Privacy Notice

Effective date: 3 November 2026

Who is responsible

Federico Giugno – Seller Sheets Lab, Via Valsabbia 9b, 25081 Bedizzole (BS), Italy. Email: fedyno@gmail.com. Federico is the data controller for the buyer data we receive (EU GDPR, art. 13). No Data Protection Officer has been appointed.

What we receive

When you buy, the store platform shares with us:

• your name (if given) and email address;
• your country;
• your order details: product, price, date, order number and discount code;
• your answers to checkout questions, including your consent to immediate download;
• your choice about receiving emails from us.

If you write to us or use the withdrawal form, we also receive what you send. We do not receive your full card or bank details.

Your email address and order details are needed to complete the purchase and deliver the file; without them we cannot sell to you. Joining the mailing list is optional.

Why we use it, and on what legal basis

• To deliver the file, answer support requests, and handle refunds and withdrawals. Basis: the contract (GDPR art. 6(1)(b)).
• To keep sales records required by Italian tax and accounting law. Basis: legal obligation (art. 6(1)(c)).
• To keep proof of your checkout consent, and to handle disputes and chargebacks. Basis: legitimate interest (art. 6(1)(f)).
• To send product updates and offers, only if you opted in. Basis: consent (art. 6(1)(a)). You can unsubscribe at any time with the link in every email.

Who else processes your data

• Payhip (Payhip Ltd, UK) runs our store, checkout, file delivery and email tools. It acts as our processor for our store data and as an independent controller for the data it processes for its own purposes (account, fraud prevention, legal obligations) under its own policy: https://payhip.com/privacy
• Gumroad, Inc. (USA) runs our Gumroad store. For Gumroad purchases, Gumroad is the seller of record and also uses your data for its own purposes under its own policy: https://gumroad.com/privacy
• Stripe and PayPal process payments as independent controllers: https://stripe.com/privacy · https://www.paypal.com/myaccount/privacy/privacyhub
• Google (Gmail and Google Forms), as our processor, to receive support emails and withdrawal requests: https://policies.google.com/privacy

Some of these companies are based outside the EU (UK, USA). Transfers rely on EU adequacy decisions (UK; US companies certified under the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.

We do not sell your data, use it for profiling or automated decisions, or export buyer emails outside these platforms for other purposes.

How long we keep it

• Order records: up to 10 years, as Italian accounting law requires (Civil Code, art. 2220).
• Support emails and withdrawal requests: up to 2 years after the last message.
• Mailing list: until you unsubscribe.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data. You can also object to processing based on legitimate interest, and withdraw consent at any time. Write to fedyno@gmail.com.

You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority in your EU country.