Privacy & Cookies Policy
PRIVACY AND COOKIES POLICY
1. General Information
• The administrator of personal data collected through the Website is InProgress Paulina Brzeźniak, with its registered physical address at: Okrężna 37C/11, 58-100 Świdnica, Poland, VAT ID / Tax Number: PL8842500931 (hereinafter referred to as the "Administrator").
• Contact email: info@staytemplates.com.
• We respect your privacy and process personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable local data protection laws.
2. Scope and Purpose of Data Processing
We process personal data for the following purposes:
• Order Processing & Billing: To facilitate your purchase, issue invoices, and handle tax obligations. This process is conducted in partnership with our Merchant of Record, Paddle.com. (Legal basis: Art. 6(1)(b) and (c) GDPR).
• Template Customization: When using our Customizer, we temporarily process and store user-submitted inputs (such as your uploaded logo image, primary color choice, and custom URLs) in our secure database to generate your final HTML template. (Legal basis: Art. 6(1)(b) GDPR).
• Customer Support & Complaints: To respond to your inquiries, technical support requests, and complaints. (Legal basis: Art. 6(1)(f) GDPR – legitimate interest).
3. Data Recipients
Your personal data is transferred only to trusted third-party service providers that enable our store to operate:
• Paddle.com (Merchant of Record) – processes payments, handles checkout, and manages billing, invoicing, and fraud prevention.
• Supabase – provides secure database and cloud storage services where customization data and template configurations are processed.
4. Cookies and Local Storage Policy
Our Website uses cookies and Browser Local Storage technologies. These are small text files stored on your device:
• Essential Session Storage / Local Storage: Used solely for technical reasons to remember your active shopping cart items and to power the live visual Customizer. These are mandatory for the website to function correctly and do not track you.
• Cookies Consent Status: We store a small cookie on your browser to remember whether you accepted or declined our cookie banner, so it doesn't pop up on every visit.
• Managing Cookies: You can manage, block, or delete cookies at any time directly through your web browser's settings. Please note that disabling essential cookies/Local Storage may prevent you from using the shopping cart or Customizer.
5. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
• The right to access, rectify, or erase your personal data ("right to be forgotten").
• The right to restrict processing or object to processing.
• The right to data portability.
• The right to lodge a complaint with a data protection authority (e.g., Urząd Ochrony Danych Osobowych – UODO in Poland).
6. Data Retention Period (Data Minimization)
• Buyer email address: We store the buyer's email address in our own database for a maximum of 30 days from the purchase date, solely for the purpose of delivering the download/customizer link and handling any immediate post-purchase support. After 30 days, the email is automatically and permanently anonymized (deleted) from our order records by an automated daily process. The remaining transactional record (amount, currency, Paddle transaction ID, date) is retained without any personal identifier.
• Billing and tax data (invoices, VAT records): Stored and processed by Paddle.com (Merchant of Record) for the period required by applicable tax laws (typically 5–10 years). We do not hold copies of Paddle's invoicing records in our own database.
• Support communications: Kept for the duration necessary to resolve the inquiry and protect against potential claims, then deleted.
• Customizer configurations: Stored only as long as needed to deliver the customized template; may be deleted on request at any time via info@staytemplates.com.
• Custom-request threads and uploaded materials: The request record, messages, and uploaded files are stored for 90 days from the last update to the request thread, then automatically purged. Attachments live in a private storage bucket and are only accessible via short-lived signed URLs generated from the thread page (customer via token, admin via authenticated session). The Buyer may request earlier deletion by email at info@staytemplates.com.