Privacy Policy

Last updated: October 14, 2026

At The Control Protocol, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, make a purchase, or contact us.

1. Who We Are

The website thecontrolprotocol.com is operated by:

The Control Protocol
Email: info@thecontrolprotocol.com

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), we are responsible for the processing of your personal data described in this policy.

2. Personal Information We Collect

We may collect the following categories of personal information:

• Contact information: Your name, email address, billing address, and other details you provide during checkout.

• Order information: Products purchased, transaction details, order history, and payment status.

• Payment information: Payments are processed by third-party payment providers. We generally do not receive or store your full payment card details.

• Technical information: Your IP address, browser type, device information, and information about how you interact with our website, where collected.

• Customer support information: Information you provide when contacting us with questions or requests.

• Marketing preferences: Your preferences and consent regarding promotional emails, where applicable.

Please do not send us sensitive personal information unless it is necessary for a specific request.

3. How We Use Your Information

We use your personal information for the following purposes:

• To process and fulfil your orders.

• To provide access to digital products and deliver purchase confirmations.

• To process payments and help prevent fraud.

• To respond to customer service enquiries.

• To maintain, secure, and improve our website and services.

• To comply with legal, accounting, and tax obligations.

• To send marketing communications where permitted by law and, when required, with your consent.

• To establish, exercise, or defend legal claims where necessary.

4. Legal Bases for Processing

Under the GDPR, we process personal data on one or more of the following legal bases, depending on the circumstances:

• Contract: Processing necessary to complete your purchase and provide your digital product.

• Legal obligation: Processing required by applicable tax, accounting, or other laws.

• Legitimate interests: Processing necessary to protect our business, prevent fraud, secure our website, and respond to certain enquiries, provided your rights do not override those interests.

• Consent: Processing based on your consent, such as certain marketing communications or non-essential cookies where consent is required.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Payments and Third-Party Services

Our online store is hosted by Shopify. We may use Shopify and other third-party providers to operate our store, process payments, deliver digital products, analyse website performance, and provide customer support.

These providers may process personal information in accordance with their own privacy policies and our instructions, where applicable.

Depending on the services enabled in our store, your information may be shared with:

• Shopify and relevant store service providers.

• Payment processors and fraud-prevention providers.

• Digital product delivery providers.

• Website analytics and advertising providers, where enabled.

• Accountants, professional advisers, or public authorities where necessary.

We do not sell your personal information to third parties in exchange for money.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the store, remember preferences, measure website performance, and support marketing activities.

Strictly necessary cookies may be used where required to provide the website and services. Where legally required, we will request your consent before using non-essential analytics or advertising cookies.

You can manage available cookie preferences through our website's cookie settings, where provided, and through your browser settings. Disabling certain cookies may affect website functionality.

7. International Data Transfers

Some of our service providers may process personal information outside the European Economic Area (EEA). Where personal data is transferred internationally, we will rely on an appropriate legal transfer mechanism and applicable safeguards where required by data protection law.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing purchased products, managing customer support, resolving disputes, and meeting legal obligations.

Order, transaction, and accounting records may be retained for the period required by applicable law. Other information is deleted or anonymised when it is no longer needed, subject to legal requirements.

9. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal data.

• Request restriction of processing.

• Object to certain processing activities.

• Request data portability.

• Withdraw consent where processing is based on consent.

• Lodge a complaint with a data protection authority.

To exercise your rights, contact us at info@thecontrolprotocol.com. We may need to verify your identity before responding.

10. Children's Privacy

Our products are intended for adults. We do not knowingly collect personal information from children where doing so would be contrary to applicable law. If you believe a child has provided us with personal information, please contact us so we can assess and address the matter.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage can be guaranteed to be completely secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The latest version will be published on this page with its updated date.

13. Contact Us

If you have questions about this Privacy Policy or how your personal information is handled, contact:

The Control Protocol
Email: info@thecontrolprotocol.com