📄 Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains what personal information I collect through Oven Underground, why I use it and what choices you have.

Oven Underground is operated by Kseniia Mishchenko, a sole proprietor registered in Portugal, NIF 314304746.

If you have any questions about your personal data, you can contact me at ovenunderground@gmail.com.

What information I collect

Depending on how you use the website, I may collect:

  • your name and email address;

  • billing and purchase information;

  • information connected to your course account;

  • information about the lessons or digital products you have access to;

  • live class booking information;

  • emails, questions, photos, videos or other information you choose to send me when asking for support;

  • comments you choose to leave on the website;

  • basic website information such as pages visited, traffic source, device, browser and general location;

  • information about how you interact with my emails.

Payment providers may also collect the information needed to process your payment. I do not receive or store your full card details.

How I use your information

I use personal information when necessary to:

  • process your purchase;

  • create and manage your course access;

  • give you access to lessons and other materials you purchased;

  • provide support;

  • arrange live classes;

  • reply to your questions;

  • send important information about your purchase or course;

  • send marketing emails if you have agreed to receive them;

  • understand how people use the website and improve my products;

  • prevent misuse or security problems;

  • meet legal, tax and accounting requirements.

Why I am allowed to use your information

Under data protection law, I need a legal reason to process personal data.

Depending on the situation, I may process your information because:

It is necessary to provide something you purchased.
For example, I need your email address and account information to give you access to your course.

You gave me permission.
For example, when you choose to subscribe to marketing emails. You can withdraw your consent at any time.

I have a legitimate business reason.
For example, understanding how my website is used, improving the course or protecting the website from misuse, as long as this does not override your privacy rights.

I have a legal obligation.
For example, I may need to keep certain payment, invoice or transaction information for tax and accounting purposes.

Emails

Some emails are necessary for your purchase, such as payment confirmations, account information, course access or important updates about something you bought.

Marketing emails are different.

If you subscribe to marketing emails, I may send you baking content, new lessons, product launches and offers.

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email.

Unsubscribing from marketing does not prevent me from sending emails that are necessary to provide something you purchased.

Payments

Payments may be processed by Stripe or PayPal.

These companies process payment information according to their own privacy policies.

I do not store your full debit or credit card details.

Course accounts

When you purchase a course, you may need to create an account on the website.

Account information is used to give you access to your purchased materials and manage that access.

Because some products include lifetime access, some account and purchase information may need to be kept while that access continues.

Live classes and support

If you book a live class, information such as your name, email address, booking time and other information you provide may be processed through the booking service I use, such as Google Calendar.

If you contact me through Telegram, email or another support channel, I will receive the information you choose to send.

Please avoid sending sensitive personal information unless it is necessary.

Cookies and analytics

The website may use cookies and similar technologies to work properly and understand how visitors use the site.

This may include analytics or advertising tools provided by services such as Squarespace, Google or Meta.

Depending on the tool, information may include your device, browser, pages visited, clicks, traffic source, approximate location and similar technical information.

Where consent is legally required for non-essential cookies or tracking technologies, these tools should only be activated after you have given your consent.

You can also change your cookie choices through the cookie settings available on the website.

Services I use

I use third-party services to operate Oven Underground.

These may include services for:

  • website and course hosting;

  • payment processing;

  • email delivery;

  • analytics;

  • live class booking;

  • video or file hosting;

  • customer support.

For example, Oven Underground currently uses services such as Squarespace, Stripe, PayPal, Google and Telegram.

These companies may process some personal information when their services are used.

I do not sell your personal data.

Data outside the European Economic Area

Some of the services I use may process or store information outside the European Economic Area.

Where required by data protection law, appropriate safeguards must be used for these transfers.

How long I keep information

I do not keep personal information longer than necessary for the reason it was collected.

How long information is kept depends on what it is used for.

For example:

  • marketing information may be kept until you unsubscribe or it is no longer needed;

  • course account and purchase information may be kept while your course access continues;

  • messages and support information may be deleted when they are no longer useful or necessary;

  • invoices, transaction information and other business records may be kept for the period required by tax, accounting or other applicable laws.

Some information cannot be deleted immediately if I am legally required to keep it.

Your rights

Under the GDPR, depending on the situation, you may have the right to:

  • ask what personal data I have about you;

  • receive a copy of your personal data;

  • correct inaccurate information;

  • ask for your data to be deleted;

  • restrict how your data is used;

  • object to certain uses of your data;

  • receive certain data in a portable format;

  • withdraw your consent when processing is based on consent;

  • object to direct marketing at any time.

To make a request, email ovenunderground@gmail.com.

I may need to confirm your identity before completing a request.

You also have the right to make a complaint to a data protection authority.

Because Oven Underground is operated in Portugal, the Portuguese supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD).

Changes to this Privacy Policy

I may update this Privacy Policy if the website, course, services I use or legal requirements change.

The date at the top of this page shows when it was last updated.

Contact

For questions about this Privacy Policy or your personal data:

Kseniia Mishchenko
Oven Underground
ovenunderground@gmail.com