Privacy

Lars Nelissen van Gasselt, trading as Lamp & Leaf Press (KvK 50026968), is responsible for the personal data described here. Contact: hello@lampandleaf.com. Full contact details, including address and phone, are on the contact page.

What we keep, and why

• When you buy: your name, email address, billing country and address, the country that issued your card (as reported by Stripe), the country your connection came from (as reported by our hosting provider, not your IP address itself), what you bought, the amount, the VAT, and the time you gave consent to immediate delivery. The countries are the evidence of where you live that VAT law requires. We need these to deliver your files, to send your order email and to meet our tax duties (contract and legal obligation). We keep order records for 7 years, as Dutch tax law requires.
• Card details go straight to Stripe. We never see or store them.
• Downloads: the time each file was downloaded and the country the download came from (as reported by our hosting provider, not your IP address itself), so we can show that delivery started and help if a download fails.

Cookies

We use no advertising, tracking or analytics scripts. We set two small first-party cookies:

• ll_vid: a random number, so we count each visitor to a product page once.
• ll_arm: which of two test prices you were randomly given, so you keep seeing the same price.

Both last up to 90 days and are never shared or linked to your name unless you buy.

Who processes data for us

• Stripe (payments). For buyers in the countries listed in our terms under "Orders sold through Link", Stripe sells the order to you under the name Sold through Link (Sold through Link, LLC). Stripe receives your name, email address, billing address and payment details to take the payment, work out and pay the tax, and send your receipt and tax invoice, and is the controller of that data under its own privacy policy at link.com/privacy. We receive your name, email address, country and order details from Stripe so we can deliver your download.
• Cloudflare (website hosting and file storage)
• Our email provider (order emails)

Stripe and Cloudflare may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework and also use the EU standard contractual clauses.

Your rights

You can ask to see, correct or delete your data, or object to its use, by emailing us. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.