Privacy Policy

1. Who we are (Data Controller)

For the purposes of the GDPR, Phantom System is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, you can contact us using the details in the "Contact us" section below.

2. Information we collect

We collect personal data that you provide directly and data that is collected automatically when you use our website.

Information you give us

• Contact details such as your name and email address when you sign up, request a sample, or contact support.
• Order and payment information when you purchase an ebook. Payment card details are processed by our third-party payment providers and are not stored on our servers.
• Communications you send to us, including support requests and survey responses.

Information collected automatically

• Technical data such as IP address, browser type, device information, and operating system.
• Usage data such as pages visited, time spent, and links clicked.
• Cookies and similar technologies as described in the "Cookies" section below.

3. How we use your information

We use your personal data for the following purposes:

• To provide, deliver, and support the ebooks and services you request.
• To process payments and prevent fraud.
• To send you service messages, updates, and (where permitted) marketing communications.
• To improve our website, products, and customer experience.
• To comply with our legal obligations and enforce our terms.

4. Legal bases for processing (GDPR)

Where the GDPR applies, we only process your personal data when we have a valid legal basis to do so:

• Contract — to deliver the products and services you have purchased.
• Consent — for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Legitimate interests — to operate, secure, and improve our business, provided your rights do not override those interests.
• Legal obligation — to meet accounting, tax, and other legal requirements.

5. Your rights under the GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your data ("right to be forgotten").
• Right to restrict processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint — with your local data protection authority.

To exercise any of these rights, please contact us using the details below. We will respond within the timeframes required by law (generally within one month).

6. Cookies and tracking

We use cookies and similar technologies to operate our website, remember your preferences, analyze traffic, and (with your consent) deliver relevant advertising. Essential cookies are necessary for the site to function. Non-essential cookies are only set with your consent, which you can manage or withdraw at any time through your browser settings or our cookie banner.

7. Sharing your information

We do not sell your personal data. We may share it with trusted third parties who help us run our business, including:

• Payment processors to handle transactions securely.
• Email and marketing platforms to deliver communications you have agreed to receive.
• Analytics and advertising providers (such as Meta and Google) to measure and improve our marketing.
• Service and hosting providers that support our website and operations.
• Authorities or advisors where required by law or to protect our legal rights.

These parties are required to protect your data and may only use it for the purposes we specify.

8. International data transfers

Your data may be processed in countries outside the EEA or the UK. Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses or transfers to countries deemed to provide an adequate level of protection.

9. Data retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

10. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

Our products and website are not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Third-party links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through our website or by email where appropriate.

14. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: