Privacy Policy — The Reverse Frequency
Privacy Policy

Privacy Policy

How DGFortuna, operator of thereversefrequency.com, collects, uses, stores, and protects your personal information — in compliance with PIPEDA (Canada), GDPR (EU/UK), and applicable U.S. privacy regulations.

Data Controller: DGFortuna (operating as The Reverse Frequency)
Contact: support@thereversefrequency.com
Effective Date: May 2026

1. Information We Collect

We collect personal information only to the extent necessary to deliver our products, communicate with you, and operate our business lawfully.

1.1 Information you provide directly

  • Email address — provided at checkout and used for product delivery, customer support, and post-purchase communications.
  • Name — collected by Digistore24 at checkout for billing purposes.
  • Billing information — processed exclusively by Digistore24 GmbH; we never receive or store your payment card details.

1.2 Information collected automatically

  • IP address — for security, fraud prevention, and aggregated analytics.
  • Browser type, operating system, device type — for compatibility and analytics.
  • Pages visited, time on site, referrer URL, click events — via Facebook Pixel and Utmify for advertising attribution and funnel optimization.
  • UTM parameters — from advertising campaigns, used to attribute purchases to their source.

2. Why We Collect Your Information

We process your personal information for the following lawful purposes:

  • To fulfill your order — process payment (via Digistore24), deliver downloads, and provide post-purchase support.
  • To communicate with you — send order confirmations, delivery emails, customer support responses, and educational follow-up sequences related to your purchase.
  • To operate and improve our website — analyze traffic patterns, optimize page performance, and reduce fraud.
  • To advertise responsibly — measure the effectiveness of our advertising and reach prospective customers with relevant offers.
  • To comply with legal obligations — tax records, anti-fraud requirements, and consumer-protection law.

Under GDPR, the lawful bases we rely on are: (a) contract performance for order fulfillment, (b) legitimate interest for analytics and fraud prevention, (c) consent for marketing communications, and (d) legal obligation for tax and consumer-protection records.

3. Third-Party Service Providers

We share specific data with the following processors strictly for the purposes described. We do not sell your personal information to anyone, ever.

Provider Purpose Location
Digistore24 GmbH Payment processing, billing, refunds, file delivery Germany (EU)
Brevo (Sendinblue) Transactional and marketing email delivery France (EU)
Meta Platforms (Facebook) Advertising attribution and audience optimization (via Pixel) USA & Ireland
Utmify UTM tracking and ad-spend attribution Brazil
Hostinger Website hosting Lithuania (EU)
VTurb (ConverteAI) Video player and viewing analytics Brazil
Cloudflare CDN, security, and DDoS protection USA

Each of these providers is contractually bound to process your data only for the purposes specified and to maintain industry-standard security. For details on each provider's privacy practices, refer to their published policies.

4. How Long We Keep Your Data

  • Customer purchase records — retained for 7 years (Canadian tax-record requirement).
  • Email subscription data — until you unsubscribe or request deletion.
  • Website analytics data — aggregated and anonymized after 26 months.
  • Support correspondence — retained for 24 months after the last contact.

5. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal information:

  • Right of access — request a copy of the personal data we hold about you.
  • Right of rectification — correct inaccurate or incomplete data.
  • Right of erasure ("right to be forgotten") — request deletion of your data, subject to legal retention obligations.
  • Right to restrict processing — ask us to pause use of your data while a dispute is resolved.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — opt out of marketing communications and certain forms of processing.
  • Right to withdraw consent — revoke previously granted consent at any time.

To exercise any of these rights, email support@thereversefrequency.com with the subject line "Privacy Request" and a description of your request. We will respond within 30 days.

EU residents may also lodge a complaint with their national data protection authority. Canadian residents may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

6. Cookies & Tracking Technologies

This website uses cookies and similar technologies for the following purposes:

  • Essential cookies — required for the website to function (e.g., remembering your session during checkout).
  • Analytics cookies — aggregated traffic data (Facebook Pixel, Utmify).
  • Advertising cookies — used to measure ad effectiveness and reduce duplicate exposure.

You can control cookies through your browser settings. Disabling cookies may affect site functionality, particularly the checkout process.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, alteration, or disclosure. These include encryption in transit (HTTPS/TLS), restricted-access systems, and security audits with our third-party processors.

No system is completely secure, however, and we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you and the relevant authorities within the legally required timeframes.

8. Children's Privacy

This website is intended for adults aged 18 or older. We do not knowingly collect personal information from children under 18. If you believe we have collected data from a minor, contact us at support@thereversefrequency.com and we will delete it promptly.

9. International Data Transfers

As our business operates from Canada and works with providers in the EU, USA, and Brazil, your data may be transferred across international borders. Where we transfer EU/UK personal data outside those regions, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date below reflects the most recent revision. Material changes will be communicated via email to active customers and via a notice on this page.

11. Contact

For any questions, concerns, or requests related to this Privacy Policy, contact:

Last updated: May 2026.