Privacy policy

Last updated November 10, 2026

This policy explains what Holiday Documents ("we", "us") collects when you visit or buy from this site, why, and the choices you have.

What we collect

Order details: your email address, the items you buy, prices, discount codes, order number and bill code.
Account details: your email address, and if you sign in with Google, the name and email Google shares with us.
Support messages: what you write to us through the contact form or by email.
Technical data: IP address, browser type and request times, used for security, fraud prevention and rate limits.
Payment details are entered on Stripe's checkout page. We never see or store your full card number.

How we use it

To process payments, deliver your downloads and send order emails.
To let you look up orders, sign in and get support.
To prevent fraud, abuse and automated orders, and to keep the site secure.
To meet legal, tax and accounting duties.

We do not sell your personal information and we do not use advertising or cross-site tracking cookies.

Services we use

Stripe processes payments and handles refunds and disputes.
Cloudflare hosts the site and stores our data.
Google, only if you choose "Sign in with Google".
Resend and Brevo send our transactional emails (order, sign-in code and support emails).

Each provider handles data under its own privacy policy and only for the service it provides to us.

Cookies and local storage

We use only what the site needs to work: a sign-in cookie (lasts about 30 days), a security cookie for forms, a cookie that lets you reopen your own order, and your browser's local storage for the cart. Stripe may set its own cookies needed for payment and security.

How long we keep it

Order records are kept as long as needed for delivery, support, tax and accounting. Download logs are deleted after 180 days, security logs after about 400 days, sent-email records after 365 days, and closed support tickets 365 days after their last update. Sign-in codes and sessions are deleted after they expire.

Your choices and rights

You can ask us to access, correct or delete your personal information, subject to records we must keep by law (such as completed orders for tax purposes). Depending on where you live, including California and the EU/UK, you may have further rights; we honor them on request and will not treat you differently for using them. To make a request, contact us from the email address you used.

Security

Connections are encrypted (HTTPS), sign-in uses one-time codes or Google, and access to order data is limited to the store owner and staff. No system is perfectly secure, but we work to protect your information.

Children

This site is not directed to children under 13, and we do not knowingly collect their personal information. Parents and teachers buy on behalf of children.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

Questions about privacy? Contact us.