Privacy Policy
This Privacy Policy explains how Polytype (we, us, or our) collects, uses, and protects your personal data when you purchase font licenses from our website. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).
Our website uses strictly necessary cookies only. These cookies are essential for site navigation and to manage the basket. Because these cookies are strictly necessary to provide the service you have requested, they do not require your prior consent under UK law. We do not use any analytical, tracking, or marketing cookies.
We collect and process a limited amount of personal data through our guest checkout process. This includes:
your first name and last name;
your email address;
details about the font licenses you have purchased;
your billing address and payment metadata, which are processed and stored by our payment provider, Stripe.
We only use your data when the law allows us to. Most commonly, we use your data in the following circumstances:
to deliver your font files, issue your license, and maintain a record of your perpetual usage rights;
to maintain accurate financial records for UK tax (HMRC) purposes;
to verify authorized licensees and protect our intellectual property.
We apply different retention periods depending on the purpose of the data:
We retain your name, email address, and licensee assignments for the duration of your perpetual license. This allows us to verify your licensing status and resupply font files if you lose them.
We retain transactional data (such as billing addresses held within Stripe) for 6 years to comply with UK tax obligations.
We do not sell your data to third parties. We share your data only with essential service providers:
Our payment processor, Stripe, who handles your payment details and billing address.
Our website and database are hosted on secure servers located within the United Kingdom.
While our primary hosting is in the UK, our payment processor, Stripe, may process data in the United States. Such transfers are protected by standard contractual clauses or the UK-US Data Bridge to ensure your data receives an equivalent level of protection as it does in the UK.
In accordance with the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your data.
You can request a copy of the personal information we hold about you.
You can ask us to correct inaccurate information (such as a misspelled name or updated email). Please note that as licenses are non-transferable, identity updates are limited to corrections and legal name or title changes.
In certain circumstances, you can object to our handling of your data.
You may request the deletion of your data. However, please note that deleting your licensee record will remove our ability to verify your license and provide future support or file recovery.
To exercise your rights or ask questions about this policy, please contact us at hello@polytype.co.uk. You also have the right to complain to the ICO (www.ico.org.uk).