Privacy

1. Who is responsible

The controller of your personal data is Pien van der Togt, trading as PIEN.DESIGN, registered in the Netherlands under Chamber of Commerce number 82081565.

Data protection enquiries, and any of the requests described in section 6, can be sent to hello@pien.design and will be answered.

2. What is collected

When you buy, Stripe collects and processes your payment details and email address in order to take payment. Your card details go to Stripe directly and are never held by PIEN.DESIGN.

PIEN.DESIGN receives your email address, the record of what you bought and when, and the licence terms you accepted at checkout. Browsing the site without buying collects nothing about you.

3. Why it is used, and on what basis

To take payment, to give you access to the product you bought, and to send you the transactional email containing your access link. The legal basis for all of this is performance of the contract you entered into when you bought the template.

Keeping the purchase and invoice record afterwards is done to comply with a legal obligation, described in section 5.

You are not sent marketing email as a result of buying. There is no newsletter attached to a purchase, and your address is not sold, rented or shared for anyone else's marketing.

4. Processors

Stripe processes payments and acts as merchant of record for the sale, which means Stripe also handles the VAT on it. Resend delivers the transactional email carrying your access link. Cloudflare hosts the website and serves it from its network.

Each of these processes data on instruction under a data processing agreement. Where any of them handles data outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses.

5. Retention

Purchase and invoice records are kept for seven years. This is not a choice: Dutch tax law requires a business to retain its administration for that period.

Your access link remains valid for as long as the product is supported, so that you can reopen it from your email at any time.

6. Your rights

You have the right to ask for a copy of the personal data held about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how it is used, and to receive it in a portable form. Write to hello@pien.design and you will receive a response within one month.

Deletion has one limit worth stating plainly: the purchase and invoice records described in section 5 cannot be deleted before the seven year retention period ends, because the law requires them to be kept.

If you are not satisfied with how a request was handled, you have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl, or to the supervisory authority in the EU country where you live.

7. Cookies

This website sets no analytics, advertising or tracking cookies, so there is no cookie banner to dismiss. Stripe sets its own cookies on its hosted checkout page, which are necessary to process the payment and to prevent fraud.