The data controller is Pyyrah Limited (trading as Pyyrah+), a private limited company registered in England and Wales (company number 12176473) with its registered office at 27 Old Gloucester Street, London WC1N 3AX.
For any privacy question, data-rights request, or concern, contact privacy@pyyrahplus.com. We respond within 30 days, normally much faster.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/concerns. We'd prefer you contact us first so we can resolve directly, but you can go to the ICO at any time.
We collect data in three contexts: when you visit the website, when you purchase Pyyrah+, and when you use the product after purchase.
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Delivering Pyyrah+ to you | Account credentials, niche/handle, DFY submissions, Voice Profile | Performance of contract (Art. 6(1)(b)) |
| Processing payments and refunds | Stripe data, billing email, order metadata | Performance of contract; legal obligation |
| Providing customer support | Support correspondence, login data, account details | Performance of contract |
| Improving the product | Aggregated, anonymised platform usage data | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails (where you've consented) | Email, name, marketing-engagement signals | Consent (Art. 6(1)(a)) |
| Website analytics (after consent) | Page-view and session data | Consent |
| Legal compliance (tax, accounting, dispute resolution) | Transaction records | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention | IP address, payment-method patterns, chargeback signals | Legitimate interest |
We share your data only with: (a) the processors listed in Section 5, who process data on our behalf under written agreements complying with UK GDPR Article 28; (b) professional advisers (accountants, lawyers, auditors) where required and under confidentiality; (c) authorities where required by law or to defend against legal claims; (d) acquirers, in the event Pyyrah Limited is acquired, restructured, or merged - and only after we ensure the acquirer accepts equivalent privacy obligations.
We do not sell your personal data. We do not share it with advertisers, data brokers, or anyone else for monetisation purposes.
These are the service providers that process personal data on our behalf to operate Pyyrah+. Each is contractually bound by UK GDPR Article 28 obligations.
| Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe Payments Europe Ltd | Payment processing, refunds, fraud prevention | Name, email, billing country, IP, payment details | Ireland / EU; some transfers to Stripe Inc. (US) under SCCs |
| Shopify International Ltd | Course hosting and content delivery | Name, email, course access logs, content engagement | Ireland / EU |
| Brevo (Sendinblue SAS) | Transactional and marketing emails (where consented) | Name, email, engagement signals | France / EU |
| Cookiebot (Cybot A/S) | Cookie consent management | Consent state, IP (hashed) | Denmark / EU |
| Cloudflare Inc. | Website performance, security, DDoS protection | IP address, request metadata | US under SCCs and UK adequacy |
| Google LLC (Workspace) | Email infrastructure, document collaboration | Support correspondence, internal records | US under SCCs and UK adequacy |
| Plausible Analytics | Website analytics (privacy-respecting; no individual tracking) | Aggregated, anonymised visit data only | EU |
If we add or change a processor, we update this list. Subscribers to product news are notified when a material change occurs.
Where data is transferred outside the UK or EEA, we rely on UK GDPR Article 46 safeguards: the UK government's adequacy decisions (where they exist for the destination country), the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses with the UK addendum.
Our main non-UK/EEA processor is Stripe Inc. (US), used for payment processing. Stripe operates under the EU-US Data Privacy Framework and the UK extension to that Framework. Cloudflare and Google Workspace also process some data in the US under equivalent safeguards.
Under UK GDPR you have the right to:
To exercise any of these rights, email privacy@pyyrahplus.com. We respond within 30 days. Identity verification may be required for security reasons. There is no charge for exercising these rights except where requests are manifestly unfounded or excessive.
After the retention period expires, we delete or fully anonymise the data.
We protect your data with technical and organisational measures appropriate to the risk: TLS 1.2+ encryption in transit; encryption at rest for all customer data; access controls based on least-privilege; multi-factor authentication for all team members with access to customer data; regular security review of our processors; and a documented incident response procedure.
If we ever suffer a personal-data breach that's likely to result in a high risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by UK GDPR Article 33.
We only send marketing emails to people who have opted in. Opt-in is via a clear checkbox at the relevant point (lead-magnet signup or post-purchase confirmation), separate from any consent required to deliver the product itself. You can unsubscribe at any time using the link in any marketing email, or by emailing privacy@pyyrahplus.com.
Transactional emails (order confirmation, refund confirmation, support replies, security notifications) are sent on the lawful basis of contract performance and are not subject to marketing opt-in.
Pyyrah+ uses cookies and similar technologies. The full list, what each cookie does, and how to manage consent is in our Cookie Policy. Non-essential cookies are only set after you grant consent via our cookie banner.
Pyyrah+ is sold to and intended for use by individuals aged 18 or over. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact privacy@pyyrahplus.com and we will delete it.
For any privacy question or to exercise your rights:
Email: privacy@pyyrahplus.com
Response time: within 30 days, usually much faster
Postal: Pyyrah Limited, 27 Old Gloucester Street, London WC1N 3AX
ICO: ico.org.uk/concerns
We respond to all privacy requests within 30 days.
Contact privacy@pyyrahplus.com