Privacy Policy
ProTemplate, of TODO_ADDRESS_LINE_1, TODO_CITY_AND_POSTCODE, TODO_COUNTRY, is the controller of the personal data described here. This policy covers ProTemplate and the accounts, orders and downloads that run on it.
It is written to be read. Where something is unusual — the referral cookies in particular — it says so plainly rather than burying it.
1. What we collect
- Account details: the name and email address you register with, and your password, which is stored only as a hash we cannot reverse.
- Orders: which products you bought, what you paid, the status of each order and when it changed.
- Downloads: which file you fetched and when - one you bought, or one free that day - so we can serve it and detect abuse.
- Emails about offers: whether you ticked "Email me offers and reminders" - when you signed up, when you checked out, or on your account page - and when you last changed your answer. If you did, and you chose Accept on the cookie banner, the products you look at while signed in, so a reminder can name the one you were considering. If you later choose Reject, or stop these emails, we forget them.
- Notifications, if you turn them on in a browser: that browser's push address and the keys its messages are encrypted to. The browser's own push service - Google's, Mozilla's, Apple's or Microsoft's, depending on the browser - delivers them; it sees that a message came from us, not what it says.
- Student and work discounts, if you verify an address for one: the school or work email address you verify, which discount it is for, when you verified it and when it ends. We send a six-digit code to that address and keep the code only as a hash, for a day. We keep the address so that one address unlocks the discount for one account only.
- Referral data, if you arrived through a referral link: a visitor identifier we generate, the code you arrived with, the page you landed on, the page that linked you, your browser's user-agent string, and the country your network resolves to. We collect this only after you accept cookies.
- Visit statistics: the pages you open, the products you view or add to your cart, what you search for, the checkouts you start, the site that sent you, the country your connection comes from, your device type, browser and the site's language - tied to random numbers kept in your browser, not to your name or account. While visit recordings are on, also a replay of how you move through the site, with everything you type hidden. Our Cookie Policy explains this in full.
- Technical data: your IP address, used to rate limit sign-in and sign-up attempts and to protect the site. We do not build a profile from it.
We do not collect special category data, we do not buy data about you from anyone, and we do not use automated decision-making that produces legal effects.
2. Why we use it, and on what basis
| What for | Legal basis |
|---|---|
| Creating your account and keeping you signed in | Performance of our contract with you |
| Taking your order and giving you the files you bought | Performance of our contract with you |
| Answering your support and refund requests | Performance of our contract with you |
| Keeping records for tax and accounting | Legal obligation |
| Rate limiting, fraud prevention and site security | Our legitimate interest in a service that stays up and is not abused |
| Counting visits and improving the shop | Our legitimate interest in knowing how the shop is used and where it lets buyers down |
| Emailing you reminders about a checkout you left unpaid, or a product you looked at | Your consent, given by ticking "Email me offers and reminders", and withdrawn by unticking it on your account page or with the unsubscribe link in any of these emails |
| Sending those reminders as notifications, to a browser where you turned them on | Your consent, given by pressing Turn on notifications and allowing your browser's prompt, and withdrawn by turning them off on your account page or in the browser |
| Attributing a purchase to the person who referred you | Your consent, given through the cookie banner |
Where we rely on consent you can withdraw it at any time, from the cookie settings link in the footer. Withdrawing it does not affect anything done beforehand.
3. Payment data
We never see your card or your wallet. You pay on the page or in the app of the payment provider you chose, so the payment data is held by them, they are their own controller of it, and their privacy notice governs what they do with it. Where a payment is made by transfer, what we hold is the reference you send us so a person here can match it to your order.
What reaches us is the outcome — that an order was paid, for how much, and when.
4. Who else processes it
We do not sell personal data and we do not share it for anyone else's marketing. These providers process it on our instructions so the service can run:
| Provider | What they do for us | Their privacy notice |
|---|---|---|
| Binance Pay | Takes payments made with it, and tells us that an order was paid | www.binance.com |
We may also disclose data where the law requires it, or to establish or defend a legal claim.
5. Where your data goes
Our providers operate internationally, so your data may be processed outside the country you live in. Where that involves a transfer out of the EEA or the UK, it is covered by an adequacy decision or by standard contractual clauses with the provider concerned.
6. How long we keep it
| What | How long |
|---|---|
| Your account | Until you ask us to close it |
| Orders and invoices | As long as tax and accounting law requires, typically six years |
| Download records | Up to 12 months |
| Records of the emails we send you | 30 days |
| Products you looked at, for reminders | 30 days |
| The reminders we sent you | Until you close your account, so none is sent twice |
| Your answer about emails about offers | Until you change it or close your account |
| Browsers where you turned notifications on | Until you turn them off, the browser stops taking them, or you close your account |
| A school or work address you verified for a discount | Until you close your account |
| The codes we send to verify it | One day |
| Referral visits and attribution | Up to 24 months from the visit |
| Visit statistics | 13 months per visit; after that, only daily totals that identify no one |
| Visit recordings | Up to 90 days |
| Your cookie choice | Six months, then we ask again |
7. Your rights
Depending on where you live, you can ask us to:
- give you a copy of the data we hold about you
- correct anything that is wrong
- delete your data, where we have no overriding reason or obligation to keep it
- restrict or object to a use we base on our legitimate interests
- hand your data to you, or to another provider, in a portable format
- withdraw a consent you gave
Message us on Telegram at @protemplate_xyz (https://t.me/protemplate_xyz) and we will answer within one month. If you are not satisfied with our answer, you can complain to the data protection authority where you live.
8. Cookies
Our Cookie Policy lists every cookie this site sets, what it is for and how long it lasts, and explains how to change your choice.
9. Children
This site is not intended for children under 16, and we do not knowingly hold their data. If you believe a child has registered, tell us and we will remove the account.
10. How we protect it
The site is served only over HTTPS. Passwords are hashed. Purchased files are streamed through the site to the signed-in buyer rather than exposed at a public address, so a copied link gives nobody else access. Access to the production database is limited to those who need it.
No system is perfectly secure, and we do not claim otherwise. If a breach affects you and is likely to be a risk to your rights, we will tell you and the relevant authority.
11. Changes
If we change this policy in a way that matters, we will change the effective date at the top of the page, and say so on the site.
12. Contact
- Privacy enquiries and general support, on Telegram: @protemplate_xyz (https://t.me/protemplate_xyz)
- Post: ProTemplate, TODO_ADDRESS_LINE_1, TODO_CITY_AND_POSTCODE, TODO_COUNTRY