Privacy policy

1. Introduction

This privacy policy explains how Lolk Safety, operating LolkV.com, collects, uses and protects personal data when you visit our website, create an account, purchase a subscription, download a product or request support.

We do not sell personal data or use it for behavioural advertising.

2. Data controller

The data controller is Lolk Safety, Sanderumvej 82, 5250 Odense SV, Denmark, VAT number DK33799888. Questions or requests concerning personal data can be submitted through our contact page.

3. Personal data we collect

Account registration

When you create an account, we collect your name, email address, username and a securely hashed password. We may also record account status, registration date and login-related security information.

Purchases and subscriptions

Paddle acts as Merchant of Record and processes the checkout and payment. We do not receive or store full card or bank account details. Paddle may provide us with information needed to fulfil and administer the purchase, including:

• Name and email address associated with the purchase
• Country and relevant tax information
• Transaction, customer and subscription identifiers
• Purchased product, plan, payment status, renewal date and subscription status

Paddle processes payment data under Paddle's privacy notice.

Downloads, updates and registered websites

To deliver protected downloads and enforce the production website allowance, we process your download key, subscription entitlement and any website URLs and labels you register in your account.

When a protected product package is downloaded, we record the associated key and file, date and time, IP address and browser or client user agent. An update request or download may also identify the product and version involved. We do not collect the content of your Joomla website or personal data about its users through the update service.

Support and contact requests

When you contact us or use the private support desk, we process your account details, message, replies and any files or technical information you choose to provide. Support requests are visible only to you and authorised support personnel, except where disclosure is required to resolve a request or comply with law.

Server and security logs

Our systems automatically log standard access and security data, which may include IP address, browser type, requested page, timestamp and technical error information.

4. How and why we use personal data

We process personal data for the following purposes and legal bases:

• Contract — to create and manage your account, fulfil subscriptions, provide downloads and updates, register covered websites and deliver technical support.
• Legal obligations — to meet accounting, tax, fraud-prevention and other legal requirements.
• Legitimate interests — to secure and operate our website, prevent abuse, maintain download and update services, diagnose faults and defend legal claims.
• Consent — for optional marketing communications or non-essential cookies where consent is required. You may withdraw consent at any time.

We also send essential service messages, such as account notices, purchase and subscription information, download key delivery, renewal or expiry reminders, security notices and replies to support requests. These are not marketing emails.

5. Cookies

LolkV.com uses essential cookies for login, security, checkout integration, cookie preferences and core site functionality. Optional cookies, if enabled, are controlled through the cookie settings available in the website footer.

Paddle and other third-party services may set their own cookies when you open an embedded checkout, customer portal or other externally provided feature. Their use is governed by the relevant provider's privacy and cookie information.

6. Recipients and service providers

Personal data may be shared only where necessary with:

• Paddle — authorised reseller and Merchant of Record for checkout, payments, subscriptions, invoicing, tax and buyer support.
• Hosting, infrastructure and email providers — acting as service providers to operate the website, store data and deliver transactional messages.
• Professional advisers and public authorities — where reasonably necessary to establish or defend legal claims or comply with law.

Some providers may process data outside the European Economic Area. Where required, such transfers are protected by an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

7. Data retention

• Account data is normally retained while the account exists and for any additional period needed to resolve outstanding subscriptions, requests or legal claims.
• Transaction and accounting records are retained for the period required by Danish accounting and tax law, normally up to 5 years.
• Registered website data is retained until you remove the registration, the related entitlement ends or the account is deleted, unless a longer period is required to resolve abuse or a dispute.
• Download, update and security logs are retained only for as long as reasonably necessary for delivery, licensing, security, abuse prevention and legal claims, after which they are deleted or anonymised.
• Support and contact records are retained for as long as needed to handle the request, maintain relevant support history and resolve disputes.
• Routine server logs are normally deleted after 90 days unless a security incident or legal obligation requires longer retention.

8. Your rights

Depending on the circumstances, data protection law gives you the right to:

• Access personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure of data that no longer has to be retained
• Restriction of processing in certain circumstances
• Portability of eligible data in a machine-readable format
• Object to processing based on legitimate interests or direct marketing
• Withdraw consent at any time where processing relies on consent

To exercise a right, please contact us. We may need to verify your identity and will respond without undue delay, normally within one month. Some rights are subject to legal exceptions, including obligations to retain accounting records.

You may also lodge a complaint with the Danish Data Protection Agency or another competent supervisory authority.

9. Data security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, securely hashed passwords, access controls, software updates and security monitoring. No online service can guarantee absolute security.

10. Children

Our commercial services are not directed at children under 16, and we do not knowingly create customer accounts for them. If you believe a child has provided personal data to us, please contact us.

11. Changes to this policy

We may update this privacy policy when our services, providers or legal obligations change. The current version and its effective date will be published on this page.

12. Contact

For questions, requests or complaints concerning this privacy policy or your personal data, please contact us.