Privacy Policy

Last updated: January 2026

⚠️ This is a template. Have a qualified attorney review it before relying on it, particularly for compliance with GDPR (EU/UK), CCPA (California), POPIA (South Africa), PIPEDA (Canada), and Australian Privacy Act.

1. Who we are

Sandrolfit is a brand operated by Eniji LLC, a limited liability company registered in New Mexico, USA. Our registered address is 1209 Mountain Rd Pl NE, STE R, Albuquerque, NM 87110, USA. References in this policy to "we", "us", or "our" mean Eniji LLC.

2. What information we collect

We collect the following categories of personal information:

Information you give us directly: name, email address, country, and any messages you send through contact forms.
Payment information: processed entirely by Stripe. We never store your full card details.
Automatic data: IP address, browser type, pages viewed, referral source, and device information.
Cookies: see our Cookie Policy.

3. How we use your information

To deliver the free and paid products you request
To send you the newsletter and marketing emails (with opt-out in every email)
To process payments and provide customer support
To improve our website and content
To comply with legal obligations

4. Legal basis for processing (GDPR)

If you are in the UK or EU, we process your data on the following legal bases: (a) your consent, (b) performance of a contract with you, (c) our legitimate interests, and (d) compliance with legal obligations.

5. Your rights

Depending on your location, you have the following rights: access, correction, deletion, portability, objection, and restriction of processing. California residents have additional rights under CCPA/CPRA. To exercise any right, email privacy@sandrolfit.com.

6. Data sharing

We share limited data with the following processors, under contracts that require them to protect your data:

Stripe (payment processing)
ConvertKit / MailerLite (email delivery)
Google Analytics (aggregated site analytics)
Meta / Facebook (advertising pixel, if you consent)
Hostinger (website hosting)

We do not sell your personal information.

7. International data transfers

Your data may be transferred to the USA (where Eniji LLC is based) and other countries where our service providers operate. We rely on Standard Contractual Clauses and similar safeguards where required.

8. Data retention

We retain your information only for as long as necessary: email subscribers' data for as long as you remain subscribed plus 12 months; customer records for 7 years for tax compliance; website analytics for 26 months.

9. Security

We use industry-standard security measures including HTTPS encryption, access controls, and reputable third-party processors. No system is 100% secure, but we work to protect your information.

10. Children's privacy

This site is not intended for children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy. Material changes will be announced on this page with a revised "last updated" date.

12. Contact

Questions about this privacy policy? Email privacy@sandrolfit.com or write to Eniji LLC, 1209 Mountain Rd Pl NE, STE R, Albuquerque, NM 87110, USA.