Privacy Policy
Last updated: 27 March 2025

Post Punk Publishing LLP ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your information when you use our website at sto.baza.education and related services.

1. Data Controller
Post Punk Publishing LLP, registered at Stoney Works, 8 Stoney Lane, London, United Kingdom, SE19 3BD. Contact: twopunksnotdead@gmail.com.

2. Data We Collect
We collect the following personal data:

Account data: first name, last name, email address;
Telegram data: Telegram username and user ID (when you link your account);
Payment data: processed securely by Stripe — we do not store card details;
Technical data: IP address, browser type, cookies, pages visited.

3. How We Use Your Data
We process your personal data for the following purposes:

to provide and manage your subscription;
to grant access to the private Telegram channel "YP";
to process payments via Stripe;
to send transactional emails (payment confirmations, subscription updates);
to provide customer support;
to comply with legal obligations.

4. Legal Basis for Processing
We process your data on the following legal bases under UK GDPR:

Contract: processing necessary to perform our subscription agreement with you (Article 6(1)(b));
Legitimate interest: improving our services and ensuring security (Article 6(1)(f));
Consent: for marketing communications, which you can withdraw at any time (Article 6(1)(a));
Legal obligation: where required by law (Article 6(1)(c)).

5. Data Sharing
We may share your data with:

Stripe: for payment processing (see Stripe's Privacy Policy);
Telegram: when you link your account to access the private channel;
Email service providers: for transactional and marketing emails.
We do not sell your personal data to third parties.

6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 6 years to comply with legal and accounting obligations. You may request deletion at any time by contacting us.

7. Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the right to:

Access your personal data;
Rectify inaccurate or incomplete data;
Erase your data ("right to be forgotten");
Restrict processing in certain circumstances;
Data portability — receive your data in a structured format;
Object to processing based on legitimate interest;
Withdraw consent at any time for consent-based processing.
To exercise any of these rights, contact us at twopunksnotdead@gmail.com. We will respond within 30 days.

8. Cookies
8.1. We use cookies to improve your experience on our website.

8.2. You can configure your browser to reject or notify you about cookies.

8.3. Disabling cookies may affect the functionality of certain parts of the website.

9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All payment data is handled by Stripe and transmitted over encrypted connections.

10. International Transfers
Your data may be processed outside the UK where our service providers operate. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Complaints
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect upon publication on this page.

13. Contact
Post Punk Publishing LLP
Stoney Works, 8 Stoney Lane
London, United Kingdom, SE19 3BD
E-mail: twopunksnotdead@gmail.com