Privacy policy
Last updated: 29 October 2026
This policy explains how Khorne Projects handles personal data when you visit khorneprojects.com, buy or download a template, or contact us. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is R. Dalley, trading as Khorne Projects, a sole trader based in the United Kingdom.
- Address: 28 Church Lane, York, YO42 2BL, United Kingdom
- Email: [email protected]
We are a very small business and have not appointed a Data Protection Officer. Please email us with any privacy question.
2. The short version
- This website sets no cookies and uses no analytics, advertising or tracking tools. The only thing it stores is your light/dark display choice, in your own browser, if you use the switch.
- Payments and downloads are handled by Gumroad. We never see or store your card details.
- We only use your details to supply what you bought, answer your messages and keep the records the law requires.
- We do not sell your data.
3. What we collect and why
| Situation | Data | Why we use it | Lawful basis (UK GDPR Art. 6) |
|---|---|---|---|
| Visiting this website | Technical data such as IP address, browser type and pages requested, processed by our host Cloudflare | To deliver the site and keep it secure | Legitimate interests (running a secure website) |
| Buying or downloading a template (including free ones) | Name (if given), email address, country, what you bought, price paid, order date. Gumroad shares these with us as the seller. | To supply the product, give support and handle refunds | Contract |
| Keeping business records | Order and payment records | Tax and accounting duties | Legal obligation |
| Emailing us | Your email address, name and anything you write | To reply and keep a record of the conversation | Legitimate interests (answering enquiries), or contract where it is about an order |
| Following the shop on Gumroad | Your email address, held by Gumroad | To send occasional updates about new templates through Gumroad | Consent (you can unsubscribe at any time from any email) |
We do not use your data for automated decision-making or profiling.
Light or dark display setting
If you use the light/dark switch in the header, your choice ("light" or "dark") is saved in your own browser's local storage so the site remembers it next time. It is not a cookie, it is never sent to us or anyone else, and it contains no personal information. You can remove it at any time by clearing this site's data in your browser settings.
4. Who else handles your data
Gumroad (payments and delivery)
Checkout and downloads run on Gumroad, Inc. (USA). For sales to UK and EU buyers Gumroad acts as the merchant of record and handles VAT. Gumroad and its payment processors handle your payment details under their own privacy policy, as independent controllers: gumroad.com/privacy.
Our template pages use Gumroad's checkout script, loaded from gumroad.com when you open the home page, so that the checkout can open over this site. When you click a buy button, Gumroad's checkout loads from Gumroad's own servers and may use its own cookies and similar technology. That is covered by Gumroad's privacy policy, not ours.
Cloudflare (hosting)
This website is hosted by Cloudflare, Inc. Cloudflare processes technical request data to deliver and protect the site. Cloudflare may set a strictly necessary security cookie if it needs to check for automated traffic. See cloudflare.com/privacypolicy.
Zoho (email)
Our email is hosted by Zoho Corporation in the United States (Zoho's US data centre). Zoho stores and processes the emails you send us on our behalf, so those emails are transferred outside the UK. Zoho states that transfers of personal data are covered by data protection agreements based on the European Commission's model (standard) contractual clauses. See zoho.com/privacy.html and zoho.com/gdpr.html.
We may also share data where the law requires it, for example with HMRC.
5. International transfers
Gumroad, Cloudflare and Zoho (our email provider) are based in the USA and may process data outside the UK. Where personal data leaves the UK, these providers rely on recognised safeguards, such as the UK–US Data Bridge or International Data Transfer Agreements / Addendums. Details are in each provider's privacy policy.
6. How long we keep it
- Order and payment records: at least 5 years after the 31 January Self Assessment deadline for the tax year they relate to, as HMRC requires for the self-employed.
- Emails: up to 2 years after our last contact, unless they relate to an order, in which case we keep them with the order records.
- Cloudflare request logs: kept by Cloudflare under its own retention periods.
7. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or delete it;
- ask us to restrict how we use it, or object to our use of it;
- ask for your data in a portable format; and
- withdraw consent at any time, where we rely on consent.
Email [email protected] to use any of these rights. We will reply within one month. Some rights have limits, for example we must keep tax records even if you ask us to delete them.
8. Complaints
Please contact us first so we can try to put things right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
9. Children
Our products are meant for adults managing household or business money. We do not knowingly collect data from children.
10. Changes
We will update this page if anything changes and show the new date at the top.