Privacy Policy Page -

Last updated: 14 October 2025

This Privacy Policy explains how ENDIMADE.COM (Marcin Trochim HOME DESIGN, POLAND, ul. Kasztanowa75 Dybów Kolonia, 05-250 Radzymin) collects, uses, and protects your personal data when you visit endimade.com and when you purchase or access our digital tutorials, PDFs, and videos (the “Services”).

We comply with the EU General Data Protection Regulation (GDPR) and applicable Polish law.

1) Data Controller & Contact

Controller: Marcin Trochim HOME DESIGN.
Address: Kasztanowa 75 Dybów Kolonia, 05-250 Radzymin, NIP: 1251478610, REGON 388486364
Email: info@endimade.com
Data Protection Contact: info@endimade.com

2) What Data We Collect

Provided by you

Account & Checkout: first and last name, email address, billing address, country, VAT/NIP (if provided), order notes.
Support/Contact: email address, message contents, attachments (if any).
Newsletter/Marketing (optional): email address and preferences.

Collected automatically

Usage & device data: IP address, browser type, device identifiers, pages viewed, referral URLs, timestamps.
Cookies & similar tech: see Cookie Notice below.

From third parties (when you use them)

Payment processors: limited payment metadata (e.g., transaction ID, last 4 digits of card, payment status — no full card numbers on our servers).
Anti-fraud/anti-abuse tools: signals to prevent misuse.
Video hosting/CDN and email service providers: delivery/analytics metadata.

3) Why We Process Your Data (Legal Bases, Art. 6 GDPR)

To create and manage your account automatically at checkout and let you access purchases (contract: Art. 6(1)(b)).
• Guest checkout is disabled; accounts are created for all purchasers.
To process orders, deliver digital content, and send purchase emails (order confirmations, download links, service messages) (contract).
To implement download windows and watermarking/DRM (e.g., embedding your email/order ID into PDF metadata/visible watermark; generating licensed links; limiting downloads to a time window such as 7 days) (contract + legitimate interests Art. 6(1)(f) to protect our IP and prevent fraud).
To provide support and handle inquiries (contract or legitimate interests).
To maintain security, debug, and prevent fraud/abuse (legitimate interests).
To meet legal, tax, and accounting obligations (legal obligation: Art. 6(1)(c)).
Marketing communications (only with your consent, Art. 6(1)(a)). You can withdraw consent anytime.

4) Downloads, Access Window & Watermarking

After purchase, your files/videos are available via your account.
For security/IP protection, download links may expire after [7 days] and/or be limited to 3 downloads per file.
We may apply visible or invisible watermarks (e.g., your email/order ID) and log access to deter piracy and track license misuse.

5) Who Receives Your Data (Processors & Partners)

We share data with trusted service providers strictly as needed to operate the site:

Web platform: WordPress, WooCommerce (site operation & order management).
Payments: Stripe and/or WooPayments ([entities], transaction processing, fraud screening).
Email: [e.g., MailerLite/Mailchimp/SMTP provider] (transactional and, if you consent, marketing emails).
Video hosting/CDN: [e.g., Vimeo Pro/Business], possibly with domain-restricted embeds; they may collect viewer analytics/telemetry.
Hosting/CDN/security: LH.pl, [Cloudflare or other CDN/security provider].
Analytics: [e.g., Google Analytics with IP masking] or privacy-friendly alternatives.
Accounting/Tax: accountants, invoicing tools, or authorities where required by law.
All providers act under contracts and data protection terms. A current list is available on request.

6) International Transfers

If data is transferred outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards. You can request a copy of applicable safeguards.

7) Data Retention

Account & order records: kept while your account is active and as needed to provide Services.
Tax/Invoice data: retained per Polish law (generally 5 years from the end of the tax year; check current requirements).
Support emails: typically 24 months unless needed longer for disputes.
Marketing data: until you unsubscribe or withdraw consent.
We may retain minimal logs as necessary for security, anti-fraud, or legal claims.

