Skip to content

Privacy Policy

Last updated: April 10, 2026

Wondersheets ("Data Controller") is committed to protecting Customer personal data. This policy is based on EU Regulation 2016/679 (GDPR).

1. Data Controller

Wondersheets — Email: hello@wondersheets.eu. Lemon Squeezy Ltd. (London, UK), as Merchant of Record, acts as an independent data controller during the payment process and EU VAT handling.

2. Data We Process

During purchase we process: email address, purchase history, IP address (for security, 30 days), browsing cookies (see Cookie Policy). We do NOT store payment data (credit cards) — these are handled by Lemon Squeezy.

3. Purpose and Legal Basis

Contract fulfillment (sending download link) — basis: GDPR Art. 6(1)(b). Purchase records, invoicing — basis: legal obligation (Art. 6(1)(c)). Web usage statistics — basis: legitimate interest (Art. 6(1)(f)) or consent (cookie banner).

4. Retention Period

Email address and purchase history: 8 years from purchase (accounting law). IP address: 30 days. Cookie data: as specified in the Cookie Policy (max 13 months).

5. Data Processors

Lemon Squeezy Ltd. (payment, EU VAT) — UK, adequacy-recognized country. Cloudflare (hosting, DDoS protection) — EU servers. Email service (download link delivery) — GDPR-compliant EU provider. Full list available on request.

6. Data Subject Rights

Customers have the right to: (a) request information about stored data, (b) rectification, (c) erasure ("right to be forgotten" — after legal retention expires), (d) restriction of processing, (e) data portability, (f) objection, (g) withdrawal of consent, (h) file a complaint with the supervisory authority.

7. Contact

Data-related requests can be sent to hello@wondersheets.eu. We respond within 30 days.