Controller and scope
WINDX LTD is the controller for the processing described here.
This policy covers only the Windx Make studio, fictional document previews, templates, orders, voucher codes and download flows at windx.uk. It does not cover another Windx website or service unless that service expressly links to and states that this policy applies.
Information we handle
- Names, addresses, template fields and other information you choose to enter to create demonstration content.
- Browser, device, IP address, request time, language and session state, plus access and security logs needed to prevent misuse.
- Order status, purchased items, voucher use, payment status and transaction identifiers. The payment provider handles full card details; Windx Make does not store full card numbers or CVVs.
- Messages and related correspondence that you send to customer support or the privacy contact address.
Purposes and legal bases
- To perform a service you request or a contract with you: create previews, confirm orders, process payment status and deliver downloads.
- For our legitimate interests: secure the service, prevent fraud and misuse, diagnose faults, and understand and improve performance, while considering your rights.
- To comply with applicable legal obligations and, where necessary, establish, exercise or defend legal claims.
- Where we expressly ask for consent, to process the relevant information on that basis. You may withdraw consent without affecting earlier lawful processing.
Retention
A preview and its related temporary download access remain valid for 2 hours from creation. After expiry, access is refused and the related temporary preview resources enter the automatic cleanup process. A purchase is not permanent cloud storage, so complete your download within that period.
The 2-hour rule does not apply to orders, payment status, transaction identifiers, security logs or support correspondence. We retain those categories separately for as long as reasonably needed to deliver the service, perform contracts, handle refunds or disputes, audit security and meet legal obligations. Periods vary by data type and purpose; information is deleted or anonymised when no longer needed and no legal retention duty applies.
Main service providers
- Stripe processes card and other payment methods offered at checkout, payment status and related fraud-prevention information.
- Cloudflare provides website delivery, hosting, storage and security infrastructure.
- Google Analytics receives website-use and technical information so we can understand traffic and aggregate use of public pages.
- If checkout offers a cryptocurrency payment option, the crypto-payment provider identified there handles information needed to complete that payment under its own privacy policy.
Cookies, analytics and international processing
We may use necessary cookies or local storage to maintain session, language and security state, and Google Analytics to understand aggregate use of public pages. You can restrict cookies in your browser, but some checkout or session functions may then stop working correctly.
These providers operate in multiple countries, so information may be handled outside your country or the United Kingdom. Their privacy notices explain their processing locations and applicable data-protection arrangements.
Security and sharing
We use measures such as encrypted transport, access controls, separation of privileges and audit logs to reduce risk, but no internet service can guarantee absolute security. We disclose information to providers only as needed for the relevant function and do not sell personal information to unrelated third parties.
Your rights and complaints
Email breeze@windx.uk to ask for access to, correction of or deletion of your personal information, object to or restrict certain processing, or raise another privacy concern. We may need to verify your connection to the relevant order or information and may retain data required for payments, disputes, security or legal obligations.
If you believe we have not addressed a privacy concern properly, you may complain to the UK Information Commissioner's Office (ICO). You may also contact another competent supervisory authority where it has jurisdiction in your region.
Policy updates and contact
We may update this policy when services, providers or legal requirements change and will update the date on this page. Send privacy requests to breeze@windx.uk or use the Contact page.