8) Your Rights (GDPR)

You can request to:

Access your data; rectify inaccuracies; erase data (where applicable);
Restrict or object to processing;
Portability of data you provided to us;
Withdraw consent for marketing at any time (does not affect prior lawful processing).
To exercise rights, contact [info@endimade.com].
You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

9) Accounts & Authentication

An account is automatically created when you purchase; you’ll receive instructions to set a password.
You are responsible for keeping your login credentials confidential.
If you suspect unauthorized access, change your password and contact us immediately.

10) Children’s Privacy

Our Services are intended for adults. We do not knowingly collect data from children under 16. If you believe a minor provided data, contact us for removal.

11) Security

We use appropriate technical and organizational measures (TLS encryption, hardened hosting, limited access, regular updates, and least-privilege practices). No online method is 100% secure, but we work to protect your data.

12) Cookies & Similar Technologies (Summary)

We use cookies to run our store and improve your experience:

Strictly necessary: session, checkout, login, license/download enforcement.
Functionality: remembering preferences (e.g., language).
Analytics (optional): understanding traffic (IP masking/anonymization where feasible).
Marketing (optional): only if you consent.
You can manage preferences via our Cookie banner/Settings and your browser. See our detailed Cookie Notice for names, purposes, and lifetimes.

13) Third-Party Links & Embeds

Our pages may include third-party content (e.g., Vimeo video players). These services may collect data per their own policies. We recommend reviewing their privacy terms.

14) Changes to this Policy

We may update this Policy as we improve our Services or to comply with law. Material changes will be posted here with a new effective date. Continued use of the Services after changes means you accept the updated Policy.

15) How to Contact Us

Questions about privacy? Email [info@endimade.com].

Cookie Notice (Short Form)

What are cookies? Small files that help our site work and remember your actions.

Categories we use

Essential (required): keep you logged in, process carts/orders, protect against fraud.
Preferences: remember settings (e.g., language).
Analytics (optional): measure traffic and performance.
Marketing (optional): tailor communications.

How to control cookies
Use our Cookie Settings link in the footer/banner and your browser settings to block/delete cookies. Blocking essential cookies may break checkout/account access.

Last updated: 14 October 2025

We comply with the EU General Data Protection Regulation (GDPR) and applicable Polish law.

1) Data Controller & Contact

Controller: Marcin Trochim HOME DESIGN.

Address: Kasztanowa 75 Dybów Kolonia, 05-250 Radzymin, NIP: 1251478610, REGON 388486364

Email: info@endimade.com

Data Protection Contact: info@endimade.com

2) What Data We Collect

Provided by you

Account & Checkout: first and last name, email address, billing address, country, VAT/NIP (if provided), order notes.

Support/Contact: email address, message contents, attachments (if any).

Newsletter/Marketing (optional): email address and preferences.

Collected automatically

Usage & device data: IP address, browser type, device identifiers, pages viewed, referral URLs, timestamps.

Cookies & similar tech: see Cookie Notice below.

From third parties (when you use them)

Payment processors: limited payment metadata (e.g., transaction ID, last 4 digits of card, payment status — no full card numbers on our servers).

Anti-fraud/anti-abuse tools: signals to prevent misuse.

Video hosting/CDN and email service providers: delivery/analytics metadata.

3) Why We Process Your Data (Legal Bases, Art. 6 GDPR)

To create and manage your account automatically at checkout and let you access purchases (contract: Art. 6(1)(b)).• Guest checkout is disabled; accounts are created for all purchasers.

To process orders, deliver digital content, and send purchase emails (order confirmations, download links, service messages) (contract).

To implement download windows and watermarking/DRM (e.g., embedding your email/order ID into PDF metadata/visible watermark; generating licensed links; limiting downloads to a time window such as 7 days) (contract + legitimate interests Art. 6(1)(f) to protect our IP and prevent fraud).

To provide support and handle inquiries (contract or legitimate interests).

To maintain security, debug, and prevent fraud/abuse (legitimate interests).

To meet legal, tax, and accounting obligations (legal obligation: Art. 6(1)(c)).

Marketing communications (only with your consent, Art. 6(1)(a)). You can withdraw consent anytime.

4) Downloads, Access Window & Watermarking

After purchase, your files/videos are available via your account.

For security/IP protection, download links may expire after [7 days] and/or be limited to 3 downloads per file.

