Privacy Policy
What we collect when you wander in
- Last updated November 14, 2025
Who we are
Offgrid Supply is owned and operated by General Condition Studio (General Condition PR), Belgrade, Republic of Serbia. We are the data controller for personal data processed through our website and store. Contact: hey@offgrid.supply.
What personal data we collect
Account and contact details
- Name, email, billing address.
- Optional company details for invoicing.
Order and payment details
- Products purchased, license type, price, currency, invoice data.
- Payment status metadata (transaction ID, success/failed).
- We do not receive or store full card details. Payments are handled by our payment processor.
Download activity (digital goods)
- File name, file size, date/time, IP address, approximate location derived from IP.
- Used to verify delivery and prevent fraud.
Device and usage data
- IP address, browser type, device type, operating system, pages viewed, timestamps, referrers.
- Collected via necessary cookies and security logs.
- Analytics and marketing cookies only with your consent.
Sensitive data
How we use your information
- Provide services and fulfill your order (account, checkout, file delivery, license management).
- Verify digital delivery and prevent fraud (download logging).
- Provide support and service messages.
- Improve the site and product experience (analytics with consent).
- Comply with tax, accounting, and other legal duties.
- Send marketing emails only if you opt in.
Legal bases (EEA/UK)
- Contract performance: orders, downloads, account access.
- Legal obligation: invoices, tax records, consumer rights.
- Legitimate interests: security, fraud prevention, download verification, basic service analytics.
- Consent: non-essential cookies and marketing emails. You can withdraw consent any time.
When we share data (processors)
We share data with service providers who help us run the store. They act under contract and process data only to provide their services to us. Typical providers include:
- Payment processing: NestPay / Stripe / PayPal (transaction status, no full card data).
- E-commerce platform and plugins: WooCommerce and essential extensions.
- Hosting/CDN and security: hosting provider, CDN, firewall/anti-bot tools.
- Email delivery: transactional email provider; marketing email tool if you subscribe.
- Analytics: only if you consent to analytics cookies.
Download tracking and fraud prevention
To prevent abuse and verify delivery of digital goods, we log each download with date/time, file name/size, IP address, and approximate location. Legal bases: legitimate interests and, where applicable, legal obligation. Logs are retained up to 24 months, then deleted or anonymized.
Cookies and categories
We use cookies and similar technologies. Necessary cookies run to make the site work. Analytics and marketing cookies run only with your consent. You can change your choices anytime via Cookie Settings.
- Strictly necessary: security, checkout, session, consent storage.
- Analytics (consent): page views, events, performance.
- Marketing (consent): ad measurement, remarketing.
| Area | Status | Notes |
|---|---|---|
| Controller & Contact Info | ✅ | Correct: Offgrid / General Condition Studio, Belgrade, Serbia |
| Download Logging Clause | ✅ | Included and phrased legally (date, IP, location, purpose, retention 24 months) |
| Legal Bases (GDPR) | ✅ | All four bases present: Contract, Legal obligation, Legitimate interest, Consent |
| Retention Policy | ✅ | Realistic durations (10y, 24m, 12m, etc.) |
| Cookie Disclosure | ✅ | Clear categories + sample table + user control via Cookie Settings |
| International Transfers | ✅ | Mentions SCCs and compliance |
| Children’s Data | ✅ | Age threshold 16; compliant with GDPR |
| Security Section | ✅ | Correct and practical wording |
| CCPA Section | ⚙️ Optional | Keep only if your analytics or ad tools target U.S. users; otherwise remove |
| Change Notice Line | ✅ | “We will update this notice when needed…” — correct and clear |
Retention
- Orders, invoices, accounting: up to 10 years (statutory).
- Download logs: up to 24 months.
- Server/security logs: up to 12 months.
- Support emails/tickets: up to 24 months.
- Marketing data: while subscribed + up to 24 months.
We delete or anonymize after these periods unless law requires longer.
International transfers
If data is transferred outside your country, we use appropriate safeguards (e.g., EU Standard Contractual Clauses) with our processors.
Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, object, or request portability of your personal data. You can withdraw consent at any time, including cookie consent, via Cookie Settings or by emailing hey@offgrid.supply. You may lodge a complaint with your local data protection authority.
Children’s data
Our services are not directed to children under 16. We do not knowingly collect data from children.
Security
We use appropriate technical and organizational measures, including HTTPS/TLS, access controls, least-privilege for admin accounts, regular updates, and monitored hosting.
California privacy (optional to keep)
If you serve California residents, update truthfully:
- Identifiers (YES), Commercial info (YES), Internet activity (YES), Approx geolocation via IP (YES), Sensitive personal information (NO).
- We do not sell or share personal information as defined by CCPA/CPRA.
Provide request instructions if you keep this section. If not applicable, remove this section.
Changes
We will update this notice when needed. The “last updated” date shows the latest version.
Contact
- Offgrid Supply / General Condition Studio
- Belgrade, Republic of Serbia
- Email: hey@offgrid.supply
