Privacy policy
Effective date: 26 July 2026. This policy explains how MetaGlos processes personal data when you browse metaglos.com, create an account, buy or download an ebook, contact support, or exercise a data-protection right.
Controller and contact
MetaGlos is the controller for storefront, account, order, support and first-party aggregate measurement data. For privacy questions or requests, email info@metaglos.com. MetaGlos has not appointed a data protection officer because its current processing does not require one.
Data processed
- Account and contact data: name, email address, username, password hash and account preferences.
- Order and billing data: billing details required by checkout, purchased titles, prices, taxes, currency, order status, payment method, transaction references and the immediate-delivery acknowledgement. MetaGlos does not receive or store your complete payment-card number.
- Download and support data: download permissions and counts, order-linked access records, messages sent to support and the information needed to investigate delivery, payment or file problems.
- Security and technical data: IP address, timestamps, request and error logs, browser/device information made available in standard web requests, and security signals used to prevent abuse and keep the service available.
- Aggregate storefront metrics: daily counts of product views, add-to-cart events and searches by product or language. This custom measurement does not store visitor IDs, IP addresses, user agents, cookie IDs or search terms.
Purposes and legal bases
- Contract: to operate checkout, process an order, make purchased files available, maintain your account and provide customer support.
- Legal obligation: to keep records required for accounting, taxation, consumer protection, fraud prevention, payment disputes and regulatory requests.
- Legitimate interests: to secure the website, diagnose failures, prevent misuse, defend legal claims, understand aggregate storefront performance and improve catalogue navigation without building visitor profiles.
- Consent: where an optional operation legally requires consent. Immediate digital delivery is governed by a separate express checkout acknowledgement and is not consent for advertising or profiling.
Recipients and processors
Personal data is disclosed only where needed to operate the store or comply with law. Relevant recipients may include the website host, email infrastructure, professional advisers and public authorities. If you choose PayPal, payment data is processed by PayPal. If you choose a card or another WooPayments method, payment and device data may be processed through WooPayments, Stripe and fraud-prevention infrastructure such as Sift. Those providers act under their own privacy terms for parts of their processing. MetaGlos does not sell personal data.
Some providers may process data outside the European Economic Area. Where European data-protection law requires safeguards, the provider or MetaGlos relies on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Provider privacy information is available during the relevant payment or service flow.
Cookies and local storage
MetaGlos uses necessary WooCommerce and WordPress technologies to maintain the cart, checkout, account login, security and user choices. Payment providers may set necessary fraud-prevention or transaction cookies when their services are used. The custom aggregate revenue and discovery measurement does not use a visitor cookie. MetaGlos does not use its own advertising or cross-site profiling cookies. If optional services that require consent are enabled later, they must not run before the required choice is obtained and this policy must be updated.
Retention
Order, invoice, payment-reference and consent records are retained for the statutory accounting, tax, consumer-claim and dispute periods that apply to the transaction. Account data is kept while the account remains active and then deleted or anonymised when it is no longer required, subject to those legal records. Download permissions remain linked to the purchase while access is offered. Support correspondence and security logs are kept only as long as reasonably needed to resolve the request, protect the service or establish, exercise or defend legal claims. Aggregate metrics that no longer identify a person may be retained for business comparison.
Your data-protection rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or objection, and may withdraw consent where processing is based on consent. A request does not override records MetaGlos must retain or processing required to establish or defend legal claims. Email info@metaglos.com from the relevant account email and describe your request. MetaGlos may request proportionate information to verify identity before disclosing or changing account data.
You may lodge a complaint with the Belgian Data Protection Authority or the competent supervisory authority where you live or work. Information and complaint channels are available at dataprotectionauthority.be.
Automated decisions, children and security
MetaGlos does not use customer data for automated decisions that produce legal or similarly significant effects. The store is not directed to children and MetaGlos does not knowingly solicit orders from children who cannot lawfully contract. Reasonable technical and organisational safeguards are used, but no internet service can promise absolute security.
Policy changes
This notice may be updated when the storefront, providers or legal duties change. The effective date above identifies the current version. Material changes will be presented through an appropriate storefront or account notice where required.