FlexExt is committed to protecting your personal data and ensuring full compliance with the European General Data Protection Regulation (GDPR - Regulation EU 2016/679) and global privacy standards.
1. Information We Collect
When placing an order or registering an account, we collect customer name, email address, optional telephone number, billing address, and IP address for transaction verification, tax invoicing, and fraud prevention.
2. Lawful Basis for Processing
Data is processed exclusively under Article 6(1)(b) of the GDPR (performance of a contract to deliver digital license keys and downloadable software packages) and Article 6(1)(c) (statutory tax and accounting retention requirements).
3. Payment Information Security
We do not store or process complete credit card or debit card numbers on our servers. All transactions are securely handled by PCI-DSS Level 1 certified processors (Stripe / PayPal) using tokenized encryption and TLS 1.3.
4. Your Rights Under GDPR
You have the right to request access to your stored personal data, request rectification or erasure ('right to be forgotten'), and request transaction history exports by contacting