1. Data Controller

The data controller responsible for processing your personal data is:

Dishly LLC
30 N Gould St STE R, Sheridan, WY 82801
Email: support@getcalmme.com

2. What Personal Data We Collect

When you visit our website or purchase our digital products, we may collect:

• Name and email address
• Billing and payment information
• IP address and device/browser information
• Purchase and order history
• Communication records (support requests, emails)

3. Legal Basis for Processing

Under GDPR, we only process your personal data when we have a valid legal basis to do so:

• Contract: processing necessary to fulfill your purchase and deliver our digital products
• Legitimate interest: to improve our products, secure our website, and prevent fraud
• Consent: for marketing communications, which you may withdraw at any time
• Legal obligation: to comply with applicable tax, accounting, and legal requirements

4. How We Use Your Data

• Processing and delivering your digital purchase
• Sending order confirmations and download links
• Providing customer support
• Improving our products and website
• Sending marketing communications (with consent)
• Preventing fraud and unauthorized use

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including satisfying legal, accounting, or reporting requirements. Order and billing information is typically retained for the period required by tax law. You may request earlier deletion at any time, subject to our legal obligations.

6. International Data Transfers

Dishly LLC is based in the United States. If you are located in the EEA, your personal data will be transferred outside the EEA to be processed. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data to the same standard as required within the EEA.

7. Third-Party Data Processors

We work with trusted third-party service providers (such as payment processors, email service providers, and website hosting services) who process personal data on our behalf. All such processors are bound by data processing agreements requiring them to protect your data in compliance with GDPR.

9. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at support@getcalmme.com with your request. We will respond to all legitimate requests within 30 days, as required by GDPR. We may need to verify your identity before processing certain requests.

10. Data Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including secure payment processing and encrypted data transmission where applicable.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority without undue delay, in accordance with GDPR requirements.

12. Changes to This Policy

We may update this GDPR Compliance page periodically to reflect changes in our practices or applicable law. Any changes will be posted here with an updated revision date.