Privacy Policy

How we collect, use, and protect your personal data

Last updated: 3 April 2026

Ebrora (“we”, “us”, or “our”) is a sole trader business based in the United Kingdom. We are committed to protecting your privacy and handling your personal data transparently and lawfully in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding that data when you visit our website at ebrora.com (the “Site”) or purchase our products.

1. Data Controller

The data controller responsible for your personal data is Ebrora, a sole trader registered in the United Kingdom. If you have any questions about this policy or your personal data, you can contact us at hello@ebrora.com.

2. What Data We Collect

2.1 Information You Provide Directly

  • Contact form submissions: your name, email address, subject, and message content when you use our contact form.
  • Newsletter signup: your email address when you subscribe to our mailing list.

2.2 Information Collected Automatically

  • Analytics data: we use Google Analytics (GA4) to collect anonymised usage data such as pages visited, time on site, referring source, browser type, device type, and approximate geographic location. This data does not personally identify you.
  • Cookies: we use analytics cookies only with your explicit consent. See Section 7 for details.

2.3 Information Collected by Third Parties

  • Payment data: all purchases are processed by Gumroad (gumroad.com). When you buy a template, Gumroad collects your name, email address, billing address, and payment details. We do not have access to your full payment card details. Gumroad's privacy policy governs how they handle your payment information.

3. How We Use Your Data

We process your personal data for the following purposes and on the following lawful bases under UK GDPR:

  • To respond to enquiries (lawful basis: legitimate interest) — when you submit our contact form, we use your name and email to reply to your message.
  • To send marketing communications (lawful basis: consent) — if you subscribe to our newsletter, we use your email address to send you updates about new templates, offers, and news. You can unsubscribe at any time.
  • To analyse site usage (lawful basis: consent) — we use Google Analytics to understand how visitors interact with our Site, helping us improve content and user experience. Analytics cookies are only set if you click “Accept” on our cookie banner.
  • To fulfil product purchases (lawful basis: performance of a contract) — Gumroad processes transactions on our behalf to deliver your purchased digital templates.

4. Data Sharing

We do not sell, rent, or trade your personal data to any third parties. We share data only with the following service providers who process it on our behalf:

  • Gumroad — for payment processing and digital product delivery.
  • Google Analytics — for anonymised website usage statistics.
  • Formspree — for processing contact form submissions.

These providers are bound by their own privacy policies and data processing agreements. Some of these providers may transfer data outside the UK; where this occurs, appropriate safeguards are in place in accordance with UK GDPR requirements.

5. Data Retention

  • Contact form data: retained for up to 12 months after your enquiry is resolved, then deleted.
  • Newsletter subscriber data: retained until you unsubscribe, at which point your email address is removed.
  • Analytics data: Google Analytics data is retained for 14 months by default and is anonymised.
  • Purchase data: retained by Gumroad in accordance with their retention policy and applicable legal obligations.

6. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure — you can request that we delete your personal data where there is no compelling reason to continue processing it.
  • Right to restrict processing — you can request that we limit how we use your data.
  • Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@ebrora.com. We will respond within one month of receiving your request.

7. Cookies

Our Site uses a cookie consent banner. We only set analytics cookies (Google Analytics) if you actively click “Accept”. If you click “Decline” or take no action, no analytics cookies are set.

The cookies we use are:

  • ebrora_cookie_consent — a first-party cookie that records your cookie preference. Duration: 1 year.
  • _ga / _ga_* — Google Analytics cookies used to distinguish users and sessions. Duration: up to 2 years. Only set if you consent.

You can also manage cookies through your browser settings. Note that blocking all cookies may affect the functionality of some websites.

8. Children's Privacy

Our Site and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our Site is served over HTTPS, and our third-party service providers maintain their own security standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Information Commissioner's Office
Website: ico.org.uk
Telephone: 0303 123 1113

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Ebrora
Email: hello@ebrora.com
United Kingdom