Privacy Policy

Collidol is a digital products platform available at Collidol.com.

Before launch, replace this sentence with your final legal details: Collidol is operated by [LEGAL BUSINESS NAME]. Our contact email is [support@collidol.com].

For UK data protection purposes, the operator of Collidol is the data controller for the personal data described in this Privacy Policy, except where another organisation acts as an independent controller for its own processing, such as a payment provider.

If you have questions about this Privacy Policy or how your data is used, contact us through the Contact page.

This Privacy Policy applies when you:

• visit or browse Collidol;
• create or use an account;
• add products to your basket;
• buy or access digital products;
• download files or access product links;
• contact us for support;
• submit forms, messages, feedback, or reviews;
• apply to sell or use seller features;
• interact with emails, cookies, analytics, or security tools.

Depending on how you use Collidol, we may collect the following types of personal data:

• Identity data: name, username, business name, seller name, or account display name.
• Contact data: email address, support contact details, and communication preferences.
• Account data: login records, account settings, authentication data, access history, and security activity.
• Order data: products purchased, basket contents, prices, discounts, order dates, refunds, product access records, and download status.
• Payment data: payment status, billing information, payment provider references, fraud checks, and transaction records. Full card details are handled by the payment provider where applicable.
• Technical data: IP address, device type, browser type, operating system, session data, error logs, security logs, and website usage data.
• Marketing data: email preferences, subscription status, consent records, and engagement with marketing messages where applicable.
• Seller data: seller application information, business details, product submissions, payout/admin information, and seller communication history where seller features are used.
• Support data: messages, enquiries, complaint details, screenshots, attachments, order references, and support history.

We collect personal data directly from you when you:

• create an account;
• place an order;
• accept checkout terms;
• contact support;
• submit a contact form;
• apply to sell on Collidol;
• subscribe to emails;
• provide feedback, reviews, files, or messages.

We may also collect data automatically through website logs, cookies, analytics tools, security tools, and similar technologies.

We may receive limited personal data from third-party providers such as payment providers, authentication providers, hosting providers, analytics tools, email providers, fraud prevention services, or seller verification tools.

We must have a valid lawful basis when using personal data. The lawful basis depends on the purpose and the relationship between Collidol and the user.

When payments are enabled, Collidol may use Stripe or another third-party payment provider to process payments securely.

Payment providers may collect and process information such as your payment method, billing details, transaction amount, fraud signals, device information, and payment authentication information.

Collidol may receive payment status, transaction references, invoice details, refund status, and limited billing information from the payment provider so that we can confirm orders, provide access to digital products, handle refunds, and keep financial records.

Collidol does not need to store full debit or credit card details directly where payment is processed through a secure payment provider.

If you create an account, we process information needed to create, secure, and manage that account. This may include your name, email address, login information, authentication records, account preferences, product access, and security logs.

We may use a third-party authentication provider to help create and manage accounts. Before launch, update this section with the provider you choose, such as Clerk, Supabase, Auth.js, Firebase, or another authentication service.

You are responsible for keeping your account login details secure. If you believe your account has been accessed without permission, contact us as soon as possible.

We use personal data to deliver digital products after purchase. This may include creating order records, linking products to your account, sending confirmation emails, creating access links, recording download/access activity, and providing support if a product is unavailable or faulty.

We may keep records showing whether and when digital access was provided. This helps us manage support requests, refund requests, fraud prevention, product access, and legal compliance.

We may send service emails that are necessary for your use of Collidol, including order confirmations, account notices, security alerts, access links, product delivery messages, and support replies.

We may send marketing emails only where permitted by law. This may be where you have consented, or where we are allowed to contact existing customers about similar products and you have not opted out.

You can unsubscribe from marketing emails at any time by using the unsubscribe option in the email or by contacting us. You may still receive important service emails even if you unsubscribe from marketing.

Collidol may use cookies and similar technologies to operate the website, keep users signed in, remember basket contents, secure the platform, understand website performance, improve the user experience, and measure marketing or analytics performance.

