Privacy Notice — BreatheRegulate

1. Who we are. breatheandregulate doo, Kameni zid, Split, 22000, Croatia is the controller of the personal data described here. Privacy contact: breatheregulate@gmail.com.

2. What we receive. When you buy: your name, e-mail address, country and the details of your purchase (product, price, date, transaction reference), from our Stripe account and from Aikaya. When you give us your e-mail for a free class or our list: your e-mail and your consent record. We see only anonymous viewing totals, never your individual watch history.

3. Why, and on what basis. To supply the Product and support you (contract); to handle refunds and complaints (contract); to keep accounting and tax records (legal obligation); to send you our news only if you agreed (consent — withdraw any time through the link in each e-mail); to prevent fraud (legitimate interest).

4. Who we share it with. Stripe, which processes our payments (stripe.com/privacy); Tenchi DWC-LLC, which operates Aikaya and processes data for us under a data processing agreement (and controls your Aikaya account under its own Privacy Policy); our professional advisers; and authorities where the law requires.

5. How long. Purchase records for as long as tax law requires us to keep them; list data until you unsubscribe; everything else for as long as we sell to you, then deleted.

6. Transfers. Aikaya's data is stored in the EU (Frankfurt). Tenchi DWC-LLC, established in the UAE, accesses it under the European Commission's Standard Contractual Clauses. Stripe is in Ireland, with group companies in the US (EU–US Data Privacy Framework).

7. Your rights. Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to a data protection authority. We reply within one month.

8. Security. Your data is held on Aikaya's systems, which use encryption in transit, two-factor administrator access and access logging; we keep anything we export securely.

9. Cookies. See Aikaya's Cookie Policy; Stripe's checkout sets its own cookies under Stripe's privacy policy.