Working Parenthood
ENHU

Privacy Notice

PRIVACY NOTICE
Working Parenthood
Effective: 14 October 2026
Version: 1.0

1. DATA CONTROLLER

The controller of personal data is:

Service Provider / sole proprietor: Kantor-Reke Janka e.v.
Registered office and postal address: 1134 Budapest, Kassák Lajos utca 70., Hungary
Hungarian tax number: 59355113-1-41
Sole proprietor registration number: 57375964
Registering authority: Hungarian National Tax and Customs Administration (NAV)
Email: workingparenthood@gmail.com
Telephone: +36 30 812 7707
Website: workingparenthood.net
Hungarian VAT status: small-business VAT exemption (AAM)

No Data Protection Officer has been appointed.

2. PURPOSE AND LEGAL FRAMEWORK

This Privacy Notice explains what personal data Working Parenthood processes when visitors use the Website, purchase digital content, submit or book mentoring, contact customer service or subscribe to marketing communications; why the data is processed; the legal basis; retention; and the recipients involved.

Processing is governed in particular by Regulation (EU) 2016/679 (“GDPR”), the Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information, and applicable Hungarian consumer-protection, accounting, tax and advertising rules.

3. GENERAL PRINCIPLES

Working Parenthood processes only personal data necessary for a stated purpose. Personal data is not sold or rented, and it is not used for solely automated individual decision-making or individual profiling.

4. WEBSITE OPERATION AND SECURITY

Data processed may include technical request data such as IP address, browser and device information, timestamp, requested page and technical data necessary to identify or prevent security incidents.

Purpose: secure and reliable operation of the Website, prevention of abuse and automated attacks, and troubleshooting.

Legal basis: legitimate interests under Article 6(1)(f) GDPR. The legitimate interest is maintaining the security and stability of the Website and related systems.

Retention: technical log data is retained only for as long as necessary for operational and security purposes or according to the applicable provider’s technical retention settings. Aggregated statistics that can no longer be linked to an individual may be retained for longer.

5. LOVABLE VISITOR ANALYTICS

The Website uses Lovable’s built-in aggregate visitor analytics. In the current configuration, it reports page views, traffic source, device type, country and visit duration in aggregate form.

The current Website configuration does not use Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, PostHog, session replay or advertising tracking.

Purpose: understanding and improving overall Website use and performance.

Legal basis: where the processing involves personal data, legitimate interests under Article 6(1)(f) GDPR. The legitimate interest is understanding aggregate Website performance and usability.

In the current configuration, Lovable analytics does not use non-essential analytics cookies or browser storage.

6. PURCHASES OF DIGITAL PRODUCTS

Personal data processed may include:

  • name;
  • email address;
  • billing address and country;
  • company name, if supplied;
  • tax number, if supplied;
  • product purchased;
  • amount and currency;
  • payment status and transaction identifier;
  • order date/time;
  • acceptance and version of the Terms;
  • version of the Privacy Notice;
  • declaration requesting immediate digital supply and acknowledging the consequence for the withdrawal right;
  • checkout language;
  • optional marketing consent, where given.

Purposes: processing the order, facilitating payment, delivering digital content, providing customer support, and maintaining evidence of contract performance and required legal declarations.

Legal bases:

  • Article 6(1)(b) GDPR: performance of the contract and steps taken at the Customer’s request before entering into a contract;
  • Article 6(1)(c) GDPR: compliance with legal obligations, including invoicing, tax and consumer-law requirements;
  • Article 6(1)(f) GDPR: legitimate interests in establishing, exercising or defending legal claims and evidencing required declarations.

Retention:

  • ordinary contractual/order data is generally retained for 5 years following performance of the contract, or until any related dispute is finally resolved;
  • accounting documents and data that must legally be retained with them are kept for at least 8 years;
  • evidence of legally required declarations is retained for the relevant claims/limitation period and, if a dispute is pending, until it is finally resolved.

7. PAYMENTS – STRIPE

Card payments are processed by Stripe. Data shared with Stripe may include name, email address, billing address, country, transaction amount, currency, payment identifiers and technical data required for payment processing.

