Privacy Policy

1. Scope and contact

This policy explains personal data processing for the NestifyCraft website, digital bundle store, newsletter, and support. NestifyCraft is responsible for the information it uses for these purposes. For privacy requests, contact support@nestifycraft.com or visit https://nestifycraft.com.

The browser extension has a separate AMZ Reviews Exporter privacy policy. Visiting this store does not upload your completed worksheets or client records.

2. What we process and why

• Website delivery and security: hosting services receive ordinary requests, including IP address, browser details, requested URL, and time. The purpose is serving the site and investigating misuse, based on legitimate interests in operating a secure website (GDPR Article 6(1)(f)).
• Orders and access support: a checkout provider may share your name, email address, product, order reference, transaction status, and billing or tax country. We use relevant records to deliver and support your purchase (Article 6(1)(b)) and meet applicable accounting duties (Article 6(1)(c)). We do not receive full card numbers or card security codes.
• Newsletter: your email address and the subscription status and consent records made available by MailerLite are used to send the welcome offer and updates you request. The basis is consent (Article 6(1)(a)).
• Support: your contact details and message are used to answer you, resolve access issues, or handle privacy requests, based on the contract, legitimate interests in responding to inquiries, or a legal obligation, as applicable.

Providing a newsletter email is optional. The checkout needs sufficient billing and contact information to process an order and deliver files. Please do not submit health information, completed client intake forms, or other sensitive client records.

3. Payment providers and other recipients

The selected external checkout receives payment and billing details directly. Where it acts as Merchant of Record, it is responsible for its payment, tax, fraud prevention, and transaction record processing under its own privacy policy. Roles and processing arrangements depend on the provider selected for the order.

Marketplace checkout: Etsy. Potential hosted checkout providers: Lemon Squeezy, Gumroad, and Payhip. Only the provider used for your order receives that checkout submission; listing them here does not mean your details are sent to all three.

We use MailerLite for newsletter signup, subscription management, and email delivery. Website hosting and email services process the technical requests and correspondence necessary to provide those services. The shared website loads Material Icons from Google Fonts, which receives ordinary connection information; see Google’s privacy policy.

Data may also be shared where legally required or necessary to establish or defend a legal claim. NestifyCraft does not sell personal data.

4. Newsletter choice, cookies, and external links

Gumroad prices on this website use the configured EUR base price. If USD/PLN display selection is available with another checkout configuration, the store remembers that preference in your browser’s localStorage. This functional preference contains no contact or payment details and is not sent to NestifyCraft. You can remove it by clearing this website’s browser storage. If storage is unavailable, currency switching still works for the current session.

VIP codes from a link or the checkout summary are kept in the current store session and may appear in the page URL. A selected code is sent to the chosen checkout provider when you continue to payment so the provider can validate it. A code does not verify a past Etsy or Amazon purchase and does not subscribe you to marketing.

Opening a local order summary does not load a payment provider’s script. Etsy links open the marketplace without loading a hosted payment script. If you select a VIP code confirmed for our Etsy shop, the link includes that code in a coupon URL parameter for Etsy to validate. When you choose a configured hosted checkout, the website loads only the selected provider’s checkout script; that provider then receives ordinary connection information and any checkout details you submit under its own privacy policy.

The homepage and optional bonus-vault newsletter forms ask for your agreement before submitting your email to the existing MailerLite form. Free downloads are available without subscribing. An accepted signup request may still require confirmation by email, depending on the form settings. Use the unsubscribe link in any newsletter, or email support to withdraw consent. Withdrawal does not affect earlier lawful processing.

The bonus page reads its source and collection from URL parameters to personalize your current visit. This selection is kept in the page state and URL; it is not a verified purchase history or health profile. The bonus newsletter form sends only your email and the existing form submission marker to MailerLite. Clicking the already-subscribed or direct-access button does not send an email or verify subscription status.

This store does not add advertising trackers, analytics scripts, or a local customer profile. External checkout, newsletter communications, and linked services may have their own cookies or measurement features, described in their notices. Opening an Etsy, social media, or workshop link takes you to that service.

5. Retention, security, and international transfers

We retain newsletter contact data while you remain subscribed. After an unsubscribe, a minimal suppression record may be retained to respect your choice. Support correspondence is retained for up to 24 months after resolution unless a dispute or legal obligation requires longer. Transaction and accounting records are kept for applicable statutory periods; the checkout provider also has its own retention obligations. Hosting logs follow the host’s security and retention settings; contact us for details relevant to a request.

We limit access to the information needed for each task and use HTTPS for website and checkout connections. You are responsible for storing completed templates securely on your own devices. Do not email full payment card details or confidential client records.

External providers may process information outside the EEA or UK. Where applicable, transfers require safeguards recognized by data protection law, such as an adequacy decision or approved contractual clauses. Provider notices explain their locations and safeguards; contact us for information about safeguards relevant to your data.

6. Your privacy rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, or portability of your data, object to processing based on legitimate interests, and withdraw consent. You may complain to your local data protection authority, including Poland’s UODO, or the UK ICO, as applicable.

Email support@nestifycraft.com to exercise your rights. We may request proportionate identity verification and will respond within one month, subject to lawful extensions. For records controlled independently by a checkout provider, you may also contact that provider directly.

NestifyCraft does not make solely automated decisions with legal or similarly significant effects about store visitors. Children’s printables are purchased by adults; we do not knowingly solicit children’s newsletter subscriptions or personal data. Contact us if a child has supplied information so we can address it.

7. Policy updates

We update this notice when website features or data practices change and show the revision date above. Where legally required, we provide additional notice or obtain new consent before using data for a new purpose.