Privacy Policy

Last updated: 22 October 2026

Who is responsible

The data controller is Iftimi Alexandru Paul PFA, trading as North Shutter. In this policy, "we" and "us" mean Iftimi Alexandru Paul PFA. Contact: contact@northshutter.dev.

Browsing this website

This website uses no cookies, analytics, trackers or advertising scripts. It is hosted by Cloudflare, which processes technical data such as your IP address to deliver and protect the site (legitimate interest, Art. 6(1)(f) GDPR). See Cloudflare’s privacy policy.

Buying a template

Checkout runs on Stripe’s own pages. Stripe collects your name, email, billing address and payment details to process the payment and prevent fraud. We receive your name, email, billing country or address, what you bought and the amount. We do not receive your full card number. See Stripe’s privacy policy.

We use this data to deliver your purchase, provide support and handle refunds (performance of the contract, Art. 6(1)(b) GDPR). We also use it to keep the accounting and tax records Romanian law requires (legal obligation, Art. 6(1)(c) GDPR). When you download a file, our server checks your order with Stripe and keeps no record of it.

Emailing us

If you email us, we use your message and address only to reply (legitimate interest). We delete the correspondence when it is no longer needed.

Who receives your data

We never sell your data. It is shared only with these recipients, and only as far as each needs it:

• Stripe, which processes payments;
• Cloudflare, which hosts this website and delivers the downloads;
• our accountant, for bookkeeping and tax records;
• public authorities, such as the tax authority, when the law requires it.

Consent

None of the processing above is based on your consent. If we ever ask for your consent (for example, for a newsletter), you can withdraw it at any time, as easily as you gave it, by emailing us. Withdrawing does not affect processing that happened before.

How long we keep data

We keep order and invoicing records for as long as Romanian accounting and tax law requires. We keep other data only as long as we need it for the purposes above.

Transfers

Stripe and Cloudflare may process data outside the EU. Those transfers are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, and to data portability. Email us to use any of these rights. You can also complain to the Romanian data protection authority, ANSPDCP, or to the authority in your own EU country.