Privacy Policy
Last updated: 14 October 2025
This Privacy Policy explains how ENDIMADE.COM (Marcin Trochim HOME DESIGN, Poland, ul. Kasztanowa 75, Dybów Kolonia, 05-250 Radzymin) collects, uses, and protects the personal data of users visiting endimade.com and purchasing or accessing our digital tutorials, PDF files, and video materials (the “Services”).
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Polish law.
1. Data Controller and Contact
The controller of your personal data is:
Marcin Trochim conducting business under the name Marcin Trochim HOME DESIGN
Address: ul. Kasztanowa 75, Dybów Kolonia, 05-250 Radzymin, Poland
Tax ID (NIP): 1251478610
Business ID (REGON): 388486364
E-mail: info@endimade.com
Data protection contact: info@endimade.com
2. What Data We Collect
Data provided by the user
Account and Orders:
first and last name, email address, billing address, country, VAT/NIP number (if provided), order notes.
Contact and Support:
email address, message content, and any attachments (if applicable).
Newsletter / Marketing (optional):
email address and communication preferences.
Data Collected Automatically
Technical and Usage Data:
IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps.
Cookies and Similar Technologies:
see details in the “Cookies” section.
Data from Third Parties (when you use them)
Payment Providers:
limited transaction data (e.g., transaction ID, last four digits of the card, payment status – no full card numbers are stored on our servers).
Anti-fraud Tools:
signals used to prevent misuse and fraudulent activity.
Video Hosting/CDN and Email Service Providers:
technical data related to content delivery and analytics.
3. Purposes and Legal Bases for Processing (Article 6 GDPR)
We process personal data for the following purposes:
Performance of a contract (Article 6(1)(b) GDPR):
creating and managing your account (accounts are created automatically upon purchase),
processing and fulfilling orders,
delivering digital content,
sending transactional communications.
Legitimate interests of the controller (Article 6(1)(f) GDPR):
protecting digital files (e.g., watermarking, time-limited download access),
preventing abuse and piracy,
ensuring the security and stability of the website.
Compliance with legal obligations (Article 6(1)(c) GDPR):
fulfilling tax and accounting obligations.
Consent (Article 6(1)(a) GDPR):
Marketing communications (you may withdraw your consent at any time).
4. Access to Files and Security Measures
After purchase, digital content is available through your user account.
For the purpose of protecting intellectual property:
download links may expire after 7 days,
the number of downloads may be limited (3 attempts),
files may contain visible or invisible watermarks (e.g., your email address or order ID),
access logs may be recorded.
5. Data Recipients
Personal data is shared only with trusted service providers to the extent necessary to operate our Services:
WordPress / WooCommerce (store operation and order management),
Stripe / WooPayments, Paynow (payment processing),
Email service provider,
Video hosting provider (Vimeo),
Website hosting provider (LH.pl),
Analytics tools (e.g., Google Analytics with IP anonymization),
Accounting service providers and tax authorities (where required by law).
These entities process personal data under data processing agreements and in accordance with applicable data protection laws.
6. International Transfers of Data
If personal data is transferred outside the European Economic Area (EEA), appropriate safeguards are applied, such as the European Commission’s Standard Contractual Clauses or other legally approved transfer mechanisms.
7. Data Retention Period
Account and order data – retained for the duration of the account and the provision of Services.
Accounting data – retained in accordance with applicable legal requirements (generally 5 years from the end of the relevant tax year under Polish law).
Marketing data – retained until consent is withdrawn.
Support data – typically retained for up to 24 months.
8. Your Rights
You have the right to:
access your personal data,
rectify (correct) inaccurate data,
request erasure of data (in certain cases),
request restriction of processing,
object to processing,
request data portability,
withdraw your consent at any time.
To exercise your rights, please contact: info@endimade.comW celu realizacji praw należy skontaktować się: info@endimade.com
Przysługuje również prawo wniesienia skargi do Prezesa Urzędu Ochrony Danych Osobowych (UODO).
9. Security
We implement appropriate technical and organizational measures (including TLS encryption, secure hosting, restricted data access, and regular system updates).
No method of data transmission over the Internet is 100% secure; however, we make every reasonable effort to protect your personal data.
10. Children’s Data
Our Services are intended for adults. We do not knowingly collect personal data from individuals under the age of 16.
11. Cookies (Summary)
We use cookies for the following purposes:
– to ensure the proper functioning of the store (login, cart, orders),
-to remember user preferences (e.g., language),
-analytics (subject to consent),
-marketing (subject to consent).
