Privacy Policy
This policy explains what personal data EULabelKit collects, why, how long we keep it and what you can do about it. We collect as little as we can.
Who is responsible for your data
The data controller is:
⚠ Operator name to be added (Individual (not yet registered with SSM))⚠ Postal address to be added, Malaysia
Email: ⚠ Contact email to be added
What we collect and why
| When | Data | Why (legal basis) | How long |
|---|---|---|---|
| You join the waitlist | Email address, where you sell (optional), which form you used, date | To email you about EULabelKit (your consent, given by joining) | Until you unsubscribe or ask us to delete it |
| You buy a label PDF | The email address PayPal gives us, the label details you entered, PayPal order number, amount, date, and your request for immediate delivery | To deliver the PDF and email you the download link (contract); to keep accounting records (legal obligation) | Order records: 7 years (tax record-keeping). Email and label details: deleted on request, which also ends the download link |
| Any visit | A one-way hash of your IP address (we never store the IP itself) | To stop abuse with rate limits (legitimate interest in keeping the service secure) | Automatically deleted, normally within 2 days |
| Any visit | Technical request data handled by our host and its network (IP address, browser, time) | To deliver and protect the website (legitimate interest) | As set by the hosting providers below |
| Only if you accept analytics cookies | Pages you view, device and browser details, approximate location, and a recording of how you interact with our pages (session replay), plus error reports | To understand how the site is used and fix problems (your consent) | As set by Lovable’s analytics; you can withdraw consent any time |
We don’t collect payment card details: PayPal handles the payment. We don’t sell or share your personal data for advertising, and we don’t use it for automated decisions about you.
Who processes data for us
- Lovable (lovable.dev): hosts the website, its database (Lovable Cloud) and our transactional emails; provides analytics and session replay when you consent.
- Cloudflare: network delivery and security for the hosting, including a short-lived bot-protection cookie.
- PayPal: processes your payment as an independent controller under its own privacy statement. PayPal’s checkout only loads after you tick the purchase box.
These providers may process data outside your country, including in the United States. They use safeguards such as the EU Standard Contractual Clauses where required. Our fonts are hosted on our own site, so loading pages doesn’t send your IP address to Google.
Your rights
You can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent at any time (this doesn’t affect what we did before). These rights apply under the EU/UK GDPR, Malaysia’s Personal Data Protection Act 2010 and similar laws. Residents of California: we don’t sell or share personal information.
- Stop waitlist emails: use the unsubscribe link in any email.
- Delete your data: use Delete my data. We email you a link to confirm.
- Change cookie choices: “Cookie settings” at the bottom of every page.
- Anything else: email ⚠ Contact email to be added. We reply within 30 days.
You can also complain to your data protection authority, for example the authority in the EU country where you live, or Malaysia’s Personal Data Protection Department.
Children
EULabelKit is a business tool for sellers aged 18 or over. It isn’t directed at children and we don’t knowingly collect data from anyone under 18. If you think a child has given us data, email us and we’ll delete it.
Changes
If we change this policy we update the date at the top. If a change affects how we use data you already gave us, we email you first.