Privacy Policy
Last updated: April 10, 2026
Wondersheets ("Data Controller") is committed to protecting Customer personal data. This policy is based on EU Regulation 2016/679 (GDPR).
1. Data Controller
Wondersheets — Email: hello@wondersheets.eu. Lemon Squeezy Ltd. (London, UK), as Merchant of Record, acts as an independent data controller during the payment process and EU VAT handling.
2. Data We Process
During purchase we process: email address, purchase history, IP address (for security, 30 days), browsing cookies (see Cookie Policy). We do NOT store payment data (credit cards) — these are handled by Lemon Squeezy.
3. Purpose and Legal Basis
Contract fulfillment (sending download link) — basis: GDPR Art. 6(1)(b). Purchase records, invoicing — basis: legal obligation (Art. 6(1)(c)). Web usage statistics — basis: legitimate interest (Art. 6(1)(f)) or consent (cookie banner).
4. Retention Period
Email address and purchase history: 8 years from purchase (accounting law). IP address: 30 days. Cookie data: as specified in the Cookie Policy (max 13 months).
5. Data Processors
Lemon Squeezy Ltd. (payment, EU VAT) — UK, adequacy-recognized country. Cloudflare (hosting, DDoS protection) — EU servers. Email service (download link delivery) — GDPR-compliant EU provider. Full list available on request.
6. Data Subject Rights
Customers have the right to: (a) request information about stored data, (b) rectification, (c) erasure ("right to be forgotten" — after legal retention expires), (d) restriction of processing, (e) data portability, (f) objection, (g) withdrawal of consent, (h) file a complaint with the supervisory authority.
7. Contact
Data-related requests can be sent to hello@wondersheets.eu. We respond within 30 days.