Privacy policy

What we collect, what we do not collect, and who handles your payment.

This policy explains what happens to your information when you visit sheetharbor.com or buy a template. It is written to be read, not to hide things in clause 14.

1. Who we are

SheetHarbor is a small independent shop selling spreadsheet templates. For anything in this policy, contact hello@sheetharbor.com.

2. Visiting the site

The site is served by Netlify and uses Cloudflare Web Analytics to count visits. That analytics tool does not use cookies, does not fingerprint your device and does not build a profile of you. It tells us how many people opened a page, which site referred them, and roughly which country they came from - all in aggregate. We cannot identify you from it.

The site sets no advertising cookies and runs no ad networks, no social pixels and no cross-site trackers. If that ever changes, this page will say so before it happens.

3. When you buy

Payments are handled by Creem, which acts as the merchant of record - the legal seller of the product. Creem collects your name, email address, billing details, payment method and, where tax rules require it, your country and tax number, and issues your receipt or invoice. Creem processes that data under its own privacy policy; we do not see or store your card number.

What we receive from Creem is limited to what we need to deliver and support your order: the email address you used, the product you bought, the order reference and the amount. We use it to send your download, answer support email and handle refunds.

4. Delivering your file

Your download is delivered by Creem through a secure link in the purchase email and in the customer portal. If you email us for help, your message passes through our mailbox provider, Alibaba Cloud Mail, and we keep the thread until the issue is resolved.

5. How long we keep things

Support emails are kept for up to two years so we can recognise repeat problems. Order records are kept as long as tax and accounting rules require. Analytics figures are aggregate and are retained by Cloudflare under its own retention period.

6. What we never do

We do not sell, rent or trade your information. We do not add you to a marketing list because you bought a file, and we do not email you about other products unless you asked us to. We do not use your data to train AI models.

7. Your rights

You can ask us what personal data we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email hello@sheetharbor.com and we reply within 30 days. If you are in the EU or UK, you also have the right to object to processing and to complain to your local data protection authority. If you are in California, you have the right to know, delete and opt out of sale - we do not sell data, so there is nothing to opt out of. Deleting order data may be limited where tax law requires us to keep the record.

8. Children

The shop is aimed at adults running a business or a household. It is not directed at children under 16 and we do not knowingly collect their data.

9. Links and other sites

Some pages may link to sites we do not run, such as a payment page. Once you leave sheetharbor.com, the privacy policy of that site applies.

10. Changes

If this policy changes, the new version is published on this page with a new date. The version in force is the one published when you used the site.