EmbroideryDownload

Privacy policy

Last updated: 16 septembre 2026

This policy explains what personal data we process, for what purposes and legal bases, and how to exercise your rights under the GDPR (EU 2016/679).

Data controller

Embroidery Download A.S.S., tax ID ES17730658G, Calle D, nº 23, 50170 Mequinenza (Zaragoza), España. Contact: orders@embroiderydownload.com.

Data we process

Order and account data: name, email, purchase and download history.

Payment data: handled directly by our payment providers (Stripe and PayPal); we do not store card numbers.

Usage data: if you accept analytics cookies, aggregated usage data via Google Analytics.

Purposes and legal bases

Processing and delivering your orders and downloads — performance of the contract.

Customer support and transactional emails — contract / legitimate interest.

Cart recovery and marketing communications — consent or legitimate interest, with opt-out always available.

Web analytics — consent (managed by the cookie banner).

Tax and accounting obligations — legal obligation.

Processors and third parties

We use providers that process data on our behalf: Stripe and PayPal (payments), Google (analytics), Resend (email delivery), Amazon Web Services (CloudFront, content delivery), Cloudflare (DNS), Cloudflare R2 (file storage) and our hosting provider. Some may involve international transfers covered by appropriate safeguards (standard contractual clauses).

Retention

We keep data for the duration of the relationship and thereafter for the legal tax and commercial limitation periods.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to orders@embroiderydownload.com.

If you believe we process your data improperly, you may complain to your national data protection authority (in Spain, the AEPD — www.aepd.es).