This privacy policy explains how Code Black Samples (KVK 81660529, the Netherlands; "we", "us") handles personal data when you use codeblacksamples.com. We are the controller of your data under the General Data Protection Regulation (GDPR). Questions: support@codeblacksamples.com.
What we collect and why
- Your account: name, email address and (if you had an account on our previous shop) your username. Your password is stored only as a one-way scrambled hash; we can never see it. Purpose: giving you access to your library of purchases. Legal basis: performance of our contract with you.
- Your orders: the products you bought, prices, date, billing name, email, country and payment method, plus the reference number from the payment provider. Purpose: delivering your downloads, receipts, support and our tax records. Legal basis: contract and legal obligation (Dutch tax law requires us to keep order records for 7 years).
- Downloads: when you download a product we record which product and when, plus a pseudonymised (hashed) form of your IP address. Purpose: support questions and preventing account sharing. Legal basis: legitimate interest.
- Newsletter: only if you sign up and confirm by email. We keep your email address, name (if given), how you signed up and when you consented. You can unsubscribe with one click in every newsletter. Legal basis: consent, which you can withdraw at any time.
- Contact form: your name, email, the topic, optional order number and your message. Purpose: answering you. Legal basis: legitimate interest.
We do not store your card or bank credentials. PayPal handles PayPal, card and Bancontact payments; Sisow by Buckaroo handles iDEAL payments.
Cookies and local storage
We use one essential cookie, cbs_session, which keeps you logged in (for up to 30 days, or until you log out). Your shopping cart is kept in your browser's local storage on your own device. We do not use analytics, advertising or tracking cookies, and the website does not load fonts, scripts or trackers from other companies, so no cookie banner is needed.
Who processes data for us
- Cloudflare, Inc.: hosts the website, database and download files. Account and order data are stored in Cloudflare's EU (Western Europe) region; web pages are delivered through Cloudflare's worldwide network.
- PayPal (Europe) S.à r.l. et Cie, S.C.A.: processes payments (PayPal, cards and local bank payment methods) under its own privacy policy.
- Sisow by Buckaroo: processes iDEAL payments and receives the transaction reference, amount and billing information needed to process your payment.
- Zoho Mail (EU): sends account and order emails (receipts, password resets, confirmations) from our own @codeblacksamples.com addresses.
- Amazon Web Services (Amazon SES): if you subscribe to our newsletter, your email address and name are used by our newsletter tool, which sends newsletters through Amazon SES.
These providers only process your data on our instructions. Where a provider may process data outside the EEA, this is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep data
Account data is kept for as long as you have an account, so you can keep downloading your purchases (lifetime access). Order records are kept for 7 years, as required by Dutch tax law. Download logs are kept for up to 2 years. Contact messages are kept for up to 2 years after we answered them. Newsletter data is deleted when you unsubscribe, except a record of the unsubscription so we never email you again by mistake.
Your rights
You have the right to access, correct, delete or receive a copy of your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time. You can update your name, email and password yourself in your account. For anything else, email support@codeblacksamples.com; we reply within one month. Deleting your account also removes your access to your downloads, and we must still keep order records for tax purposes.
If you are not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own country.
Security
The website is served only over encrypted connections (HTTPS). Passwords are stored as salted hashes, download files are only available to their owners after logging in, and access to our admin tools is restricted to our team.
Changes
If we change this policy we will update the date at the top of this page. For significant changes we will also let account holders know by email.