Working Parenthood does not receive or store the Customer’s full card number or card security code.

Stripe may act as a processor for some activities and as an independent controller for other activities, including certain legal, security and fraud-prevention purposes.

For Hungarian/EEA businesses, Stripe services are provided through entities including Stripe Payments Europe, Limited and Stripe Technology Europe, Limited in Ireland. Stripe may transfer data outside the EEA within its group or through service providers subject to appropriate GDPR transfer safeguards.

8. INVOICING – BILLINGO AND NAV

Data required for invoicing is processed through Billingo:

Billingo Technologies Zrt.
1133 Budapest, Árbóc utca 6. I. emelet, Hungary
Company registration number: 01-10-140802

Data may include name/company name, billing address, email address, tax number where applicable, product, amount, currency and other information required to issue the invoice.

Purpose: issuing and retaining invoices and complying with accounting and tax obligations.

Legal basis: Article 6(1)(c) GDPR, compliance with legal obligations.

Billingo may transmit legally required invoice data to the Hungarian National Tax and Customs Administration (NAV).

Retention: for the statutory accounting/tax retention period, generally at least 8 years.

9. MENTORING ENQUIRIES

The mentoring enquiry form may process:

  • name;
  • email address;
  • selected topic;
  • free-text description of the situation, up to 3,000 characters;
  • optionally, the outcome the person hopes to get from mentoring, up to 2,000 characters.

Purpose: reviewing and responding to the enquiry, assessing whether mentoring is appropriate and taking pre-contractual steps at the person’s request.

Legal basis: Article 6(1)(b) GDPR, steps taken at the data subject’s request prior to entering into a contract.

Retention: where no mentoring contract is concluded, enquiry data is generally retained for 12 months after the last substantive contact, unless earlier deletion is appropriate or longer retention is necessary for a legal claim. If a contract is concluded, relevant contract data may be retained for the general 5-year claims period and invoice data for the statutory retention period.

Please do not include health or medical information, identification-document details, financial account information or other sensitive/special-category personal data in free-text fields. Working Parenthood does not request such data and does not intend to process it routinely. If such data is submitted inadvertently, it will not be used where unnecessary and will be deleted where reasonably possible.

10. MENTORING BOOKINGS AND COMMUNICATIONS

Where a mentoring contract is concluded, Working Parenthood may process the Customer’s name, email address, appointment details, contact information, payment and billing data, and necessary contractual communications.

Purpose: scheduling, contract performance, communication, payment and invoicing.

Legal basis: Article 6(1)(b) GDPR, and Article 6(1)(c) GDPR for legally required invoicing and tax records.

Mentoring sessions are not audio- or video-recorded.

11. CUSTOMER SUPPORT AND COMPLAINTS

Data processed may include name, contact details, order identifiers, the content of a complaint or question and related communications.

Purpose: answering questions, investigating complaints and complying with legal obligations.

Legal basis:

  • Article 6(1)(b) or (f) GDPR for ordinary customer support;
  • Article 6(1)(c) GDPR for statutory consumer complaints.

Retention: consumer complaints and the substantive responses are retained for 3 years. Other customer-service correspondence is generally retained for no more than 12 months after the matter is closed, unless a contract or legal claim requires longer retention.

12. NEWSLETTER AND MARKETING

Data processed:

  • name;
  • email address;
  • consent timestamp;
  • consent wording/version;
  • subscription source;
  • language;
  • unsubscribe status and date.

Purpose: sending Working Parenthood news, practical ideas, new resources and product updates.

Legal basis: consent under Article 6(1)(a) GDPR and, for direct electronic advertising to natural persons, the prior explicit consent required by Section 6 of Hungarian Act XLVIII of 2008 on Business Advertising Activity.

Consent is voluntary and may be withdrawn at any time, without charge or reason. Withdrawal does not affect processing carried out lawfully before withdrawal.

Retention: marketing data is processed until consent is withdrawn. After an unsubscribe request, Working Parenthood may retain a minimal suppression record, such as the email address and unsubscribe timestamp, solely to ensure and demonstrate that no further marketing is sent. That minimal record is not used for marketing.

