Privacy Policy
Data protection, privacy standards & GDPR/CCPA rights
At Neola (https://www.neola.online), protecting your privacy and personal data is fundamental to everything we build. This Privacy Policy details the types of information we collect, how it is processed and safeguarded, and your legal privacy rights under the EU General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA/CPRA).
1. Identification of Data Controller & Brand
Neola operates the digital store located at https://www.neola.online ('Site', 'we', 'our', or 'us'). We specialize in the design, creation, and distribution of downloadable digital templates, Notion workspaces, spreadsheet planners, and organizational frameworks. For any data protection inquiries or to exercise your statutory rights, please contact our Data Protection representative at support@neola.online.
2. Information We Collect
To fulfill your digital purchases and maintain your customer account, we collect: (a) Contact Information: Your name and email address provided during checkout or account registration; (b) Transaction Records: Purchased template identifiers, order timestamps, transaction reference IDs, and download logs; (c) Technical & Usage Data: IP address, device type, browser specifications, and anonymous interaction metrics collected through standard server logs; (d) Customer Support Inquiries: Communications sent directly to our support desk.
3. Payment Processing via Paddle (Merchant of Record)
We do NOT collect, process, or store sensitive payment card details (such as full credit card numbers, expiration dates, or CVV security codes) on our local servers. All financial transactions on Neola are conducted and securely processed by our authorized online reseller and Merchant of Record, Paddle.com (Paddle.com Market Ltd, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom). Paddle operates as an independent Data Controller for billing purposes under strict PCI-DSS Level 1 compliance. Paddle's collection and processing of your billing information is governed by Paddle's Privacy Policy at https://paddle.com/legal/privacy.
4. Purpose & Legal Basis of Processing
We process your personal information under the following lawful bases: (a) Contractual Necessity: To generate your instant download links, grant Notion template duplication permissions, and maintain your digital library access; (b) Legal Compliance: To retain transaction records required for global tax, accounting, and anti-fraud reporting; (c) Legitimate Interests: To provide responsive technical support, prevent unauthorized redistribution of copyrighted assets, and optimize site stability; (d) Consent: For sending optional product release announcements if you explicitly opt-in (you may unsubscribe at any time).
5. Cookies & Tracking Technologies
Our website uses essential session cookies strictly necessary to maintain your shopping cart, preserve authentication state, and store interface preferences (such as dark/light display settings). We do not deploy intrusive third-party cross-site behavioral tracking cookies. You may manage or disable cookies via your browser preferences.
6. Data Sharing & Third-Party Service Providers
We do not sell, rent, monetize, or trade your personal data. We only share information with trusted infrastructure providers bound by strict confidentiality and data protection agreements: (a) Paddle.com (Merchant of Record & payment gateway); (b) Supabase Inc. (encrypted cloud database and authentication); (c) Vercel Inc. (hosting and edge content delivery network).
7. International Data Transfers & Security
Your information is secured using industry-standard TLS/SSL encryption in transit and AES-256 encryption at rest. When personal data is transferred across international borders, appropriate safeguards (including Standard Contractual Clauses approved by the European Commission) are maintained to guarantee an equivalent level of protection.
8. User Rights under GDPR & CCPA/CPRA
Depending on your jurisdiction, you possess the following enforceable privacy rights: (a) Right of Access: Request confirmation of whether we hold your personal data and obtain a copy; (b) Right to Rectification: Correct inaccurate or incomplete records; (c) Right to Erasure ('Right to be Forgotten'): Request deletion of your personal account and associated data, subject to statutory tax retention rules; (d) Right to Data Portability: Receive your personal data in a structured, machine-readable format; (e) Right to Object & Restrict Processing; (f) Non-Discrimination: We will never deny services, charge different prices, or degrade quality for exercising your privacy rights. To exercise any right, submit a verified request to support@neola.online.
9. Data Retention & Policy Updates
We retain account data for as long as your account remains active to provide continuous access to your purchased digital vault. Transaction records are retained for the statutory period mandated by applicable tax and accounting laws. We may periodically update this policy; any revisions will be published on this page with an updated revision date.