Privacy Policy
Version 2.0, effective 2026-09-23
This policy explains how ParaisDesign handles personal data when you visit the site, buy files or subscribe to the newsletter. It follows the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller is Parais Gergely, sole proprietor, Hungary, 8045 Isztimér, Jókai utca 3., Hungary, tax number 92279441-1-27, email hello@paraisdesign.com. See the Legal notice. We have not appointed a data protection officer, as the law does not require one for a business of this kind; write to the email above with any privacy question.
2. What we process, why and for how long
In short: Only what is needed to deliver your files, protect the downloads and, if you ask for it, send the newsletter.
| Purpose | Data | Legal basis | Kept for |
|---|---|---|---|
| Delivering your order | Email, name, order number, items, amounts, download links | Contract (GDPR Art. 6(1)(b)) | 5 years from the order, then deleted automatically |
| Record of your withdrawal consent | Time you ticked the immediate-delivery box, wording version | Legal obligation and legitimate interest in proving it (Art. 6(1)(c) and (f)) | With the order, 5 years |
| Download protection | IP address, browser type, time and result of each download | Legitimate interest in preventing link sharing and abuse (Art. 6(1)(f)) | 90 days, then deleted automatically |
| Newsletter and welcome discount | Email, sign-up time and source, unsubscribe status | Your consent (Art. 6(1)(a)), which you can withdraw at any time | Until you unsubscribe; after that only the address and the date, so we never email you again |
| Resending download links | The email you enter | Contract (Art. 6(1)(b)) | Not stored; only used to look up your orders |
| Answering your emails | Your email address and message | Legitimate interest in handling your request (Art. 6(1)(f)) | Up to 2 years after the matter is closed |
3. Payment data
In short: We never see your card or payment details.
Lemon Squeezy collects your payment details, billing address and tax information at the checkout and processes them as an independent controller under its own privacy policy. It sends us your name, email, order number and the amount so that we can deliver the files.
4. Service providers and transfers outside the EU
- Lemon Squeezy (Sold through Link, LLC (formerly Lemon Squeezy, LLC)): Merchant of record: payment, tax, receipts. An independent controller for the payment data it collects. (USA)
- Supabase, Inc.: Database hosting (orders, subscribers) (Servers in London, United Kingdom)
- Cloudflare, Inc.: Website hosting, content delivery, file storage, security (USA, global network)
- Resend, Inc.: Sending order and newsletter emails (USA)
The United Kingdom has an EU adequacy decision. Transfers to the USA rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses. We do not sell personal data and do not use it for advertising profiles.
6. AI tools
We use AI tools to create the artworks and to draft product descriptions in our internal admin area. No customer data is sent to these tools.
7. Your rights
In short: Ask us by email; we answer within one month.
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest. You can withdraw newsletter consent at any time with the unsubscribe link in every email, without affecting earlier processing. Write to hello@paraisdesign.com; we answer within one month. We may need to keep order data we are legally required to keep.
You can complain to the Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, 1055 Budapest, Falk Miksa utca 9-11, naih.hu) or to the authority of the country where you live or work.
8. Children
The shop is not directed at children under 16, and we do not knowingly collect their data.
9. Security
Files are kept in private storage and are only reachable through time-limited, signed links. Access to the database and the admin area is restricted and protected. If a breach is likely to put your rights at high risk, we will tell you without undue delay.
Other documents: Terms of Sale, License Terms, Refunds and Withdrawal, Legal notice