Privacy Policy

Last updated: 18 February 2026

1. Who We Are

Template Lab is operated by Waseem Ilyas as a sole trader in the United Kingdom. For UK GDPR purposes, we are the data controller for personal data described in this policy.

Email: hello@waseemilyas.uk
Website: templatelab.uk

2. Scope

This policy explains how we collect, use, store, and share personal data when you use our website, purchase products, or contact us.

3. Personal Data We Collect

Depending on how you use Template Lab, we may process:

• Identity/contact data: name, email address, and correspondence details you provide.
• Order data: purchase details, product purchased, date/time, order identifiers, refunds/support history.
• Technical data: IP address and basic request metadata logged by hosting/platform providers for security and service operation.
• Support data: information you include when emailing us for help.

We do not intentionally collect special category data. Please avoid sending sensitive personal information unless necessary.

4. How We Collect Data

• Directly from you (checkout details, support emails).
• From Lemon Squeezy as Merchant of Record for transactions and fulfilment records.
• Automatically from website and infrastructure logs as part of running and securing the service.

5. Purposes and Legal Bases (UK GDPR)

6. Cookies and Similar Technologies

We use only limited cookies/technical storage necessary for core website and store functionality.

We do not run analytics tools, marketing pixels, or advertising trackers on this site.

7. Who We Share Data With

We share personal data only where needed to operate the business, including:

• Lemon Squeezy (merchant of record, payment handling, tax and fulfilment operations).
• Hosting/infrastructure providers used to serve the website.
• Professional advisers or authorities where required by law or to establish, exercise, or defend legal claims.

We do not sell personal data.

8. International Transfers

Some service providers may process data outside the UK. Where this happens, we rely on lawful transfer mechanisms (such as adequacy regulations or approved transfer safeguards, including the UK International Data Transfer Agreement or equivalent clauses) as appropriate.

9. Data Retention

We keep data only as long as necessary for the purposes above:

• Order and transaction records: typically up to 6 years for tax/accounting and legal obligations.
• Support correspondence: usually up to 24 months after the issue is closed, unless longer retention is required.
• Basic technical logs: retained for operational/security periods determined by hosting providers.

10. Your Data Protection Rights

Under UK GDPR, you may have rights to:

• Access your personal data.
• Request correction of inaccurate data.
• Request erasure in certain cases.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.

To exercise rights, email hello@waseemilyas.uk. We may ask for proof of identity before acting on a request.

11. Complaints

If you are not satisfied with how we handle personal data, you can contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk.

12. Security

We use appropriate technical and organisational measures to protect personal data, but no internet transmission or storage system is completely secure.

13. Children's Privacy

Our products are not directed to children under 13, and we do not knowingly collect their personal data.

14. Changes to This Policy

We may update this policy from time to time. The latest version is published on this page with the "Last updated" date.

15. Contact

For privacy questions or data requests, contact: hello@waseemilyas.uk