Last updated: [date]. This is a draft starting template — please have it reviewed by a lawyer before relying on it, especially regarding your specific obligations under GDPR/CCPA depending on where your customers are located.

1. What We Collect

When you make a purchase or sign up for our email list, we collect:

• Your name and email address
• Billing details needed to process payment (handled directly by our payment processors — Stripe and/or PayPal — we do not store full card numbers)
• Order history and download activity
• Basic technical data (IP address, browser type) via our analytics tools

2. How We Use It

We use this information to:

• Process and deliver your orders
• Send transactional emails (order confirmations, download links)
• Send marketing emails, only if you’ve opted in — you can unsubscribe at any time
• Improve the site using aggregated, anonymized analytics

3. Who We Share It With

We share data only with the service providers needed to run the store: our payment processors (Stripe, PayPal), our email platform (Brevo), and our hosting/analytics providers. We do not sell your personal data.

4. Cookies

We use cookies for essential site function (cart, checkout, login) and, with your consent, for analytics. You can manage your cookie preferences via the consent banner shown when you first visit.

5. Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, or to withdraw marketing consent at any time. Contact us via our Contact page to make a request.

6. Data Retention

We keep order records as long as required for accounting/tax purposes, and marketing data until you unsubscribe or request deletion.

7. Contact

Questions about this policy? Contact us via our Contact page.