Privacy policy.

1. Controller and scope

Mateusz Tomaszewski, operating Templatier, is the controller of personal data handled for enquiries, customer support and Templatier orders. Contact mtomaszewskyi@icloud.com to ask about your data or exercise a right. This notice covers the Templatier storefront and communications with its operator. Independent hosting, account and payment services also explain their own processing in their privacy notices.

2. Information we handle

If you email us, we receive your email address, the name you provide, your message and any attachments. If you place an order through an enabled checkout, we may receive the customer and billing details needed for that order, its product, amount, payment status and transaction reference. Supply only information relevant to the enquiry or purchase.

When the website loads, its hosting and delivery providers process technical request information such as an IP address, requested URL, date and time, browser information and security events. The public storefront is hosted by Vercel.

3. Purposes and legal bases

We use information needed to answer a purchase enquiry, process an accepted order, supply files or handle contractual support under Article 6(1)(b) GDPR. Necessary tax, accounting and statutory consumer obligations rely on Article 6(1)(c).

General correspondence, website security, proportionate fraud prevention and establishing, exercising or defending legal claims rely on Article 6(1)(f), where our legitimate interests are not overridden by your rights. Those interests are maintaining a secure storefront, resolving enquiries and protecting lawful transactions. Optional marketing would require a separate, specific choice and any consent required by applicable law. Withdrawing consent affects future consent-based processing and does not undo lawful processing that already took place.

4. Hosting, email and payment recipients

Information may be handled by providers necessary to deliver the website, email, checkout and customer support, and by professional advisers where required. Support email uses the iCloud Mail service associated with our contact address. The current storefront is delivered through Vercel and its hosting infrastructure.

Online payments are awaiting activation. Once an external checkout is enabled, its provider is identified on that checkout before you enter payment details. Card and wallet information is entered directly with the payment provider. Templatier receives the order and payment information needed to fulfil the purchase, rather than your full card security credentials. We may disclose information to competent authorities when required by law. We do not sell customer data.

5. Cookies, browser storage and newsletter

The current Templatier application includes no advertising pixels, third-party analytics scripts or optional tracking cookies. Fonts and template illustrations are served with the site. Catalogue search and category filters update the page URL. The hosting platform may use cookies and similar mechanisms necessary for account access, delivery and security under its own notices and settings.

The cookie banner stores your Accept or Reject choice in this browser. Clear the site data in your browser to remove the saved choice. The current storefront does not send this preference to Templatier or enable optional tracking when you select Accept.

The newsletter form is currently inactive. Submitting it displays an availability message locally and does not add your address to a mailing list or send that form data to Templatier. We will provide an updated notice and the appropriate subscription choice before enabling a mailing service or optional tracking. You can control cookies through your browser and the relevant platform settings. Restricting necessary cookies may affect account access.

6. Retention

Ordinary enquiries and support correspondence are retained for the time needed to resolve the matter and normally up to 12 months after closure. A longer period applies where the correspondence is needed for an ongoing order, complaint, legal obligation or a specific potential or actual dispute.

Order, billing and refund records are retained for the applicable statutory accounting or tax retention period. Records reasonably required for a legal claim are retained until the relevant limitation period expires or the dispute is finally resolved, as applicable. We then delete or anonymise data unless a continuing legal obligation requires retention. Hosting and account providers apply their own retention rules to data they process independently.

7. International processing and security

Depending on the service involved, hosting, email or payment providers may process data outside the European Economic Area. Relevant information about locations and transfer safeguards is available in each provider’s privacy notice. Where Templatier arranges a restricted transfer, an applicable GDPR transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, is required. Contact us for information about a transfer affecting your data.

We limit use of personal data to the people and services that need it for the stated purpose. Our storefront links to HTTPS checkout pages when payments are enabled. Please use the support email for enquiries and avoid sending passwords, full card details or unrelated sensitive information. We assess suspected data incidents and make notifications required by applicable law.

8. Your rights

Subject to the conditions in data protection law, you can request access, correction, deletion, restriction of processing and portability. You can object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. We do not use Templatier order or enquiry data for decisions based solely on automated processing that produce legal or similarly significant effects.

Send a request to mtomaszewskyi@icloud.com. We may ask for proportionate information to verify identity where necessary. We normally respond within one month and inform you of any lawful extension and its reasons. You may complain to the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), or to a competent supervisory authority in your country. Contact details and complaint guidance are available at uodo.gov.pl.

9. Your choices and external websites

Providing information for a general enquiry is voluntary. The details necessary to deliver an order or comply with a legal obligation are needed for that purpose. Without them we may be unable to complete the transaction or answer a request. Optional marketing choices are separate from ordering.

Selecting a live website preview takes you to an external website. Its operator’s own privacy notice governs activity there. We update this notice when the storefront’s processing changes and show the date of the latest revision above. Material changes will be communicated where the law requires.