Privacy Policy
Last updated: [date]
1. Who is responsible
[Business legal name], [registered address] (“Registry”, “we”, “us”) is responsible for the personal data described here. Contact: [privacy contact email].
2. What we collect and why
- Order details. Your email address, the product bought, the amount and order number, so we can deliver the product, provide support and keep tax and accounting records.
- Payment details. Card details are entered with [payment provider] and are not stored by us. [In the demonstration checkout no payment is taken and nothing is transmitted.]
- Company details entered at set-up (company name, address, signatory, date and optional profile facts). The set-up page uses them inside your own browser to personalize the documents. They are not sent to our server. [Confirm this stays true if you change the page.]
- Support messages. What you send us when you contact us.
- Technical data. Our web server may log your IP address, the pages requested, the time and your browser type, for security and to keep the site working. [Log retention period.]
3. Services loaded by the pages
To display fonts and to build the ZIP files in your browser, the pages load files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com) and from cdnjs (cdnjs.cloudflare.com). When your browser fetches these, those services can see your IP address and browser details. We do not send them your company details. [If you self-host these files, delete this section.]
4. Cookies and analytics
[Verify and state: this site does not currently set cookies or use analytics. If you add them, list them here and add a consent mechanism where the law requires one.]
5. Who we share data with
Only with providers who help us run the shop: [payment provider], [hosting provider], [email provider], and our accountants and advisers, and where the law requires. We do not sell personal data.
6. Legal basis and retention
[Lawyer to state the legal bases that apply in your jurisdiction, for example performance of a contract, legal obligations and legitimate interests.] We keep order and accounting records for [period required by law] and support messages for [period].
7. Your rights
Depending on where you live you may have the right to ask for access to your data, correction, deletion, restriction, objection and portability, and to complain to the data protection authority. Email [privacy contact email] to ask. [Name the applicable laws and authority.]
8. Security and transfers
We use reasonable measures to protect data. [Describe where data is stored and any transfers outside your country.]
9. Children
The site is for businesses and is not aimed at children.
10. Changes
We will update this page if our practices change and show the date at the top.