What we collect. To deliver a code we process the radio serial number (and, for some brands, the device number and production date). On the website we also process your email address; in our Telegram bot we process your Telegram chat id instead, which is the only identifier we hold for you there — we do not ask for your email, your name or your phone number, and we do not store your Telegram username. We do keep the message you send when looking up a code, exactly as typed — that is how we tell what you typed from what we understood — but nothing else from the chat. If you pay to skip the wait, payment is handled entirely by PayPal — including card payments, which go through its guest checkout. We never see or store your card details.
What we use it for. Solely to calculate and deliver your radio code, answer your support requests and process refunds. We send the code to you the same way you asked for it — by email if you ordered on the website, in the chat if you ordered through our Telegram bot — and we use your address or chat id for nothing else. No newsletters, no mailing lists, no selling of data. The legal basis is the contract you asked us to perform; keeping a record of orders we have answered rests on our legitimate interest in handling refunds, disputes and misuse.
Retention. Order records (serial, email or chat id, code issued) are deleted automatically 12 months after the order. We keep them that long because a card payment can be disputed for up to 180 days and we may need the paperwork afterwards. Ask us before that and we delete your record straight away.
If you use our Telegram bot, the code we send stays in that chat until you delete it. Telegram keeps chat history on its own servers, so anyone with access to your Telegram account can read it later. Delete the message once the radio is unlocked. Telegram itself is a separate company and its own privacy policy applies to everything you send through it.
Third parties. Payment processing (PayPal, including card payments through its guest checkout) and hosting providers receive only the data they need to perform their function. We do not share your data with anyone else.
Cookies. Two first-party cookies, both strictly functional. One remembers your session so we can count visits and see where the order flow breaks — it holds a random id, nothing about you. The other is set only for the site owner. There are no third-party cookies, no advertising or cross-site tracking, and nothing is shared with anyone. Visitor IP addresses are stored only as a salted one-way hash, which we cannot reverse back to an address.
Your rights. You can request a copy of your data, its correction or its deletion, object to our processing of it, or ask for it in a portable form — by emailing [email protected]. We answer within 30 days. If you think we have handled your data wrongly you may also complain to the data protection authority where you live.
Controller. The data controller is Alexander Drachan PR Novi Sad, Katolička porta 6, 21000 Novi Sad, Serbia. Write to [email protected] about your data.