Privacy policy

1. Who is responsible for your data

The controller of personal data collected through davincreate.com is UEFN LAB, a business based in Poland. Full business details are provided on every invoice and on request. Contact in all privacy matters: the contact page.

2. What is collected and why

When	Data	Purpose and legal basis
You send the contact form or a commission brief	Your message, the contact handle you give, island code, optional attachments, your country	Answering you and preparing an offer — steps before a contract and legitimate interest (GDPR Art. 6(1)(b), (f))
You buy in the Marketplace	E-mail, name, billing address, optional company name and tax ID, optional Discord username, what you bought and the amount	Performing the contract and delivering the order (Art. 6(1)(b)); accounting and tax duties (Art. 6(1)(c))
You use any page	IP address and country, kept for up to 10 minutes as a counter	Protection against abuse and spam — legitimate interest (Art. 6(1)(f))

Card numbers and other payment credentials are entered on Stripe’s page and never reach this site.

3. Who receives the data

• Stripe — payment processing and the checkout page.
• Cloudflare — hosting of the site, order records and files.
• Discord — the Seller receives contact messages, briefs and order notifications in a private channel.
• Resend — sending the e-mail with the link to your order.
• Google Fonts — fonts are loaded from Google, which sees your IP address when the page loads.

Some of these providers are based in the United States; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses used by the provider.

4. How long it is kept

Contact messages and briefs: as long as needed to handle the enquiry and any resulting work, then removed on request. Order records: for the period required by tax and accounting law. Abuse counters: up to 10 minutes.

5. Cookies and storage on your device

This site sets no advertising or analytics cookies and uses no tracking. Your browser stores two things locally so the shop works: the contents of your cart and a list of orders made on this device. They stay on your device and you can clear them at any time in your browser settings. Stripe’s payment page uses its own cookies under Stripe’s policy.

6. Your rights

You can ask for access to your data, a copy of it, correction, deletion, restriction of processing, and you can object to processing based on legitimate interest. Write to the contact page. You also have the right to lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych) or the authority in your country.

7. No newsletter, no profiling

Your e-mail is used only for your order and for replying to you. It is not added to any mailing list. No automated decisions or profiling are made.