Some cookies may be strictly necessary for the website to work. Other cookies, such as analytics or marketing cookies, may require consent depending on how they are used.

Before launch, update this section once you know which analytics, cookie banner, or tracking tools you are using. If you use tools such as Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, or similar services, you should name them here and explain their purpose.

We only share personal data where needed to run Collidol, provide services, comply with law, protect the platform, or support users. Depending on how the platform is set up, we may share data with:

• payment providers, such as Stripe;
• authentication providers;
• hosting and database providers;
• email delivery providers;
• analytics and cookie tools;
• fraud prevention and security providers;
• customer support tools;
• professional advisers, including accountants and legal advisers;
• tax, regulatory, law enforcement, or government bodies where required;
• sellers, where necessary to deal with a seller product, order issue, or support request.

We do not sell your personal data to advertisers or unrelated third parties.

Some providers we use may process personal data outside the United Kingdom or the country where you live.

Where personal data is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are in place where required by data protection law. These safeguards may include adequacy regulations, approved contractual clauses, or other lawful transfer mechanisms.

Before launch, check the locations and transfer terms for your chosen hosting, database, authentication, payment, analytics, and email providers.

We keep personal data only for as long as reasonably needed for the purpose it was collected, including to provide services, manage accounts, process orders, deliver products, handle support, comply with law, resolve disputes, prevent fraud, and maintain business records.

Typical retention periods may include:

• account data: while your account remains active and for a reasonable period after closure;
• order and payment records: usually kept for accounting, tax, and legal record purposes;
• support messages: kept for as long as needed to resolve the issue and maintain business records;
• marketing consent records: kept while you are subscribed and for a reasonable period after unsubscribe;
• security logs: kept for a limited period unless needed to investigate abuse, fraud, or security incidents;
• seller records: kept while seller access is active and for a reasonable period after the seller relationship ends.

Before launch, you should confirm your final retention periods based on your accounting, tax, platform, support, and provider setup.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include secure hosting, access controls, password protection, authentication systems, payment provider security, encrypted connections, monitoring, backups, and limited access to personal data.

No online service can guarantee complete security. You should use a strong password, keep login details private, and contact us if you suspect unauthorised access to your account.

Depending on your location and the circumstances, you may have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete personal data;
• ask us to delete your personal data in certain circumstances;
• ask us to restrict how we use your personal data;
• object to certain uses of your personal data;
• request transfer of your personal data in a portable format;
• withdraw consent where we rely on consent;
• complain to a data protection authority.

To exercise your rights, contact us through the Contact page. We may need to verify your identity before responding to a request.

If you are in the UK, you also have the right to complain to the Information Commissioner's Office if you are unhappy with how your personal data is handled.

Collidol is not intended for children. You should not create an account, buy products, submit personal data, or use seller features if you are not old enough to enter into a contract or use the platform lawfully in your location.

If we become aware that personal data has been provided by a child without appropriate permission where required, we may delete the data and restrict access to the account.

Collidol does not currently make decisions about users based solely on automated processing that would have a legal or similarly significant effect.

Payment providers, fraud prevention tools, analytics providers, or security services may use automated systems to detect fraud, prevent abuse, secure accounts, or process payments.

If this changes in the future, we will update this Privacy Policy where required.

If you apply to sell or use seller features on Collidol, we may collect and use additional personal data and business data to review your application, manage seller access, display products, process seller communications, handle complaints, manage payouts, and comply with legal or tax obligations.

Additional seller terms, onboarding requirements, tax checks, verification checks, payout provider requirements, and product standards may apply before seller features are made available.

Collidol may link to third-party websites, tools, sellers, payment providers, product resources, or external services.

Third-party services have their own privacy policies and practices. We are not responsible for how third parties use personal data where they act independently from Collidol.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.

If we make significant changes, we may take reasonable steps to notify users through the website, account area, checkout flow, or email where appropriate.

If you have questions about this Privacy Policy, your personal data, your account, an order, or your legal rights, contact us through the Contact page.

Before launch, replace this with your final privacy contact email: [support@collidol.com].