Who we are
Help Creators, trading as Gutform, operates gutform.company and decides how personal data collected through it is used. That makes us the data controller. You can reach us through our support page.
What we collect and why
- Email address — when you buy a kit or request a free sample. Used to deliver your files and download link, handle support, and send occasional practical notes about the templates. Legal basis: performance of our contract with you for purchases; consent for the free sample list.
- Order details — the kit purchased, order reference, amount, currency, and date. Used to give you access to the right files, handle refunds and upgrades, and keep proper business records. Legal basis: contract and our legal obligations.
- Download activity — which files your order accessed and when. Used to see which templates are useful and to spot abuse of a shared link. Legal basis: legitimate interests.
- Site usage — pages visited, referring site, and approximate technical details of your request. Used in aggregate to understand which pages help people. Legal basis: legitimate interests.
- Support messages — what you write to us and the order it relates to. Used to answer you. Legal basis: contract and legitimate interests.
- Administrator login credentials — for our own staff accounts only. Legal basis: legitimate interests in securing the service.
We do not collect or store your card details. Payment data is collected directly by our payment provider as Merchant of Record.
Who we share it with
- Paddle.com, our Merchant of Record, for the sale itself, payments, invoicing, tax compliance, and refunds.
- Service providers that host our website, database, file storage, and email delivery, acting on our instructions.
- Professional advisers such as accountants or lawyers, where needed.
- Authorities, where we are legally required to disclose.
We do not sell your personal data or share it with advertisers.
International transfers
Some of our providers process data outside the UK and EEA. Where that happens, transfers are covered by an adequacy decision or by Standard Contractual Clauses together with appropriate additional safeguards.
How long we keep it
Order records are kept for as long as needed to support your access and to meet accounting and tax record-keeping obligations. Free-sample subscriber records are kept until you unsubscribe or ask us to delete them. Site usage records are kept in aggregate form. When data is no longer needed it is deleted or anonymised.
Your rights
Subject to the law that applies to you, you can ask us to give you access to your data, correct it, erase it, restrict or object to our use of it, or send it to another provider. Where we rely on consent you can withdraw it at any time, including by unsubscribing from our emails. Ask through our support page and we will respond within one month. If you are in the UK or EEA and unhappy with our response, you can complain to your local data protection supervisory authority.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls on our database, private file storage, and expiring download links that are unique to your order.
Cookies and similar technology
We use only what the store needs to work: essential storage for your session and for the checkout our payment provider opens. We record page views in aggregate to understand which pages are useful, without advertising or cross-site tracking cookies. You can clear or block storage in your browser settings; the store will still work, though checkout may not.
Changes
If we change this notice we will update the date at the top of this page. Material changes affecting how we use your data will be highlighted here.