• Data Controller: Heart 2 Heart Communication AB, based at C/O Bookwise, Kammakargatan 47, 111 24 Stockholm, Sweden, is the entity responsible for your personal data under this policy. Reach us at hello@the-origin.life.

To bring you the best experience, we collect:

• Registration Details: When you create an account, we gather your first name, last name, email address, and password.
• Contact Form Details: For general inquiries or collaboration proposals via our contact page, we collect your name, email address, phone number, company/organization name (if applicable), and message content.
• Purchase Records: We keep records of films you purchase (e.g., The Origin of Life shorts) and transactional data to ensure access and support.
• Website Usage: We may use cookies or analytics tools to understand how you browse our site—e.g., pages visited or device type—to improve your experience. (Details in “Cookies” below.)

We use your data to:

• Create and manage your account on www.the-origin.life.
• Process your purchases and grant access to films via your lifetime streaming license.
• Respond to inquiries or collaboration requests (e.g., educational screenings per FAQ).
• Provide customer support and update you on account matters or service enhancements.
• Analyze site usage (anonymized) to refine our platform.
• Legal Basis: We process data to fulfill our contract with you (account, purchases), with your consent (contact form, cookies), or for our legitimate interests (support, improvements)—all balanced with your rights.

• Stripe: All transactions are handled by Stripe, a secure payment platform. Your card details are encrypted and processed solely by Stripe—we don’t store them. Stripe meets PCI DSS standards to protect against fraud and unauthorized access. Learn more at stripe.com.

• We may use cookies or similar tools (e.g., Google Analytics) to enhance your visit—tracking site performance or preferences. You can manage these via your browser settings. We’ll ask for your consent where required (e.g., non-essential cookies).

• Storage: Your data is stored securely on servers within the EU/EEA, protected by industry-standard encryption and access controls.
• Retention: We keep your information while your account is active. If you delete your account (per your rights below), all personal data is erased within 30 days—note this ends access to purchased films, as streaming requires an active account (T&C Point 2). Transaction records may be retained longer for legal compliance (e.g., tax laws).

• No Selling: We don’t sell, rent, or share your data with third parties for marketing.
• Trusted Partners: Stripe processes payments; hosting providers (e.g., Vimeo) support streaming—both under strict confidentiality agreements.
• Legal Needs: We may share data if required by law (e.g., court order) or to protect our rights (e.g., piracy enforcement per T&C Point 8).
• International Transfers: Data may go outside the EU/EEA (e.g., Stripe’s U.S. servers) under GDPR safeguards—Standard Contractual Clauses ensure protection.

• Our films are suitable for all ages (T&C Point 5), loved by kids 5-8 with parental supervision. We don’t knowingly collect data from children under 16 without parental consent. If you’re a parent and believe we’ve collected your child’s data, contact us to review or delete it.

• We use robust measures—encryption, firewalls, secure servers—to guard against unauthorized access, disclosure, or misuse. While no system is 100% secure, we strive to keep your data safe. Please use strong passwords and protect your login details (T&C Point 5).

• Our contact form is for inquiries and collaborations (e.g., educational licensing per FAQ 5). Data shared here is used only to reply—never for marketing unless you agree.

Under GDPR and Swedish law, you can:

• Access: Review your data.
• Correct: Update inaccuracies.
• Delete: Erase your account and data (losing film access).
• Portability: Request your data in a usable format.
• Restrict: Limit processing in certain cases (e.g., disputes).
• Object: Opt out of non-essential uses (e.g., analytics).
• Withdraw Consent: Stop optional data use (e.g., cookies).
  To exercise these, email hello@the-origin.life.

• We may update this policy to reflect service changes or legal needs. Updates will be posted here, with significant changes emailed to you at least 14 days in advance (T&C Point 8).