Privacy policy

Embroidery Download A.S.S., tax ID ES17730658G, Calle D, nº 23, 50170 Mequinenza (Zaragoza), España. Contact: orders@embroiderydownload.com.

Order and account data: name, email, purchase and download history.

Payment data: handled directly by our payment providers (Stripe and PayPal); we do not store card numbers.

Usage data: if you accept analytics cookies, aggregated usage data via Google Analytics.

First-party visit statistics, without cookies: the page you visit, the site you came from (domain only), your device type and approximate country. To group the pages of one visit we use an encrypted digest of your IP address and browser that changes every day; neither the IP nor the browser is stored, and it cannot identify you or recognise you from one day to the next.

Processing and delivering your orders and downloads — performance of the contract.

Customer support and transactional emails — contract / legitimate interest.

Cart recovery and marketing communications — consent or legitimate interest, with opt-out always available.

Web analytics — consent (managed by the cookie banner).

First-party visit statistics without cookies, to learn what is viewed, where visits come from and to improve the shop — legitimate interest.

Tax and accounting obligations — legal obligation.

We use providers that process data on our behalf: Stripe and PayPal (payments), Google (analytics), Resend (email delivery), Amazon Web Services (CloudFront, content delivery), Cloudflare (DNS), Cloudflare R2 (file storage) and our hosting provider. Some may involve international transfers covered by appropriate safeguards (standard contractual clauses).

We keep data for the duration of the relationship and thereafter for the legal tax and commercial limitation periods.

First-party visit statistics are kept for 25 months at most.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to orders@embroiderydownload.com.

If you believe we process your data improperly, you may complain to your national data protection authority (in Spain, the AEPD — www.aepd.es).