Privacy policy

Who to contact

This notice describes the processing associated with the 22 DAYS brand and 22-days.com. For privacy questions or requests about your information, contact info@22-days.com. “22 DAYS” is a brand name, not a statement that a separate company has been incorporated.

Information used

• Order information: the email address, name, and billing information entered at checkout; payment and order references; amount, currency, payment status, and refund or dispute information.
• Delivery information: the email address used to deliver the pack, the email delivery reference and status, and the order information needed to authorize a private download.
• Support messages: the information you send us when asking for help or requesting a refund.
• Technical information: request details such as IP address, browser information, time, and security or error logs handled by the hosting and payment services.

Stripe handles payment credentials in its checkout. The 22 DAYS website does not receive or store your full card number or security code. The downloaded workbook and exercises are used on your own device; the website does not ask you to upload your personal reflections.

Purposes and legal bases

We use order and contact information to process the purchase, deliver the materials, answer purchase-related questions, and handle refunds. This processing is necessary to perform the purchase contract or take steps you request before buying.

Records may also be used to meet applicable accounting or legal obligations. Security checks, troubleshooting, prevention of unauthorized downloads, and handling disputes rely on legitimate interests in protecting the service and resolving problems, subject to your rights.

We do not currently run a marketing newsletter or advertising pixels on these landings. Buying the pack does not sign you up for promotional email. Necessary order and support messages are separate from marketing.

Services involved

• Stripe processes payments, stores payment and order records, and provides payment-status and fraud-prevention services.
• Resend sends the delivery email and processes recipient and delivery information.
• Vercel hosts the website and download service; Vercel Blob stores the product ZIP privately.
• Hostinger provides the domain and the support mailbox.
• Google Fonts supplies fonts for the reference landing. Font requests may transmit your IP address and browser request information to Google.

These services receive information relevant to their role. Payment providers may also act independently for their own payment, security, or legal obligations. Their notices explain those activities. Information may be disclosed when required by law or needed to handle a payment dispute. We do not sell customer information.

International processing

Some service providers operate internationally, so information may be processed outside your country or the European Economic Area. The applicable provider agreements describe the locations and transfer safeguards, which may include adequacy decisions or standard contractual clauses. Contact info@22-days.com for information about a particular provider or transfer.

How long information is kept

Order, payment, and refund records are kept for the periods needed to fulfill the purchase and meet applicable recordkeeping, legal, and dispute requirements. Support messages are kept for as long as needed to deal with the request and any related claims. Hosting and email logs follow the retention available in the services used.

The expiry of a 30-day download link does not automatically delete the underlying payment record. You can ask us about the information associated with a particular order.

Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or object to certain processing. Where processing depends on consent, you can withdraw it without affecting processing that took place before withdrawal.

Send requests to info@22-days.com, preferably using the email associated with your order. We may need proportionate information to confirm that a request concerns your data. Some records may need to be retained to meet legal obligations or resolve claims.

You can also complain to the data protection authority where you live. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

Cookies, security, and updates

See the Cookie notice for the essential checkout cookie and third-party payment technologies. Private download links function as access credentials: keep them private. No online service can guarantee absolute security.

We update this notice when the service or its data practices change. The date at the top identifies this version. If optional marketing or analytics is introduced, the relevant information and consent choices will be provided before those tools are enabled where consent is required.