CosminaCreates

Legal

Privacy policy

Last updated: 4 November 2026

We collect only what we need to sell you our products, deliver them and run the business. We never sell your data. You can ask to see, correct or delete it at any time.

1. Who is responsible for your data

The data controller is Cosmina Georgescu, a sole trader trading as Cosmina Creates, 408 Cordage House, 15 Cobblestone Square, London E1W 3AS, United Kingdom. Email: cosminamariapopa10@gmail.com.

2. What we collect and why

  • Orders: your name, email, billing address, country and what you bought, to process your order, deliver downloads, send receipts and work out the right tax. Lawful basis: performing our contract with you, and legal obligations (tax and accounting).
  • Payments: handled by our payment providers (such as Stripe or PayPal). They receive your card or account details directly; we only see confirmation of payment.
  • Your account: if you create one, your login details and order history, so you can re-download your purchases.
  • Mentorship: your contact details, session times and anything you choose to share about your goals, to run your sessions. Lawful basis: contract.
  • Messages: what you send through our contact form or by email, to reply to you. Lawful basis: our legitimate interest in answering enquiries.
  • Email updates: only if you sign up, to send news and offers. Lawful basis: your consent, which you can withdraw at any time with the unsubscribe link.
  • Website use: technical data such as your IP address, device and pages visited, through cookies and similar tools, to keep the site secure and working and, if you allow it, to understand how it is used.

3. Who we share it with

Only with service providers who help us run the business, and only what they need: our website and shop host (WordPress.com and WooCommerce), payment providers, Zoom (for mentorship sessions), our email provider, and our accountant. We may also share data where the law requires it. We never sell your personal data.

4. International transfers

Some of these providers store data outside the UK, for example in the EU or the United States. Where they do, we rely on adequacy decisions or standard contractual safeguards so your data stays protected.

5. How long we keep it

  • Order and payment records: as long as UK tax law requires us to (currently around six years).
  • Your account: until you ask us to close it.
  • Messages: up to two years, unless they relate to an order.
  • Email list: until you unsubscribe.

6. Your rights

Under UK and EU data protection law (GDPR) you can ask us to give you a copy of your data, correct it, delete it, limit or object to how we use it, or move it to another provider. You can withdraw consent at any time. Email cosminamariapopa10@gmail.com and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority in your country.

7. Cookies

We use essential cookies to make the shop, basket and checkout work. Other cookies, such as analytics, are only used with your permission. You can also block or delete cookies in your browser settings.

8. Children

Our products are not intended for children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy. The date at the top shows when it last changed.