Unsubscribing from marketing does not prevent transactional emails required to perform a Customer-requested transaction.

13. EMAIL AND COMMUNICATION PROVIDERS

Transactional and system emails from the Website are sent using Lovable’s built-in email functionality from the notify.workingparenthood.net domain.

Communications received or sent through workingparenthood@gmail.com are handled through Google services. In the EEA, Google services are generally provided by Google Ireland Limited.

Mentoring enquiries are stored in Lovable Cloud and are also sent to the Service Provider by email.

14. HOSTING, DATABASE AND TECHNICAL PROVIDERS

The current technical environment may involve the following recipients/processors:

  • Lovable / Lovable Labs group: Website hosting, Lovable Cloud database and file storage, application and email functionality. Under the current project configuration, application data is stored in the EU region in Frankfurt.
  • Cloudflare: content delivery, security, bot protection and network infrastructure.
  • Stripe: payment processing.
  • Billingo Technologies Zrt.: invoicing.
  • Google / Gmail: email communications.

These providers may use approved subprocessors in accordance with their applicable data-processing terms.

15. INTERNATIONAL DATA TRANSFERS

Although the current Lovable Cloud project region is EU (Frankfurt), some providers operate global infrastructure or use subprocessors outside the EEA.

Where personal data is transferred outside the EEA, the transfer is made using an appropriate safeguard under Chapter V GDPR, depending on the provider and transfer, such as an adequacy decision, the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

16. COOKIES AND BROWSER STORAGE

The Website’s current configuration does not use advertising or marketing cookies and does not use Google Analytics or comparable third-party analytics cookies.

According to the current technical audit, the Website may use only short-lived technical cookies required for operation or security, including Cloudflare’s `__cf_bm` bot-protection cookie and the `__dpl` cookie associated with Lovable hosting.

These cookies are not used for advertising or personalised tracking; they support technical operation and security.

If Working Parenthood later introduces non-essential analytics, marketing or tracking technologies, this Notice will be updated and prior consent will be obtained where required by law.

17. SOCIAL MEDIA

The Website may include outbound links to Working Parenthood social-media profiles. The current configuration does not embed social-media feeds or tracking pixels.

If a visitor follows an external social-media link, the relevant platform processes data under its own privacy terms.

18. RECIPIENTS AND DISCLOSURES

Working Parenthood discloses personal data only where necessary to perform the requested service, comply with law, use technical service providers or establish, exercise or defend legal claims.

Personal data is not sold and is not made available to third parties for their own advertising purposes without separate consent.

19. DATA SUBJECT RIGHTS

Subject to the conditions of the GDPR, data subjects have the right to:

  • request information about and access to their personal data;
  • request rectification of inaccurate data;
  • request erasure;
  • request restriction of processing;
  • exercise data portability where applicable;
  • object to processing based on legitimate interests;
  • withdraw consent at any time where processing is based on consent.

Requests may be sent to workingparenthood@gmail.com. Working Parenthood will respond without undue delay and generally within one month of receiving the request.

20. RIGHT TO LODGE A COMPLAINT

If a data subject believes that personal data is being processed unlawfully, they may lodge a complaint with the competent supervisory authority. In Hungary:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, P.O. Box 9, Hungary
Email: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400
Website: naih.hu

Data subjects may also seek a judicial remedy as provided by the GDPR and applicable law.

21. AUTOMATED DECISION-MAKING

Working Parenthood does not use solely automated decision-making or profiling that produces legal effects concerning an individual or similarly significantly affects them.

22. DATA SECURITY

Working Parenthood and its providers apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

Payment, invoicing and email API secrets must not be exposed in public client-side code, and customer data is accessible only to the extent necessary for the relevant purpose.

23. CHANGES TO THIS NOTICE

Working Parenthood may update this Notice where required by changes in law, services or technology. The current version and effective date will always be displayed on the Website.

Where a change is material, affected persons will be informed in an appropriate manner in light of the circumstances.