Privacy Policy — Papacad (Downloadable CAD Plans & 3D Models)

Last updated: 18 August 2025

1) Who we are

Papacad.com provides downloadable CAD plans, 3D models and 2D production drawings for mechanical engineering projects.

Data Controller: Selreko Cadmechanika Sławomir Muraszko, ul. Zwycięska 14CA, 53‑033 Wrocław, Poland. Contact: support@papacad.com / shop@papacad.com

2) What data we collect

Only what’s needed to run the store, fulfil orders and keep the site secure.

  • Browsing data: IP address, device/browser info, pages viewed, cookies (see Cookie Policy). Used for security, fraud prevention and site analytics (if enabled).
  • Account data (optional): name, email, password (hashed). You can edit or delete your account.
  • Orders & invoicing: name, email, billing details, company + VAT number (if provided), products purchased, download entitlements, order notes.
  • Payments: processed securely by payment gateways (e.g., PayPal/Stripe). Papacad does not store card numbers—only transaction IDs and status.
  • Downloads: timestamps and IPs for licensed files (anti‑fraud, support, legal compliance).
  • Support & forms: messages you send us (contact form/email) and our replies.
  • UGC: product reviews/comments you post (public), plus moderation data.

3) Why we collect it (legal bases)

  • Contract: to process orders, deliver downloads, provide support.
  • Legitimate interests: security, fraud prevention, service improvement, basic store analytics.
  • Legal obligation: tax/accounting retention, consumer law.
  • Consent: optional marketing emails and non‑essential cookies/trackers.

4) Who we share data with (processors)

We share data only with vendors needed to operate the service:

  • Payments (e.g., PayPal/Stripe) – to process your payment.
  • Hosting & security/CDN – to serve our site reliably and protect it.
  • Email service – to send order confirmations and support emails.
  • Analytics (if enabled) – to understand site usage at an aggregate level. We do not sell personal data.

5) Retention

  • Orders & invoices: kept as long as required by tax/accounting law (typically 5–10 years).
  • Accounts: until you delete them.
  • Support messages: typically 24 months.
  • Backups/logs: short lifetimes appropriate to security and recovery.

6) International transfers

If a processor stores data outside the EEA/UK, we rely on appropriate safeguards (e.g., Standard Contractual Clauses). Details available on request.

7) Your rights (GDPR/UK GDPR)

You can request: access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. You can withdraw consent at any time (e.g., for marketing/cookies). You also have the right to complain to your local supervisory authority (in Poland: PUODO).

How to exercise your rights: email support@papacad.com. We’ll respond within one month where applicable.

8) Cookies & tracking

See the Cookie Policy for details and how to manage preferences.

9) Children

Our services are aimed at professionals/hobbyists 16+. We don’t knowingly collect data from children.

10) Changes to this policy

We’ll post updates on this page and adjust the date above.