Legal

Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Code2Copy ("we", "us", "our") collects, uses, and protects information about you when you visit code2copy.com or make a purchase. We take your privacy seriously and only collect what we need to operate the service.

1. Who We Are

Code2Copy is a digital product store selling email marketing templates. For the purposes of applicable data protection law, Code2Copy is the data controller responsible for your personal information collected through this site.

Contact us at: [email protected]

2. What Data We Collect

We collect the following categories of information:

Category Data collected Source
Purchase data Name, email address, billing address, items purchased, amount paid Provided by you at checkout via Stripe
Payment data Payment method details (card number, CVV, expiry) Collected and stored by Stripe — we never see or store raw card data
Technical data IP address, browser type, device type, pages visited, referrer URL Automatically collected by Cloudflare when you access the site
Communications Content of any emails or messages you send us Provided by you when you contact support

We do not use cookies for tracking or advertising. Cloudflare may set a technical cookie for security and performance purposes. We do not use Google Analytics or any third-party advertising or analytics trackers.

3. How We Use Your Data

  • To fulfil your purchase — delivering your Template to your email address
  • To process payment — passing necessary data to Stripe for transaction processing
  • To calculate and collect tax — your billing address is used to determine applicable sales tax, VAT, or GST via Stripe Managed Payments
  • To provide customer support — responding to questions or delivery issues
  • To comply with legal obligations — record-keeping for tax and accounting purposes
  • To prevent fraud and abuse — using Cloudflare and Stripe's built-in fraud detection systems

We do not sell your data. We do not use your email for marketing unless you explicitly opt in (we currently do not have a mailing list).

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, our legal bases for processing your data are:

  • Contract — processing is necessary to fulfil your purchase and deliver the Template
  • Legal obligation — we are required to retain transaction records for tax compliance
  • Legitimate interests — fraud prevention and security, where this does not override your rights

5. How We Share Your Data

We share data only with the following third-party processors, all of whom are bound by data processing agreements:

  • Stripe — payment processing, tax calculation and remittance, fraud prevention. Stripe acts as a co-controller for payment data under its Managed Payments programme. See stripe.com/privacy.
  • Cloudflare — website hosting, CDN, DDoS protection, and SSL. See cloudflare.com/privacypolicy.

We do not share your data with any other third parties, advertisers, or data brokers. We will disclose data if required by law, court order, or to protect our legal rights.

6. International Data Transfers

Code2Copy operates from the United States. Cloudflare and Stripe also process data internationally. If you are based in the EEA or UK, your data may be transferred to and processed in the United States. Such transfers are subject to appropriate safeguards including Standard Contractual Clauses where required.

7. How Long We Keep Your Data

  • Purchase records — retained for 7 years for tax and accounting compliance
  • Support communications — retained for 2 years or until no longer needed to resolve your request
  • Technical/log data — retained by Cloudflare per their data retention policies (typically up to 30 days for log data)

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Correction — request we correct inaccurate data
  • Deletion — request we delete your data (subject to our legal retention obligations)
  • Portability — request your data in a machine-readable format
  • Objection — object to processing based on legitimate interests
  • Restriction — request we restrict processing in certain circumstances

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale (we do not sell personal information). To exercise any right, contact us at [email protected].

To exercise any of the above rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the EEA or UK and believe we are handling your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

9. Security

We use industry-standard security measures including HTTPS/TLS encryption for all data in transit, Cloudflare's DDoS and bot protection, and Stripe's PCI-DSS-compliant payment infrastructure. We never store payment card data on our servers.

No method of transmission over the internet is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Code2Copy is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the "Last updated" date at the top. Material changes will be noted prominently. Continued use of the site after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, data requests, or concerns:
[email protected]