Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how 1001mockups, operated by [LEGAL ENTITY / OWNER NAME], [ADDRESS], [COUNTRY] (“we”, “us”, “our”), collects, uses, and protects your personal data when you use 1001mockups.com (the “Site”).

We are the data controller for the personal data described here. Contact: [SUPPORT EMAIL].


1. What data we collect

Data you give us:

  • Account data — name, email address, password (stored encrypted).
  • Purchase data — items purchased, order history, billing details, country for tax purposes.
  • Communications — messages you send us via email, contact form, or support requests.
  • Optional content — testimonials, reviews, or files you choose to upload.

Data collected automatically:

  • Technical data — IP address, browser type, device type, operating system.
  • Usage data — pages visited, downloads made, referring site, timestamps.
  • Cookies and similar technologies — see Section 7.

Data we do not collect: we do not store full payment card numbers. Payments are handled by our payment providers.


2. How we use your data

We use your data to:

  • create and manage your account, and provide access to purchased products;
  • process payments, issue invoices, and handle refunds;
  • deliver downloads and enforce license and download limits;
  • provide customer support and respond to your messages;
  • send transactional emails (order confirmations, access expiry reminders, important service notices);
  • send marketing emails about new products and offers — only where you have consented, and you can unsubscribe at any time;
  • detect, prevent, and investigate fraud, license abuse, and security incidents;
  • improve the Site and understand how it’s used;
  • comply with legal, tax, and accounting obligations.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on:

  • Contract — to provide the products and services you purchase and manage your account.
  • Legitimate interests — to secure the Site, prevent fraud and license abuse, and improve our products, balanced against your rights.
  • Consent — for marketing emails and non-essential cookies. You can withdraw consent at any time.
  • Legal obligation — for tax, accounting, and record-keeping requirements.

4. Who we share data with

We share personal data only with service providers who help us run the business, and only as needed:

  • Payment providers — [e.g. Stripe, PayPal] to process payments.
  • Hosting and infrastructure — [HOSTING PROVIDER] to host the Site and files.
  • Email and marketing tools — [EMAIL PROVIDER] to send transactional and marketing emails.
  • Analytics — [ANALYTICS PROVIDER, e.g. Google Analytics / Plausible], if used.
  • Professional advisers and authorities — where required by law or to establish or defend legal claims.

We do not sell your personal data.


5. International transfers

Some of our providers are located outside your country, including outside the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You can request details at [SUPPORT EMAIL].


6. How long we keep data

  • Account and purchase data — for as long as your account is active, and afterwards as needed to enforce licenses, resolve disputes, and meet legal obligations.
  • Invoices and tax records — for the period required by law in [COUNTRY] (typically [X] years).
  • Support messages — [X] years.
  • Marketing data — until you unsubscribe or withdraw consent.
  • Analytics and log data — [X] months.

We delete or anonymize data when it is no longer needed.


7. Cookies

We use cookies and similar technologies to:

  • keep you logged in and remember your cart (essential — always active);
  • remember preferences such as language or currency (functional);
  • understand traffic and usage (analytics — only with your consent);
  • measure marketing campaigns (marketing — only with your consent).

You can manage non-essential cookies through our cookie banner or your browser settings. Blocking essential cookies may break parts of the Site.

(Если понадобится подробная таблица cookies — вынесем в отдельную Cookie Policy.)


8. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete your data (“right to be forgotten”);
  • restrict or object to certain processing, including direct marketing;
  • data portability — receive your data in a machine-readable format;
  • withdraw consent at any time, without affecting prior processing;
  • lodge a complaint with your local data protection authority.

To exercise any of these, email [SUPPORT EMAIL]. We will respond within one month, as required by the GDPR. We may need to verify your identity first.

Note that deleting your account may end your access to purchased products; we may retain limited records where required by law or to enforce licenses.


9. Security

We use appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, access controls, and protected download links. No system is completely secure, so we cannot guarantee absolute security, but we take reasonable steps and will notify you and the relevant authority of a data breach where legally required.


10. Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we’ll delete it.


11. Third-party sites

The Site links to third-party services such as our Etsy shop and YouTube channel. Their privacy practices are their own — please review their policies.


12. Changes to this policy

We may update this Privacy Policy. We’ll update the “Last updated” date and, for material changes, provide reasonable notice on the Site or by email.


13. Contact

[LEGAL ENTITY / OWNER NAME] [ADDRESS] Email: [SUPPORT EMAIL]

If you are in the EU/EEA and have concerns we haven’t resolved, you may contact your national data protection authority.