Its Life

Once information is in our care, we put it to work for a clear set of purposes. We use personal data to provide, improve, and develop our products and services, to communicate with you, to offer targeted advertisements, and to protect both our customers and our business.

A key part of this involves promoting safety and security. We process data to verify accounts and user activity, monitor for fraud, and investigate suspicious or potentially illegal behavior or policy violations. This processing is grounded in our legitimate interest in maintaining a secure environment for our services.

We also use data for analysis, research, and audits to support business continuity and product development. If you participate in a contest or promotion, the information you provide will be used to administer that program, and we encourage you to review any additional rules that may apply.

Communication is another vital function. With your prior express consent, we may send you marketing messages about our own products and services, and we may share your personal data with third-party partners so they can send you marketing about their offerings. With your prior express consent, we also personalize your experience on our platforms and on third-party sites and measure the effectiveness of our promotional campaigns. You can withdraw your consent for any of these activities at any time by contacting us. If you wish to stop receiving marketing emails from us, simply reach out to opt out. We also use your data to respond to your inquiries and to keep you informed about your account and our policies.

Small text files called cookies, along with similar technologies like device identifiers and stored browser data, play a role here. We use these tools to provide, protect, and improve our services—for example, by personalizing content, delivering and measuring advertisements, understanding user behavior, and creating a safer experience. The specific cookies in use will vary depending on the services you are accessing.

Who Data Travels To

Your information does not stay in one place. We share personal data with strategic partners who help us deliver our products and services or assist with our marketing efforts. This sharing is strictly for the purpose of providing or improving our products, services, and advertising. We will not share your data with third parties for their own independent marketing purposes without your prior express consent.

Data may also be shared with all our affiliated companies. In the event of a significant corporate change, such as a merger, reorganization, acquisition, joint venture, sale of assets, or bankruptcy, personal data may be transferred to the relevant third party. Furthermore, we may disclose data if we determine in good faith that it is reasonably necessary to protect our rights, enforce our terms, investigate fraud, or protect our operations or users.

Legal obligations can also require disclosure. We may need to share data to comply with laws, legal processes, litigation, or requests from public and governmental authorities, whether inside or outside your country of residence. This includes situations involving national security, law enforcement, or other matters of public importance. For residents of the European Economic Area (EEA), whenever our processing of your personal data requires your consent, that processing is justified under Article 6(1) of the General Data Protection Regulation (EU) ("GDPR").

How Data Is Protected & When It Leaves

We employ reasonable technical, administrative, and physical security measures designed to safeguard your data from unauthorized access and to ensure its correct use. We retain your personal data only for as long as necessary to fulfill the purposes described in this statement. In some cases, a longer retention period may be required or permitted by law.

Your Control Over the Data Lifecycle

You have significant control over your information. We take reasonable steps to keep your data accurate, complete, and current. You have the right to access, correct, or delete the personal data we hold. You can also restrict or object to further processing at any time, and you are entitled to receive your data in a structured, standard format. If you have concerns about our processing, you may lodge a complaint with the competent data protection authority.

To protect your privacy and security during any request, we may ask you for information to confirm your identity and your right to access the data. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal data we maintain. We are committed to responding to your request within a reasonable timeframe, and in any event, in less than 30 days.

Special Circumstances

Our products and services are designed for adults. We do not knowingly collect, use, or disclose data from children under 16, or the equivalent minimum age depending on the jurisdiction. If we discover that a child under the relevant age has provided us with personal data, we will take steps to delete it as soon as possible. Please contact us immediately if you become aware of such a situation.

You may encounter links to third-party websites, products, or services on our platforms. We are not responsible for the privacy practices or content of those third parties. This Privacy Statement applies only to data we collect. We encourage you to read the privacy policies of any third party before engaging with their sites or services.

Policy Evolution & Contact

This Privacy Statement may change periodically to reflect new technologies, industry practices, and regulatory requirements. Your continued use of our products and services after the effective date of any revised statement signifies your acceptance of the changes. If you do not agree with the revised statement, please stop using our services and contact us to close any account you may have created.

If you have any questions about this statement or how your data is handled throughout its lifecycle, please reach out to us at service@zisskiss.com. We will respond to your inquiry within a reasonable timeframe, and in any event in less than 30 days.