Contact & support

Privacy notice.

Updated September 6, 2026.

This notice covers this website, purchase verification, download access and correspondence with Bachelorette Budget Kit.

Who is responsible

The data controller is Eugenio Scarlato, Via Del Gaudio 5, 87100 Cosenza, Italy. Contact: bachelorettebudgetkit@gmail.com.

What we use and why

We use your email address, message and any details you choose to include to understand and answer your request. For email enquiries, your name and order reference are optional. If we cannot identify the issue, we may need a follow-up. Please do not include payment-card details, private download links or personal information about other group members.

For questions about a potential purchase or support related to your purchase, processing is necessary to take steps at your request or perform the contract. For other enquiries and abuse prevention, we rely on our legitimate interests in responding to correspondence and protecting the support service. Records needed to meet legal obligations are retained on that basis.

Payments and download access

Stripe processes checkout and payment. We use checkout-session and payment information to verify your purchase, provide the files and handle order support. The legal basis is performing the purchase contract. Required transaction records are processed to meet legal obligations. Our website does not collect your full card number or initiate another charge when you download.

Your original download address contains a purchase-session identifier. Keep it private. The download service retrieves your checkout session from Stripe and checks the kit, payment status and payment environment before providing the file. If optional advertising measurement is allowed, the page first stores this identifier in this tab’s session storage and removes it from the visible address. This temporary storage keeps your download available on reload; it is ignored after 24 hours and ends when the browser clears the tab’s session. If storage is unavailable, measurement is skipped and your original download link remains usable. Keep your files and Stripe receipt. This does not mean that Stripe, hosting providers or email retain no records.

Stripe may process data as an independent controller for payment, fraud prevention and regulatory purposes. See Stripe’s privacy notice.

How your message reaches us

The email link opens your email app. You send your message directly to our Gmail inbox; this page does not submit a message for you. Google provides the email service. Cloudflare Pages hosts the support page and Cloudflare processes connection and security information, including IP addresses and traffic data. See the Google privacy notice and Cloudflare privacy notice.

Online withdrawal notices

The withdrawal form requires your name, purchase email and order reference or purchase date. It records your statement, a request identifier, receipt preference and the time of receipt in private Cloudflare storage. We use this to identify the contract, handle your notice and meet consumer-law obligations. The downloadable confirmation is generated from the saved record. It is not an automatic email and does not itself issue a refund. The seller can access the private records through the hosting account; there is no public request list.

Optional advertising measurement

Only after you choose Allow, we load Meta Pixel on the sales page and, after a verified payment, on the download page. It helps measure visits, product views, checkout clicks and eligible completed purchases, and supports advertising attribution and optimisation. A checkout click is not recorded as a purchase. Purchase measurement checks the payment with Stripe and sends the amount, currency, kit identifier and a hashed event identifier. It is limited to recent checkout sessions created within 48 hours. Download access is not subject to this measurement limit.

Meta may receive browser and device information, IP address, advertising-click identifiers, cookie identifiers and the permitted page address. We do not intentionally send your name, email, card details, messages, withdrawal form or private checkout-session identifier to Meta. Automatic advanced matching and automatic page/product detail collection are disabled. Support, terms, privacy and withdrawal pages do not load the pixel.

The legal basis for optional advertising cookies and measurement is your consent. Reject and Allow are equally available. You can change your choice through Cookie choices on every page. Global Privacy Control and Do Not Track signals keep optional measurement off. Rejecting does not affect the price, payment, support or download. Withdrawal of consent stops future optional events; it does not undo processing that already occurred.

The necessary bbk_marketing cookie remembers your choice for up to 180 days. After consent, Meta can set advertising cookies such as _fbp and _fbc. Meta describes _fbp as a 90-day cookie; expiry follows Meta and browser settings. A local browser record of hashed purchase-event identifiers helps avoid repeat events on reload; entries older than 30 days are removed when the record is next updated, or the record is removed when you reject. You can also clear it through your browser. Browser blocking, cleared storage or use of another device can affect attribution; Stripe remains the source for actual payment records.

For visitors in the EEA, we and Meta Platforms Ireland Limited are joint controllers for the collection and transmission of applicable event data. We provide this notice; Meta handles applicable access, correction, deletion, restriction and portability requests for personal data it stores. Meta is responsible for its subsequent processing under its own terms. See Meta’s privacy policy, cookie policy and controller addendum. Meta may process data internationally under the arrangements described there. You can contact us at the address above about this measurement or exercise your rights with Meta.

Storage and retention

Purchase records are retained for applicable accounting, legal and claims requirements. We retain withdrawal notices and support correspondence to handle your request and necessary follow-up. After resolution, retention depends on whether correspondence is still needed to document the agreed resolution, meet an applicable legal obligation or establish, exercise or defend a related claim. There is no automatic deletion schedule configured for the support inbox or withdrawal archive. You can request deletion at the address above, subject to any continuing legal need to retain particular records. Provider backups and technical logs follow their own retention rules.

International processing

Stripe, Google and Cloudflare operate internationally, including outside the European Economic Area. Stripe describes its processing and transfer arrangements in its privacy notice and data processing terms. Google and Cloudflare describe their applicable Data Privacy Framework and standard contractual clause safeguards in Google's transfer notice and Cloudflare's privacy notice.

Your rights

Under the GDPR, you may request access, correction, deletion, restriction or portability, and object where processing relies on legitimate interests, subject to the conditions for each right. Send requests to bachelorettebudgetkit@gmail.com. You may lodge a complaint with the Italian Garante or another competent data-protection authority.

Advertising measurement is optional as described above. Hosting and email providers still process technical information. We do not use your support request to subscribe you to marketing or make decisions producing legal or similarly significant effects about you.