Back

Privacy Policy

1. Data controller

AK Pokerivalmennus (Business ID: 3593832-2)
Contact: coaching@rekk.poker

2. Data we collect

When you create an account and use the Service we collect and store the following personal data:

• Email address — used for authentication, account management, and transactional emails
• Password — stored as a one-way bcrypt hash; never stored or transmitted in plaintext
• Subscription data — access expiry date, plan type, and feature entitlements
• Login timestamps — to detect unusual account activity
• Stripe Customer ID — a reference that links your account to your payment history held by Stripe

We do not collect your name, physical address, or any payment card details. Payment data is handled entirely by Stripe.

3. Lawful basis for processing

We process your personal data on the basis of contract performance (Article 6(1)(b) GDPR) — the data is necessary to provide you with access to the Service you have purchased.

4. How we use your data

Your data is used solely to:

• Authenticate you when you log in
• Grant and manage your access to the Service
• Send transactional emails (access renewal confirmations, expiry reminders)
• Process payments via Stripe

We do not use your data for marketing without your explicit consent, and we do not sell or share your data with any third parties other than those listed in section 7.

5. Data retention

Your account data is retained for as long as your account exists. If you request deletion of your account, your personal data will be permanently removed within 30 days. Some data may be retained longer where required by law (e.g. financial records).

6. Your rights under GDPR

As a data subject you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing in certain circumstances

To exercise any of these rights, contact us at coaching@rekk.poker. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) at tietosuoja.fi.

7. Third-party processors

Stripe, Inc. — processes payments on our behalf. Stripe stores and processes your payment card details and billing information under their own privacy policy: stripe.com/privacy. Stripe is certified under the EU-US Data Privacy Framework.

Email delivery — transactional emails are sent via our SMTP provider. Your email address is transmitted to deliver messages to you and is not used for any other purpose by the provider.

8. Cookies

We use a single session cookie strictly necessary for keeping you logged in. This cookie contains no personal information and is deleted when you log out or close your browser. We do not use any tracking, analytics, or advertising cookies.

9. Data security

Access to the Service is protected by HTTPS. Passwords are hashed using bcrypt. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

10. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated by email. The current version is always available at this URL.

11. Contact

For any privacy-related questions or requests, contact us at coaching@rekk.poker.