Izna Sapa OÜ respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
By accessing or using www.iznasapa.com, you acknowledge that you have read and understood this Privacy Policy.
Business Name: Izna Sapa OÜ
Registered In: Republic of Estonia
Registry Code: 17357924
Address: Sepapaja tn 6, 15551 Tallinn, Estonia
Email: journey@iznasapa.com
Website: https://www.iznasapa.com
We collect only the minimum personal data necessary to operate our website, process transactions, and deliver digital products securely. This may include:
Identity & contact data (such as name, email address, billing address)
Transaction data (purchase details, timestamps, payment confirmations)
Payment data (processed securely by third-party payment providers; we do not store full card details)
Technical data (IP address, device type, browser information, and general location data for security and fraud prevention)
User-submitted data (such as quiz responses or feedback you voluntarily provide)
We do not collect special category data (such as health, biometric, or sensitive personal data).
We use personal data only for legitimate business purposes, including:
Processing orders and payments
Granting access to purchased digital content
Sending transactional emails (receipts, access instructions, service updates)
Delivering free resources, quiz results, or email content when you voluntarily provide your email address or subscribe
Meeting legal, accounting, and tax obligations
Preventing fraud and ensuring platform security
Improving our services through aggregated, non-identifying analytics
We do not sell, rent, or trade personal data for advertising or profiling purposes.
We process personal data based on one or more of the following legal grounds:
Contractual necessity: to fulfill your purchase and provide access to products
Legal obligation: for accounting, tax, and regulatory compliance
Legitimate interest: platform security, fraud prevention, service improvement
Consent: where you voluntarily subscribe to emails, quizzes, or downloads
You may withdraw consent at any time by unsubscribing or contacting us.
We use trusted third-party service providers to operate our business. These providers process data only on our behalf and under contractual confidentiality obligations. They may include:
Digital product hosting and account platforms
Payment processors (e.g., Stripe, PayPal)
Form, quiz, or survey tools
Website hosting and infrastructure providers
All processors comply with applicable data protection laws, including GDPR where required. We do not authorize third parties to use your data for their own marketing purposes.
We retain personal data only as long as necessary:
Transaction and customer records are retained for up to 7 years, as required by Estonian and EU tax law.
Marketing data is retained until you unsubscribe.
Technical and analytics data is retained in anonymized or aggregated form where possible.
You may request deletion of your personal data unless retention is legally required.
Depending on your location, you may have the right to:
Access your personal data
Correct inaccurate data
Request deletion or restriction of processing
Object to certain processing
Receive a copy of your data (data portability)
Withdraw consent at any time
Depending on your jurisdiction, additional rights may apply under local data protection laws.
To exercise your rights, contact journey@iznasapa.com.
Although Izna Sapa OÜ is based in the EU, some service providers may process data outside the EU/EEA.
Where international transfers occur, they are safeguarded using legally approved mechanisms such as:
European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Other lawful transfer safeguards under GDPR
We implement appropriate technical and organizational measures to protect personal data, including:
Secure hosting and encrypted connections
Limited access to personal information
Contractual safeguards with service providers
No online system is entirely risk-free, but we take reasonable steps to protect your data. Access to personal data is limited to authorized personnel and service providers on a need-to-know basis.
Our website and products are intended for individuals 18 years or older. We do not knowingly collect personal data from minors. If you believe data has been collected from a minor, please contact us and we will delete it promptly.
We use essential cookies necessary for website functionality, security, and user authentication.
We may use privacy-respecting analytics tools to understand general website performance. Where required by law, such tools will be implemented only with appropriate notice and consent. These tools are designed to minimize personal data collection and, where applicable, operate without tracking or profiling.
We do not intentionally use advertising or behavioral tracking cookies without appropriate notice and consent.
You can manage or disable cookies through your browser settings. Disabling cookies may affect website functionality.
We may update this Privacy Policy from time to time. The most current version will always be available on this page. Continued use of the website after updates constitutes acceptance of the revised policy.
For privacy-related questions or data requests, contact:
Izna Sapa OÜ
Email: journey@iznasapa.com
Address: Sepapaja tn 6, 15551 Tallinn, Estonia
Last updated: October 2025