Privacy Policy

Last updated: April 7, 2026

This Privacy Policy explains how CapitalFlow V.O.F., operating under the trade name MycreatorUI ("we," "us," or "our"), collects, uses, and protects your personal data when you visit our website or purchase our products. We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

CapitalFlow V.O.F.
KVK: 97315834
Email: mycreatorui@gmail.com

2. What Personal Data We Collect

We collect the minimum amount of data necessary to fulfill your order and provide our services:

• Email address — provided by you at checkout to receive your download link
• Payment information — processed securely by Mollie (our payment processor). We do not store your credit card details on our servers.
• IP address — collected automatically when you visit our website, primarily for security, fraud prevention, and analytics
• Browser and device information — basic technical data collected automatically through server logs

3. Why We Collect Your Data (Purposes)

We use your personal data for the following purposes:

• Order fulfillment — to process your purchase and deliver your digital product via email
• Email delivery — to send you the download link for your purchased product using our email service provider (Resend)
• Payment processing — to complete your credit card transaction through Mollie
• Legal obligations — to comply with Dutch tax and accounting requirements
• Security and fraud prevention — to protect our website and your transactions

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Contract performance (Art. 6(1)(b) GDPR) — Processing your email and payment data is necessary to fulfill our contract with you (delivering the digital product you purchased).
• Legal obligation (Art. 6(1)(c) GDPR) — We are required by Dutch law to retain certain transaction records for tax and accounting purposes.
• Legitimate interest (Art. 6(1)(f) GDPR) — We process IP addresses and technical data to maintain the security of our website and prevent fraud.

5. Data Processors (Third Parties)

We share your data only with the following service providers, who act as data processors on our behalf:

Mollie (Payment Processing)

Mollie B.V. (Amsterdam, Netherlands) processes your credit card payment. Mollie handles your payment details directly and is PCI DSS compliant. We do not have access to your full card number. Mollie's Privacy Policy

Resend (Email Delivery)

Resend, Inc. delivers the transactional email containing your download link. They process your email address solely for the purpose of delivering this email. Resend's Privacy Policy

Vercel (Website Hosting)

Vercel, Inc. hosts our website. They may process your IP address and basic request data through their infrastructure. Vercel's Privacy Policy

We do not sell, rent, or trade your personal data to any third parties.

6. International Data Transfers

Some of our data processors (Resend and Vercel) are based in the United States. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-U.S. Data Privacy Framework where applicable. Mollie processes data primarily within the European Economic Area (EEA).

7. Data Retention

We retain your personal data only for as long as necessary:

• Transaction records (email, payment records, order details) — retained for 7 years after the transaction, as required by Dutch fiscal record-keeping obligations (Algemene wet inzake rijksbelastingen).
• Email address (for non-fiscal purposes) — retained until you request deletion. You can request removal at any time by emailing us.
• IP addresses and server logs — retained for up to 90 days for security purposes, then automatically deleted.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct any inaccurate data.
• Right to erasure ("right to be forgotten") — You can request deletion of your data, subject to our legal retention obligations.
• Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
• Right to object — You can object to certain types of processing, such as processing based on legitimate interest.
• Right to restrict processing — You can ask us to limit how we use your data in certain circumstances.

How to Exercise Your Rights

To exercise any of these rights, send an email to mycreatorui@gmail.com with the subject line "Privacy Request." We will respond to your request within 30 days.

Right to Complain

If you believe we are not handling your data properly, you have the right to file a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Website: autoriteitpersoonsgegevens.nl
Phone: +31 (0)88 1805 250

9. Cookies

Our website uses only essential functional cookies and local storage required for the website to operate (e.g., cart state). We do not use advertising cookies or third-party tracking cookies.

10. Security Measures

We take appropriate technical and organizational measures to protect your personal data, including:

• All data transmitted between your browser and our website is encrypted using TLS/SSL (HTTPS).
• Payment data is handled exclusively by Mollie, a PCI DSS-compliant payment processor.
• Access to personal data is limited to authorized personnel only.
• Our hosting infrastructure (Vercel) provides enterprise-grade security, DDoS protection, and automatic updates.

11. Children's Privacy

Our products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, please contact us at mycreatorui@gmail.com.