Privacy Policy
Effective date: August 2026 | Last updated: August 2026 Version: 4.0
CoverageWon ("CoverageWon," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you have over it.
By using coveragewon.com or purchasing our products, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
Business name: CoverageWon Website: coveragewon.com Contact: support@coveragewon.com Location: Casablanca, Morocco
For EU/EEA residents: CoverageWon acts as the data controller for personal data processed through this website.
2. Data We Collect
2.1 Data You Provide Directly
| Data | When Collected | Why |
|---|---|---|
| Email address | Purchase or email opt-in | Product delivery, marketing (with consent) |
| Name | Purchase checkout (via Paddle) | Order fulfillment |
| General location | Purchase checkout (via Paddle) | Tax compliance (handled by Paddle) and fraud prevention |
2.2 Data Collected Automatically
When you visit coveragewon.com, we automatically collect:
- IP address (anonymized after processing)
- Browser type, version, and language
- Operating system and device type
- Pages visited, time on page, scroll depth
- Referring website or campaign source
- Date and time of visit
This data is collected through cookies and web analytics. See our separate Cookie Policy for full details.
2.3 Data We Do NOT Collect
- Payment card numbers, CVV, or bank details (processed exclusively by Paddle — CoverageWon never receives or stores this data)
- Social Security numbers or government ID numbers
- Health information or medical records
- Sensitive personal data as defined by GDPR Article 9
3. Legal Basis for Processing (GDPR)
For EU/EEA residents, our legal basis for processing your personal data is:
| Processing Activity | Legal Basis |
|---|---|
| Delivering purchased products | Contract performance (Art. 6(1)(b)) |
| Email marketing (opted-in) | Consent (Art. 6(1)(a)) |
| Website analytics | Legitimate interest (Art. 6(1)(f)) |
| Legal compliance (tax records) | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention | Legitimate interest (Art. 6(1)(f)) |
4. How We Use Your Data
We use your personal data strictly for the following purposes:
- Product fulfillment: Sending your digital download link after purchase
- Customer support: Responding to your inquiries
- Email communications: Sending educational content and product information (only when you have opted in)
- Website improvement: Analyzing how visitors use our website to improve it
- Legal compliance: Meeting our obligations under applicable law
- Fraud prevention: Detecting and preventing unauthorized or fraudulent use
We do not:
- Sell your personal data to third parties
- Use your data for targeted advertising on other platforms
- Profile you for automated decision-making that produces legal or significant effects
- Share your data with any party not listed in Section 5
5. Data Sharing and Third Parties
We share your data only with the following parties and only to the extent necessary:
5.1 Paddle (Payment Processor and Merchant of Record)
All transactions on coveragewon.com are processed by Paddle.com Market Limited as our Merchant of Record. Paddle collects payment data, billing address, and name directly from you at checkout. CoverageWon never receives or stores your payment card number, CVV, or bank details.
Paddle's Privacy Policy: https://paddle.com/legal/privacy Paddle is PCI DSS Level 1 certified and independently responsible for the security of payment data it processes.
5.2 Shopify (E-commerce Platform)
Our store is built on Shopify. Shopify processes order data and manages digital download delivery. Shopify is certified PCI DSS Level 1 compliant.
Shopify's Privacy Policy: https://www.shopify.com/legal/privacy
5.3 Analytics Providers
We use privacy-respecting analytics to understand website traffic. Analytics data is aggregated and anonymized where possible. We do not use advertising tracking pixels.
5.4 Legal Authorities
We will disclose your data to law enforcement or regulatory authorities only when required by law, court order, or to protect the rights, property, or safety of CoverageWon or others.
5.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the new owner, subject to the same privacy commitments.
6. International Data Transfers
CoverageWon is based in Morocco. Our service providers (Shopify, Paddle) may process your data in the United States, European Economic Area, and other countries.
For EU/EEA residents: Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable. Shopify and Paddle maintain their own transfer mechanisms under GDPR.
7. Data Retention
We retain your personal data only for as long as necessary:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order and email records | 7 years from purchase date | Tax and legal compliance |
| Email marketing records | Until you unsubscribe + 30 days | Compliance and suppression list |
| Website analytics | 26 months (aggregated) | Industry standard |
| Customer support communications | 3 years | Dispute resolution |
After the applicable retention period, data is securely deleted or anonymized.
8. Your Rights
Depending on your location, you have the following rights:
For All Users
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal retention obligations)
- Right to Withdraw Consent: Withdraw marketing consent at any time via unsubscribe link
Additional Rights for EU/EEA Residents (GDPR)
- Right to Restriction: Request we limit processing of your data in certain circumstances
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interest
- Right to Lodge a Complaint: File a complaint with your national data protection authority
Additional Rights for California Residents (CCPA/CPRA)
- Right to Know: Know what personal information we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Correct: Correct inaccurate personal information
- Right to Opt Out of Sale: We do not sell personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise any right, email: support@coveragewon.com We will respond within 30 days (GDPR) or 45 days (CCPA).
9. Data Security
We implement industry-standard security measures including:
- HTTPS encryption on all pages (TLS 1.2+)
- Payment data processed exclusively by Paddle (PCI DSS Level 1 certified)
- Access to customer data restricted to essential personnel only
- Regular review of data handling practices
No method of transmission over the internet is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law (within 72 hours for GDPR-covered residents where required).
10. Children's Privacy
Our website and products are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us immediately at support@coveragewon.com and we will delete it promptly.
11. Email Communications
Marketing Emails
We send marketing emails only to users who have explicitly opted in. Each email includes an unsubscribe link. You can also unsubscribe by emailing support@coveragewon.com.
Unsubscribe requests are processed within 10 business days.
Transactional Emails
Emails related to your purchase (order confirmation, download link) are transactional and cannot be opted out of, as they are necessary for fulfillment.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by:
- Posting the updated policy on this page with a new effective date
- Sending an email notification to customers where required by law
Your continued use of our website after the effective date constitutes acceptance of the updated policy.
13. Contact and Complaints
Privacy inquiries: support@coveragewon.com Response time: Within 5 business days
EU residents: If you are unsatisfied with our response, you have the right to lodge a complaint with your national Data Protection Authority.