Legal
Privacy notice
Who we are
Avenlo is a trading name of Youna Cho. Youna Cho is the data controller responsible for personal data collected through this website and decides how and why that data is processed.
Data we collect
Account details (email address, login credentials), order and entitlement records, support messages you send us, newsletter sign-up details if you opt in, and limited usage and device data such as IP address and pages visited.
Why we use it
To create and maintain your account and deliver purchased files (performance of our contract with you); to provide customer support (contract and legitimate interests); to keep the service secure and prevent fraud (legitimate interests); to improve our resources and site (legitimate interests); to send newsletters (your consent, withdrawable at any time); and to meet accounting and tax obligations (legal obligation).
Who we share it with
Hosting, database and email service providers who process data on our behalf; Paddle.com, our Merchant of Record, for the sale of our products, payments, invoicing and tax compliance; professional advisers such as accountants; and authorities where required by law. Payment card details are collected and processed by Paddle, not by us.
International transfers
Our providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or an adequacy decision.
Retention
Account and order records are kept while your account is active and afterwards for as long as required for accounting and legal purposes. Newsletter data is deleted when you unsubscribe. Data no longer needed is deleted or anonymised.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and restricted administrative access, to protect personal data against loss, misuse and unauthorised access.
Your rights
You may request access, correction, erasure, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. Contact us through the contact page; we aim to respond within one month. You may also complain to your local data protection authority.
Cookies
See our cookie policy for the essential and analytics cookies we use and how to manage them.