OnlyPersona — Privacy Policy

Last Updated: September 11, 2026

1. Who We Are

OnlyPersona ("we," "us," "our") operates the online store at onlypersona.com.

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is [LEGAL COMPANY NAME], registered in Estonia under registry code [REGISTRATION NUMBER], with its registered address at [REGISTERED ADDRESS].

You can contact us about anything in this policy at info.onlygen@gmail.com.

2. What Data We Collect

When you make a purchase:

• Your name and email address
• Billing address and country
• Purchase details (which Kit, price, date, order number)
• Your acknowledgment of our Acceptable Use Policy, and the date and time you gave it

Payment information: We do not collect, see, or store your card details. Payments are processed directly by our payment provider, which handles your card data under its own privacy policy and PCI-DSS obligations.

When you browse the site: IP address, browser and device type, pages viewed, referring site, and similar technical data collected through cookies and our store platform's built-in analytics.

When you contact us: Whatever you include in your message, plus your email address.

What we do not collect: We have no access to your training images, the models you build, or any content you generate using our Kits. As described in our Terms of Service, all of that happens on infrastructure you control. We never receive it.

3. Why We Use It, and Our Legal Basis

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Who We Share It With

We share data only with service providers who need it to run the store:

• Shopify — our e-commerce platform, which hosts the store and processes orders
• Our payment provider — to take payment
• Email and support tools — to send order confirmations and respond to you
• Authorities — where we are legally required to disclose, or where we report a violation of our Acceptable Use Policy as described in our Terms of Service

Each of these processes your data under its own agreement with us and is not permitted to use it for its own purposes.

5. International Transfers

Some of our providers are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, it is protected by an appropriate safeguard under GDPR — normally the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How Long We Keep It

• Order and accounting records: 7 years, as required by Estonian accounting and tax law
• Acceptable Use Policy acknowledgments: as long as we keep the associated order record
• Support emails: up to 2 years after your query is resolved
• Marketing contacts: until you unsubscribe
• Analytics data: as retained by our platform's standard settings

7. Your Rights

Under GDPR you have the right to:

• Access — get a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted, except where we must keep it by law (such as accounting records)
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on our legitimate interests
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these, email info.onlygen@gmail.com. We will respond within one month.

If you believe we have handled your data improperly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the supervisory authority in your own EU country of residence.

8. Cookies

We use cookies that are necessary for the store to work — keeping your cart, remembering your session, and recording your age confirmation — plus analytics cookies to understand how the site is used. You can control non-essential cookies through the cookie banner or your browser settings. Blocking necessary cookies may stop parts of the store from working.

9. Children

Our Services are for adults only. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us personal data, contact us at info.onlygen@gmail.com and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top shows when it last changed. Material changes will be announced on the site.

11. Contact

Questions, requests, or complaints about your data: info.onlygen@gmail.com