Privacy Policy
Plumwick Paper ("we," "us") operates plumwickpaper.com. This Privacy Policy explains what personal information we collect, why, and your rights over it.
What we collect
- Email address — used to send your order receipt, your downloads, and (only if you opt in) occasional promotional emails.
- First name — used to address you in your receipt and on your account portal. Optional and not required to receive your purchase.
- Order details — what you bought, when, the PayPal transaction reference. Retained for accounting and refund handling.
- IP address and user-agent — recorded only when you download a file, solely to detect abusive sharing. Retained 90 days.
- Browser cookies — a sign-in cookie (pw_session) to keep you signed in, and Google Analytics cookies (_ga) which load only once you interact with a page. No advertising or retargeting cookies. Full detail in the cookie notice.
What we do NOT collect
- We do not collect your mailing address (you're buying a digital file).
- We do not collect your phone number.
- We do not see or store your credit card or bank details. Payment is handled entirely by PayPal.
- We do not run third-party analytics, advertising, or tracking pixels.
How we use it
Your email is used to: (1) send order receipts, OTP login codes, and refund notices; (2) deliver marketing emails if and only if you ticked the opt-in box at checkout; (3) recognise you on return visits to your downloads portal.
Who we share with
We share data with these processors, and no others: PayPal (payment), Zoho Mail (sending and receiving all email — receipts, download links, login codes, support), Brevo (marketing email, and only if you opted in), Bunny.net (hosting and serving your downloads), Cloudflare (DNS and edge protection), Google Analytics (anonymous usage measurement — it receives page views, never your email, name or order). We sell or rent nothing, to anyone, ever.
Your rights
You can: (1) access the personal data we hold — email support@plumwickpaper.com from your registered address; (2) correct it; (3) delete it (we anonymise past orders and remove your profile); (4) export it as JSON; (5) unsubscribe from marketing in one click via any marketing email. Transactional emails (receipts, login codes) continue regardless under "performance of contract" (GDPR Art. 6(1)(b)).
Retention
Order records: 7 years (tax/accounting). Download logs: 90 days. Marketing contact data: until you unsubscribe or 24 months of inactivity, whichever is first.
Contact
For privacy questions: support@plumwickpaper.com.