Skip to content
Private Label from Zero

Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data privatelabelzero.com collects, why, what is done with it, and what rights you have. It is written to be read, not to be survived — if anything here is unclear, email me and I will explain it in plain language.

1. Who is responsible for your data

The data controller is:

There is no appointed Data Protection Officer, and none is required — this is a one-person operation that does not carry out large-scale or systematic monitoring.

2. What data is collected, and why

WhatWhenWhyLegal basis
Email address (and first name, if you give one) When you join the waitlist or download a free template To send you the thing you asked for, and occasional emails about private label sourcing, compliance and the course Your consent — Art. 6(1)(a) GDPR
The content of emails you send me When you write to me To answer you Legitimate interest in replying to correspondence — Art. 6(1)(f)
My own site statistics: the page you opened and its title, the site you came from, device type, browser language and time zone (used only to derive the country), time on the page and how far you scrolled, templates downloaded, free tools used On every visit, unless you switch it off To see which articles, checklists and tools are worth writing — no profiles, no advertising Legitimate interest in measuring my own website — Art. 6(1)(f) GDPR
Google Analytics statistics: pages visited, approximate region, device type, referring site Only if you accept analytics cookies To understand which articles are useful and which are not Your consent — Art. 6(1)(a) GDPR and §89 of Czech Act No. 127/2005 Coll.
Server access logs (IP address, timestamp, requested file) Automatically, on every visit Security and troubleshooting, by the hosting provider Legitimate interest in operating a secure site — Art. 6(1)(f)
Feedback you send through the ★ Feedback tab: a star rating, your message, the page you were on (address and title) and the site you came fromWhen you send feedbackTo see what on this site is useful or broken, and fix itLegitimate interest in improving the site — Art. 6(1)(f)
Your email address in the feedback form, only if you choose to type itWhen you send feedbackTo write back to you about your message. It is not added to the newsletter or the waitlistYour consent — Art. 6(1)(a) GDPR

The ★ Feedback tab appears on most pages of this site. Everything you type into it is sent to this website's own server and stored there. It is not used to build a profile of you or to show you advertising. If you leave the email field blank, I have no way of knowing who sent the message.

No data is bought, sold, rented or shared for advertising. There are no advertising trackers, no retargeting pixels and no third-party ad networks on this site.

3. Cookies and analytics

Traffic here is measured in two separate ways, and they work differently.

My own statistics, running on this site's own server. A small script counts visits without cookies and without ever storing your IP address. It records the page you opened and its title, the site you came from, whether you are on a phone, tablet or computer, your browser's language and time zone (used only to work out the country), how long you stayed and how far you scrolled, which templates you downloaded and which of the free tools you used. None of it is sent to any third party — it stays on the same hosting as the website itself. So that one visit can be told apart from the next, your browser keeps a random identifier in its local storage; it says nothing about you, never leaves this site, and starts over after 30 minutes of inactivity. Legal basis: my legitimate interest in knowing which articles and tools are useful — Art. 6(1)(f) GDPR. You can switch this off for a browser by opening privatelabelzero.com/?nomeasure=1; the choice is remembered on that device, and ?measure=1 turns it back on.

Google Analytics 4. Analytics cookies are not set until you accept them in the banner shown on your first visit. If you decline, or ignore the banner, no analytics cookies are stored and nothing is kept on your device. Google Consent Mode is used, which means that until you accept, Google still receives a cookieless signal that a page was opened — including the page address and your IP address — but may not store it on your device or use it to recognise you. Accepting the banner switches on full measurement; declining leaves only that signal.

No cookies at all are set before you make a choice. Your choice itself is not kept in a cookie either — it is stored in your browser’s local storage under the name plz-consent, so you are not asked again on every page. It records only whether you accepted or declined, and nothing about you. If you accept, Google Analytics then sets its own cookies.

You can change your mind at any time by clearing this site’s stored data in your browser — you need to clear site data or local storage, not only cookies, because that is where the choice is kept. In Chrome and Edge: click the icon to the left of the address bar, then “Cookies and site data”, then “Manage on-device site data”. In Firefox and Safari, clearing this site’s data does the same thing. The banner will appear again on your next visit.

The waitlist form is provided by MailerLite and appears on eight pages of this site, including this one. Its script loads with the page, and when it does it stores a random identifier called ml_guid in your browser’s local storage — before you type anything, and whether or not you ever sign up. It is MailerLite’s own identifier and is used to recognise a returning visitor to the form. Clearing this site’s stored data removes it.

4. Who else processes your data

Three third parties process data on my behalf, under data-processing agreements:

My own site statistics involve no third party at all — they are stored on the WEDOS hosting listed above, together with the website.

Feedback messages go nowhere else. They are stored on the same hosting as this website and read only by me. No third-party feedback or support service is involved.

No one else receives your data, except where I am legally obliged to disclose it.

5. How long data is kept

Feedback messages (including any email address typed into them) are kept until I have acted on them, and no longer than 12 months. If you would like yours deleted sooner, write to me at the address in section 1 and tell me roughly when you sent it; I will delete the message and the address. Please do not put personal details in the message box itself.

6. Your rights

Under the GDPR you have the right to:

To exercise any of these, email karin@privatelabelzero.com. You will get a reply within 30 days, and usually much sooner. There is no charge.

Every email I send also has a one-click unsubscribe link. Using it is the fastest way to withdraw consent and it takes effect immediately.

If you believe your data has been mishandled, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.cz — or to the supervisory authority in your own EU country.

7. Children

This site is intended for adults building a business. It is not directed at children and no data is knowingly collected from anyone under 16.

8. Security

The site is served over HTTPS. The email list lives in MailerLite rather than in a spreadsheet on a laptop. Access is protected by a password manager and two-factor authentication. This is a small operation, and I have kept the number of places your email address exists deliberately small.

9. Changes to this policy

If this policy changes materially — a new processor, a new purpose — the date at the top changes and, where the change affects how your data is used, subscribers are told by email.