Privacy Policy

Last updated: February 27, 2026

Privacy Policy

Last updated: 28.02.2026

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how zerozerofournine.com and the mobile application “Deck49” collect, process, and safeguard your information in accordance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

This policy applies to our website (zerozerofournine.com), the Deck49 mobile app, and all related digital services, purchases, and email communications.

1. Data Controller (Art. 4 No. 7 GDPR)

Srijith Kariyattil (Einzelunternehmen)
trading as Zero Zero Four Nine
c/o Postflex #9448
Emsdettener Str. 10
48268 Greven
Germany
Email: srijith@zerozerofournine.com

2. Data We Collect

2.1 Website and Purchase Data

When you visit our website, submit a form, or purchase a product, we may collect:

  • Name and email address
  • Transaction and order details
  • IP address and browser/device information (via server logs and cookies)
  • Consent timestamp and source (recorded when you opt in to communications)

We do not store full payment card details. All card data is processed directly by Stripe (see Section 5.3).

2.2 Email and Marketing Data

When you download a free product or purchase from us, we collect your email address and, where provided, your first name. This data is used to deliver your product and send relevant follow-up communications. You can unsubscribe at any time.

3. Platform: WordPress

Our website is built on WordPress, an open-source content management system. WordPress may set functional cookies to manage sessions and logged-in user state. We do not use WordPress to collect personal data beyond what is described in this policy. WordPress is hosted on our own server in the EU (Hetzner Online GmbH, Germany).

4. Email Marketing: FluentCRM

We use FluentCRM (by WPManageNinja) as our email marketing and customer relationship management tool. FluentCRM is a self-hosted plugin — all subscriber data is stored on our own server and is not shared with third-party email platforms.

FluentCRM stores the following data for each subscriber:

  • Email address
  • First name (where provided)
  • Product tags and purchase history
  • Consent timestamp and source
  • Subscription status and unsubscribe date (if applicable)

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for transactional emails (delivering purchased products); consent (Art. 6(1)(a) GDPR) for marketing follow-up emails where a checkbox was ticked.

Every marketing email contains an unsubscribe link. You can also request deletion of your data at any time by emailing srijith@zerozerofournine.com.

For more information, visit: FluentCRM Privacy Policy

5. Payment Processing: Stripe

All payments on zerozerofournine.com are processed by Stripe, Inc. (or Stripe Payments Europe, Ltd. for EU customers). When you make a purchase, you are entering your payment details directly into Stripe’s secure payment form.

We never see or store your full card number, CVV, or bank account details. Stripe handles all payment card data and is PCI-DSS Level 1 certified.

Stripe may collect and process:

  • Card details (number, expiry, CVV) — stored only by Stripe
  • Billing name and email address
  • IP address and device information for fraud prevention
  • Transaction amount and metadata

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).

Stripe acts as an independent data controller for the data it processes. For more information, see: Stripe Privacy Policy

Stripe’s registered address (EU): Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

6. Cookies

We use cookies to ensure the proper functioning of our website. A cookie consent banner allows you to accept or decline non-essential cookies. Essential cookies (e.g. session cookies for the WordPress admin, Stripe payment session cookies) are necessary for the site to function and do not require consent.

For a full list of cookies used on this site, please see our Cookie Policy managed via our cookie consent tool.

7. Legal Bases for Processing

  • Art. 6(1)(a) GDPR — Consent: Marketing emails and newsletter subscriptions where you ticked a consent checkbox
  • Art. 6(1)(b) GDPR — Contract: Processing your order and delivering your purchased product
  • Art. 6(1)(f) GDPR — Legitimate Interest: Transactional follow-up emails, fraud prevention, security logging

8. Data Retention

  • Subscriber and purchase records are retained for as long as necessary to fulfil the service or as required by German tax law (typically 10 years for invoicing records)
  • If you unsubscribe, your email is marked as unsubscribed and no further marketing emails are sent. You may request full deletion at any time
  • Server log data is retained for up to 30 days

9. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following processors where strictly necessary:

  • Stripe — payment processing (see Section 5)
  • Hetzner Online GmbH — server hosting (Germany, EU)
  • Google LLC — Google Cloud Storage is used to serve public review data (no personal data stored there)

All processors are either based in the EU or covered by adequate data transfer mechanisms (Standard Contractual Clauses).

10. Your Rights (GDPR)

Under the GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Restriction — request we limit how we process your data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, email: srijith@zerozerofournine.com

You also have the right to lodge a complaint with your national data protection authority. In Germany: Bundesbeauftragte für den Datenschutz (BfDI).

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests:
Email: srijith@zerozerofournine.com

Scroll to Top