We may apply visible or invisible watermarks (e.g., your email/order ID) and log access to deter piracy and track license misuse.

5) Who Receives Your Data (Processors & Partners)

We share data with trusted service providers strictly as needed to operate the site:

Web platform: WordPress, WooCommerce (site operation & order management).

Payments: Stripe and/or WooPayments ([entities], transaction processing, fraud screening).

Email: [e.g., MailerLite/Mailchimp/SMTP provider] (transactional and, if you consent, marketing emails).

Video hosting/CDN: [e.g., Vimeo Pro/Business], possibly with domain-restricted embeds; they may collect viewer analytics/telemetry.

Hosting/CDN/security: LH.pl, [Cloudflare or other CDN/security provider].

Analytics: [e.g., Google Analytics with IP masking] or privacy-friendly alternatives.

Accounting/Tax: accountants, invoicing tools, or authorities where required by law.All providers act under contracts and data protection terms. A current list is available on request.

6) International Transfers

If data is transferred outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards. You can request a copy of applicable safeguards.

7) Data Retention

Account & order records: kept while your account is active and as needed to provide Services.

Tax/Invoice data: retained per Polish law (generally 5 years from the end of the tax year; check current requirements).

Support emails: typically 24 months unless needed longer for disputes.

Marketing data: until you unsubscribe or withdraw consent.

We may retain minimal logs as necessary for security, anti-fraud, or legal claims.

8) Your Rights (GDPR)

You can request to:

Access your data; rectify inaccuracies; erase data (where applicable);

Restrict or object to processing;

Portability of data you provided to us;

Withdraw consent for marketing at any time (does not affect prior lawful processing).To exercise rights, contact [info@endimade.com].You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

9) Accounts & Authentication

An account is automatically created when you purchase; you’ll receive instructions to set a password.

You are responsible for keeping your login credentials confidential.

If you suspect unauthorized access, change your password and contact us immediately.

10) Children’s Privacy

Our Services are intended for adults. We do not knowingly collect data from children under 16. If you believe a minor provided data, contact us for removal.

11) Security

We use appropriate technical and organizational measures (TLS encryption, hardened hosting, limited access, regular updates, and least-privilege practices). No online method is 100% secure, but we work to protect your data.

12) Cookies & Similar Technologies (Summary)

We use cookies to run our store and improve your experience:

Strictly necessary: session, checkout, login, license/download enforcement.

Functionality: remembering preferences (e.g., language).

Analytics (optional): understanding traffic (IP masking/anonymization where feasible).

Marketing (optional): only if you consent.You can manage preferences via our Cookie banner/Settings and your browser. See our detailed Cookie Notice for names, purposes, and lifetimes.

13) Third-Party Links & Embeds

Our pages may include third-party content (e.g., Vimeo video players). These services may collect data per their own policies. We recommend reviewing their privacy terms.

14) Changes to this Policy

We may update this Policy as we improve our Services or to comply with law. Material changes will be posted here with a new effective date. Continued use of the Services after changes means you accept the updated Policy.

15) How to Contact Us

Questions about privacy? Email [info@endimade.com].

Cookie Notice (Short Form)

What are cookies? Small files that help our site work and remember your actions.

Categories we use

Essential (required): keep you logged in, process carts/orders, protect against fraud.

Preferences: remember settings (e.g., language).

Analytics (optional): measure traffic and performance.

To create and manage your account automatically at checkout and let you access purchases (contract: Art. 6(1)(b)).
• Guest checkout is disabled; accounts are created for all purchasers.

Accounting/Tax: accountants, invoicing tools, or authorities where required by law.
All providers act under contracts and data protection terms. A current list is available on request.

Withdraw consent for marketing at any time (does not affect prior lawful processing).
To exercise rights, contact [info@endimade.com].
You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

Marketing (optional): only if you consent.
You can manage preferences via our Cookie banner/Settings and your browser. See our detailed Cookie Notice for names, purposes, and lifetimes.

How to control cookies
Use our Cookie Settings link in the footer/banner and your browser settings to block/delete cookies. Blocking essential cookies may break checkout/account access.