Privacy Policy

This policy explains what personal data CuteBFS collects, why, and your rights. The controller of your data is FREE SITES LIMITED, registered office: Platonos & K. Mourouzi 1, 4001 Limassol, Cyprus. Contact us about your data at support@cutebfs.com.

What we collect

• Your answers to the questionnaire, as you give them, with the country we derive from your IP address (not the address itself), whether or not you go on to create an account.
• Your email address, when you create an account.
• Your membership and payments: the plan, amount, currency, dates, status, and the card type and masked card number (for example 4242 •••• 4242) that our payment provider sends back. We never receive your full card number or security code.
• Your password, stored only in hashed form.
• The emails we send you: when each was sent, delivered and opened (through a small image our email provider, Mailgun, adds), and whether it bounced. Kept for 12 months.
• Technical data: the IP address you signed up and paid from, the country we derive from it, and the logs our servers and video delivery network keep for security.
• Cookies: see our Cookie Policy.

Why we use it

• To create your account, take your payment, give you access and email you your login: this is needed for our contract with you.
• To show prices in your currency, see how the questionnaire is used and improve it, prevent fraud and abuse, and keep the site secure: our legitimate interests.
• To keep payment and accounting records: our legal obligations.
• To measure how the site is used with Google Analytics: only with your consent, which you can withdraw at any time.

We do not sell your data or use it for advertising profiles. If you leave your email address but do not complete your purchase, we may send you one email with a time-limited discount, and one reminder before it ends, as part of that purchase: our legitimate interest. Each has an unsubscribe link, and we send no other promotional emails.

Who we share it with

Only the service providers that run the site for us, under contracts that restrict their use of your data:

• our payment gateway SepaBill and its card acquirer Revolut, which process your payment;
• Mailgun (EU region), which sends our emails;
• our hosting, storage (Wasabi) and video delivery (Bunny.net) providers;
• Google, for analytics, only if you accept analytics cookies.

We may also disclose data where the law requires it. Where a provider handles data outside the European Economic Area, the transfer is protected by standard contractual clauses or an adequacy decision.

How long we keep it

Questionnaire answers not linked to an account are deleted after 12 months; answers linked to an account are kept with it. We keep your account for as long as you have a membership and for two years after it ends, then delete it or make it anonymous. Payment records are kept for as long as accounting and tax law requires, usually six years. Server logs are kept for a short time only.

Your rights

You may ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Email us from the address on your account and we will answer within a month. If you are unhappy with our answer you may complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or the data protection authority where you live.

Security and age

Your data is sent over encrypted connections and access to it is restricted. The site is only for adults; we do not knowingly collect data from anyone under 18.

Changes

We will post any change to this policy here, with its date.