Privacy Policy

Last updated: 14 May 2026

1. Who We Are

This website is operated by Subelo Media LTD (HE 480219), a private company registered in Cyprus, with offices at Archiepiskopu Makariou III, 84, Office 1, 6017, Larnaca, Cyprus. We operate the brand "The Bug Company" and its channel-specific store "Doug Pest Control." For any privacy-related question, write to us at support@thebugcompany.co.

2. What Data We Collect

We collect only what we need to deliver your order and run the site:

• Your email address (required for digital delivery)
• Your name (if you provide it at checkout)
• Payment information, handled directly by Stripe — we never see or store your full card number
• Usage data such as device type, browser, approximate location (country/region), and pages visited

3. Why We Collect Your Data

Under the GDPR, we rely on the following legal bases to process your data: (a) performance of a contract — to deliver the digital product you bought; (b) legitimate interest — to operate, secure, and improve the site; (c) consent — for any optional marketing communications, which you can withdraw at any time; (d) legal obligation — to keep records required by tax and consumer protection law.

4. How We Share Your Data

We share the minimum necessary data with a small number of trusted processors:

• Stripe — processes your payment.
• Resend — delivers your order email and the PDF link.
• Our hosting and analytics providers — to keep the site running and detect abuse.

We do not sell, rent, or trade your personal data to third parties for marketing.

5. Data Retention

We keep your order data for as long as required by accounting and tax law (typically 7 years in Cyprus). Email-only data (no purchase) is kept until you ask us to delete it. Server logs are kept for a maximum of 90 days.

6. Your Rights

If you are in the EEA, UK, or any jurisdiction with equivalent privacy law, you have the following rights:

• Access — request a copy of the data we hold on you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (subject to legal retention).
• Restriction — limit how we use your data.
• Portability — receive your data in a portable format.
• Object — object to processing based on legitimate interest.

To exercise any of these, email support@thebugcompany.co. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use a small number of strictly necessary and analytics cookies. Strictly necessary cookies keep the checkout working. Analytics cookies help us understand which pages are useful. You can disable cookies in your browser at any time; some site features may not work if you do.

8. Security

We use HTTPS everywhere, encrypted databases, and limit internal access to your data to people who genuinely need it. Stripe handles all payment data under PCI-DSS Level 1. No system is perfect, but we take security seriously and respond to incidents quickly.

9. International Transfers

Some of our processors (Stripe, Resend) are based in the United States. When your data is transferred outside the EEA, we rely on Standard Contractual Clauses and other approved safeguards to ensure your data receives an equivalent level of protection.

10. Changes To This Policy

If we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the site after a change constitutes acceptance of the revised policy.

11. Contact

Questions, requests, or complaints? Write to support@thebugcompany.co. We read every email and reply within a few business days.