Privacy Policy

Last updated: 17 August 2026.

This policy explains what personal data OrderFlowSmith ("we", "us") collects when you use orderflowsmith.com, why we use it, and the rights you have. We are the data controller for that data. For any privacy question, contact us through the contact page.

We keep this simple on purpose: we collect what we need to sell and support digital products, and nothing we do not need.

1. What data we collect

Account data: your name and the e-mail address you register (normally the e-mail of your ATAS account).

Order and billing data: what you bought, the price, invoicing details and the history of your orders and licenses.

Support data: the messages you send us and our replies.

Technical data: basic information your browser sends (such as IP address and device/browser type) and, with your consent, analytics data.

We do not collect special-category data and we do not knowingly collect data from children.

2. Why we use it and our legal basis

To perform our contract with you — creating your account, delivering products, granting and renewing licenses and providing support.

To meet legal obligations — issuing invoices and keeping accounting records for the periods the law requires.

For our legitimate interests — keeping the service secure, preventing fraud and abuse, and improving our products, in a way that does not override your rights.

With your consent — optional analytics and any marketing e-mails. You can withdraw consent at any time.

3. Payments

Payments are processed by Stripe. Your card details are entered on Stripe's secure systems; we do not receive or store your full card number. Stripe processes this data as an independent controller/processor under its own terms and privacy policy.

4. Who we share data with

We share data only with the service providers we need to run the business, and only for that purpose: our payment provider (Stripe), our hosting and e-mail provider, and the ATAS licensing system through which your license is granted to your ATAS account.

We never sell your personal data. We may disclose data if the law requires it.

5. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards, such as the European Commission's standard contractual clauses.

6. How long we keep it

We keep account and order data for as long as you have an account and, after that, only for as long as the law requires us to keep records (for example, invoices for the statutory accounting period). Support messages are kept only as long as needed to help you. When data is no longer needed, we delete or anonymise it.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to certain processing, to receive your data in a portable form, and to withdraw any consent you gave. To exercise any of these, contact us through the contact page; we will respond within the time the law allows. You can also delete your account from your account settings.

8. Cookies

We use cookies that are strictly necessary to run the site (for example to keep you logged in and to protect forms). Optional analytics or marketing cookies run only after you allow them in the cookie bar, and you can change your choice at any time from the link in the footer.

9. Complaints

If you believe we have handled your data incorrectly, please contact us first so we can put it right. You also have the right to lodge a complaint with the data-protection authority in your country — in the Slovak Republic this is the Office for Personal Data Protection (Úrad na ochranu osobných údajov).

10. Changes and contact

We may update this policy; the current version, with its "last updated" date, is always on this page. For anything about your privacy or this policy, contact us through the contact page.