Privacy Policy

This Privacy Policy applies to the website and services operated by Design by KJ, trading as DigiVisionWorld (hereinafter "we", "us", or "our").

We provide web design, graphic design, branding, and digital product creation services, as well as selling downloadable digital products (e-books, templates, brand kits, design assets) through our online shop.

For the purposes of the GDPR, DigiVisionWorld acts as the data controller responsible for personal data collected through this website.

We collect personal data only when you actively provide it or when it is generated through your use of our website.

Information you provide directly

• Contact form enquiries: submitted via our contact form (built with SureForms) — name, email address, project description, selected services, and optional budget range.
• Purchases: name, email address, billing address (if invoicing is required), and order details, collected via our Easy Digital Downloads e-store. Payment card details are processed securely by our payment provider — we do not store card data.
• Newsletter sign-up: email address, collected only with your explicit opt-in consent (planned feature).
• Direct correspondence: any information you include when emailing us, such as project briefs or brand assets.

Information collected automatically

• IP address, browser type and version, operating system.
• Pages visited, time spent, referral URL.
• Cookie identifiers — see Section 7 and our full Cookie Policy.
• Google Search Console: aggregated, largely non-personal search-performance data about the website (indexing status, search queries, click-through rates) rather than data tied to individual visitors.

We will never sell your personal data to third parties, use it for automated profiling that produces legal effects, or send you marketing without your explicit consent.

We process your personal data under the following legal bases as set out in Article 6 of the GDPR:

• Contractual necessity (Art. 6(1)(b)): processing required to fulfil your order or service contract.
• Consent (Art. 6(1)(a)): newsletter subscriptions and non-essential cookies — you may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f)): responding to contact enquiries, website security, fraud prevention.
• Legal obligation (Art. 6(1)(c)): tax record-keeping and compliance obligations.

We do not sell, rent, or trade your personal data. To run this website and deliver our services, we rely on the following categories of third-party providers, each acting as a data processor (or, for payments, an independent controller) under appropriate contractual safeguards:

• Hosting & content management: our WordPress hosting provider, storing the website's files and database.
• Website builder & caching: Elementor (page building) and WP Fastest Cache (performance caching) — these operate at the technical/infrastructure level and do not independently collect personal data beyond standard caching functions.
• SEO tools: Rank Math (on-site SEO, sitemaps) and Google Search Console (search performance monitoring).
• Contact forms: SureForms, used to collect and route contact-form submissions to our inbox.
• E-commerce: Easy Digital Downloads, processing digital product orders, together with its integrated payment gateway (e.g. Stripe and/or PayPal) — PCI-DSS compliant; card data never touches our servers.
• Analytics (future): Google Analytics, only once activated and only after you consent via our cookie banner — see Section 7.

Where required, we enter into data processing agreements (or rely on each provider's standard terms incorporating GDPR-required clauses) with every processor that handles personal data on our behalf.

When you purchase a digital product from our shop:

• Your order and download history is stored in our system to allow re-downloads and proof of purchase.
• Payment is processed by our payment provider. We receive a transaction confirmation but never store full card details.
• A purchase receipt is sent to your email. We retain order records for 7 years to comply with Estonian and EU accounting regulations.
• Digital products are delivered via a secure, uniquely generated download link tied to your order rather than an open file directory.
• Refunds: due to the instant-access nature of digital products, all sales are final once download begins, unless the file is demonstrably corrupted or materially misdescribed. See our Refund Policy for full details.

We use cookies to make our website work and, only where you consent, to understand how visitors use it. Cookies fall into four categories: Necessary (always on, required for the site and shopping cart to function), Functional, Analytics, and Marketing (not currently used).

For the full list of cookies we use — including individual cookie names, their exact purpose, duration, and provider — see our dedicated Cookie Policy, which forms part of this Privacy Policy by reference.

You can manage your cookie preferences at any time via the "Cookie Settings" link in the footer, or through your browser settings. Withdrawing consent will not affect data already processed lawfully.

Some of our service providers (for example, Google, and certain payment processors) may process data on servers located outside the European Economic Area (EEA), including in the United States. Where this occurs, we ensure an adequate level of protection through one or more of the following safeguards:

• The provider is certified under an applicable EU–US data transfer framework (e.g. the EU–U.S. Data Privacy Framework), or
• The transfer is governed by the European Commission's Standard Contractual Clauses (SCCs), or
• Another legally recognised safeguard under Chapter V GDPR applies.

You may request further details of the safeguards applied to a specific transfer by contacting us at info@digivisionworld.com.

• Contact enquiries: retained for 2 years from the date of last communication.
• Order records / invoices: 7 years (Estonian Accounting Act requirement).
• Newsletter subscriptions: until you unsubscribe.
• Analytics data (once enabled): anonymised; individual session data deleted after 26 months.

After the retention period, data is securely deleted or permanently anonymised.

Our services and digital products are intended for individuals aged 16 or over (or the applicable age of digital consent in your EU member state). We do not knowingly collect personal data from children below this age. If we become aware that we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe a child has provided us with personal data should contact us at info@digivisionworld.com.

Under GDPR you have the following rights regarding your personal data:

To exercise any right, email info@digivisionworld.com with the subject line "GDPR Request." We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• HTTPS / TLS encryption for all data in transit.
• PCI-DSS compliant payment processing (no card data stored on our servers).
• Regular WordPress core, theme, and plugin updates (Elementor, Rank Math, WP Fastest Cache, SureForms, Easy Digital Downloads).
• Limited access to personal data on a need-to-know basis.
• Secure, unique download links for digital products rather than open file directories.

No system is completely secure. If you believe your data has been compromised, please contact us immediately.

Our website may contain links to external sites (social media, partner tools). These sites have their own privacy policies and we have no control over, and accept no responsibility for, their practices. We recommend reviewing each site's privacy policy before submitting personal data.

For any privacy-related questions or to exercise your rights, contact us:

If you are unsatisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

This policy may be updated from time to time. Material changes will be announced on this page. Continued use of the website after changes constitutes acceptance of the revised policy.