Privacy policy

Who is responsible

This policy covers viralavatars.com and our related course, order, and support interactions. The controller responsible for personal information is:

Hashtag Marketing GmbH, trading as Viral Avatars
Bergstrasse 44a
6010 Kriens, Switzerland
Email: contact@viralavatars.com

Information processed

• Contact and order details: information you provide, such as your name, email address, purchased items, billing details where required, payment status, and support messages.
• Technical information: IP address, browser and device details, requested pages, timestamps, and security or error information processed to deliver and protect the website.
• Course access: where you use a course delivery platform, your account and access details and activity associated with the course.

Card details entered in our checkout are collected directly by Stripe through its hosted payment fields. Our website code does not receive your full card number or security code. Stripe may process device and payment information even when you do not complete a purchase.

Why we use it

We use information to respond to enquiries, process orders and refunds, provide course access and support, keep the service secure, and meet accounting and legal obligations. Where the GDPR applies, these activities rely on performance of a contract or requested pre-contract steps, legal obligations, or our legitimate interests in operating and protecting the service. Processing that requires consent, such as optional marketing, relies on that consent; you may withdraw it at any time.

Providers and sharing

Service providers receive the information needed for their role:

• Cloudflare hosts and delivers the website and provides network security.
• Stripe provides payment fields, payment processing, and fraud prevention.
• Whop processes account and course-access information when your course is delivered through its platform.
• Email and support providers process messages you exchange with us. Professional advisers and authorities may receive records where necessary for legal or accounting duties.

AI tools you choose to use during the course, including OpenAI and Higgsfield, have their own privacy policies. Do not submit confidential or personal information to those tools unless you are entitled to do so. Their logos do not mean they endorse Viral Avatars.

Cookies and similar technologies

Website and payment services may use cookies or similar technologies for security, payment functionality, and interface preferences. You can manage stored cookies through your browser; blocking necessary technologies may affect checkout. If we introduce optional analytics or advertising technologies requiring consent, we will request that consent before activating them.

International processing

Our business is based in Switzerland. Cloudflare, Stripe, and course delivery providers operate internationally, including in the United States and the European Economic Area. Depending on the service, information can be processed outside Switzerland or your home country. Applicable transfer protections may include an adequacy decision or contractual safeguards. Contact us for information about the recipients and safeguards applicable to your data; provider privacy notices above explain their processing locations and arrangements.

Retention and security

We retain information for as long as needed to provide the purchased service, handle support or disputes, and satisfy applicable recordkeeping requirements. Order and accounting records may need to remain after course access ends; technical records are kept according to operational and security needs. Retention depends on the type of record and the legal duties that apply. We use access controls and secure service providers to protect information, but no system can guarantee absolute security.

Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, restriction, or a portable copy of your personal data, and may object to certain processing. You can withdraw consent without affecting earlier lawful processing. Email us to make a request; we may need reasonable information to verify your identity.

You may also complain to the Swiss Federal Data Protection and Information Commissioner or your local supervisory authority. Some records must be retained to meet legal duties even after a deletion request.

Children and updates

Our course and checkout are intended for adults. If you believe a child has provided us with personal information, contact us so we can address it. We may update this policy as the service changes and will show the current date on this page.