Your data, handled with care

Arnau Brand, registered with the Dutch Chamber of Commerce (KvK) under number 74956787, is responsible for the processing of your personal data as described here. Questions about privacy? Write to hello@arnaubrand.com.

• Orders: your name, email address, billing country and order details, to process your payment, deliver your template, send your receipt and meet our tax obligations. Legal basis: performing our agreement with you, and our legal obligations.
• Contact form and emails: your name, email address and message, and anything you choose to add (such as an order number or a website), to answer you. Legal basis: our legitimate interest in replying to your question, or taking steps before an agreement.
• Newsletter: your email address, only if you subscribe, to send you updates, tips and offers. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Website statistics: only if you accept analytics cookies, how you found and used our website (pages visited, device, browser, approximate location and referring site), to understand what works and improve the shop. Legal basis: your consent, which you can withdraw at any time through Cookie settings at the bottom of every page.
• Affiliate program: your contact details, profile and payout details if you join, to run the program and pay commissions. Legal basis: performing our agreement with you.

Payments are handled by our payment provider (Stripe). We never see or store your full card details. Stripe processes your payment data under its own privacy policy and acts as an independent controller for some of it, for example to prevent fraud.

We only share your data with services that help us run the shop, and only as far as needed:

• our payment provider, to take your payment;
• our hosting provider, which keeps the website running;
• MailerLite (UAB MailerLite, Lithuania, EU), our newsletter provider, to send the newsletter you subscribed to;
• Resend, our email provider, to send your order email and to deliver contact form messages to our inbox;
• Google Analytics (Google Ireland Limited), for website statistics, only if you accept analytics cookies;
• our affiliate tool, to track referrals and commissions;
• our accountant and the tax authorities, where the law requires it.

We have agreements with these providers to keep your data safe. Some of them are based outside the European Economic Area; in that case the transfer is protected by appropriate safeguards, such as the European Commission’s standard contractual clauses.

Always on, because the shop needs them: your cart, any discount code you add, your currency choice and your cookie choice are saved in your own browser (local storage). They never leave your device and aren’t used to follow you.

Only if you accept: analytics cookies. We use Google Analytics to see how visitors use the website, in numbers we can’t trace back to you by name. It sets these cookies:

• _ga: tells visits apart, kept for 2 years;
• _ga_<ID>: keeps track of the current visit, kept for 2 years.

We’ve turned off Google’s advertising features and Google signals, so this data isn’t used for ads or linked to your Google account. Google may process data in the United States; that transfer is covered by the EU–US Data Privacy Framework and standard contractual clauses.

Nothing is set or sent to Google unless you click Accept in the cookie popup. You can change your choice at any time through Cookie settings at the bottom of every page; if you decline, we stop the statistics and remove the analytics cookies. We ask again after 12 months. We don’t use advertising cookies.

• Order and invoice details: 7 years, as Dutch tax law requires.
• Contact messages: as long as needed to help you, and no longer than 2 years after our last contact.
• Newsletter: until you unsubscribe.
• Website statistics: up to 14 months in Google Analytics, then deleted.
• Affiliate details: as long as you take part, then as long as tax law requires.

You can ask us at any time to see, correct or delete your personal data, to limit or object to how we use it, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to hello@arnaubrand.com; we reply within one month.

If you’re unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

We take appropriate technical and organisational measures to protect your data, such as secure connections (HTTPS), trusted providers and limited access.

We may update this policy when our shop or the law changes. The latest version is always on this page, with the date at the top.