Customer information
Privacy policy
This policy explains how ChixiQ collects, uses, shares, protects, and retains waitlist, reservation, payment-reference, shipping, support, and technical security data.
Effective 2026-07-29
Controller and contact
The data controller is Gustav Burmeister, trading as Burmeister Webdesign and operating ChixiQ by Aretune in Germany. Privacy requests may be sent to support@chixi-q.com with the subject line “Privacy request.”
We process only data needed to run Founder Access, secure the website, accept reservations, fulfill orders, meet legal duties, and respond to customers.
Data we process
Founder Access stores email address, consent version, signup time, and subscription status. Reservation and fulfillment handling use name, email, phone number, billing and shipping address, amounts, reservation number, consent record, Stripe customer, session, payment-method and payment references, and fulfillment communications.
We do not receive or store full card numbers or card security codes. Stripe processes and stores payment credentials on its hosted checkout. ChixiQ stores only Stripe identifiers needed to apply the $10 credit and request the authorized $219 balance after carrier handoff. Security systems may process IP address, device and request information, and a one-way IP hash for short-term rate limiting and abuse prevention.
Purposes and legal bases
We process reservation, payment-reference, shipping, and support data to perform the paid reservation agreement, prepare the later product sale, request the specifically authorized balance after carrier handoff, and fulfill delivery. We process records needed for accounting, tax, sanctions, fraud prevention, consumer protection, and legal claims to comply with legal obligations and protect legitimate interests.
Founder marketing email is based on consent and may be stopped at any time. Withdrawal does not affect earlier lawful processing. Essential security and checkout processing are not optional because the service cannot operate safely without them.
Service providers and transfers
Cloudflare provides website delivery, security, serverless computing, and database infrastructure. Stripe provides hosted payment processing, fraud controls, receipts, and related payment services. Carriers and fulfillment providers receive the data needed to deliver and investigate parcels.
Providers may process data outside Germany or the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful safeguard. We do not sell personal data.
Retention and your rights
Unsubscribed waitlist data is removed or suppressed as needed to honor the opt-out. Inactive marketing records are reviewed after 24 months. Order, payment-reference, tax, and accounting records are retained for the applicable statutory period; support and fraud records are kept only as long as reasonably needed for the purpose or legal claims.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent and complain to a competent data-protection authority. We verify requests before disclosing or changing account-related data.