Privacy policy

Who we are

The controller for your data (the party that decides what happens to it, and the one you can hold to this policy) is:

• Lans IT
• KVK 42077043 · BTW-id NL005477083B77
• info@lans.cloud

We’re a one-person business and aren’t required to appoint a data protection officer, so privacy questions go to that address and are answered by the person who runs the shop.

What we process, and why we’re allowed to

Every row below is something the shop actually does. If a row doesn’t apply to you (you never bought anything, or never allowed analytics), then neither does the processing.

Giving us your email address is necessary to buy anything: without it we can’t deliver a digital product or prove you own it. Everything else is either optional (business billing details, analytics) or a by-product of the purchase itself.

Payments

Card payments are handled by Stripe. Where crypto payment is offered, it is processed by CoinGate or, on older orders, Coinbase Commerce. We never see or store your card number: the payment provider processes it and tells us only whether the payment succeeded, plus a reference we keep with your order. For the card details you enter on their page, they are the controller, not us, and their own privacy policy governs it.

Cookies

We keep cookies to a minimum. The functional ones below are required for the shop to work and run without consent; we still disclose them here. Analytics loads only if you allow it, and you can change that any time via Cookie settings in the footer.

Analytics

We use Umami, a self-hosted, cookieless analytics tool running on our own infrastructure in the EU. It records aggregate page views and referrers: no cross-site tracking, no cookies, no selling data to anyone. It runs only after you allow it, and withdrawing that permission is as easy as giving it: the same Cookie settings link in the footer.

When enabled, we may also run Umami’s optional session replay to see anonymised interaction patterns and fix usability problems. It, too, runs only with your consent, and we disclose it here rather than bury it.

Email, and the copy we keep

Transactional email (order confirmations, receipts, download and license details) is sent through our own self-hosted mail gateway. We don’t hand your address to a third-party marketing service, and we don’t send marketing email unless you ask us to.

One thing we’d rather state than have you discover: that gateway keeps a copy of what it sent. Full message contents are stored for 90 days, so we can see exactly what you received when you ask us about an order. After that the contents are removed, and a delivery record (your address, the subject line, and when it was sent) stays behind so we can tell whether a mail actually went out. That record isn’t tied to your order and doesn’t expire on its own; it goes when you ask us to erase your data, which reaches the mail gateway as well as the shop.

Who else sees your data

We don’t sell your data and we don’t share it for anyone’s marketing. It reaches exactly these parties, each because the shop can’t work otherwise:

• Stripe(Stripe Payments Europe, Ltd., Ireland): card payments. Stripe belongs to a group with entities outside the EU; transfers there are covered by the European Commission’s standard contractual clauses.
• CoinGate (Lithuania, EU): crypto payments, where offered. Coinbase Commerce appears only against historical orders that used it.
• Our own servers in the EU: the app, the database, file storage, analytics and the mail gateway are all self-hosted rather than farmed out. No third-party cloud provider holds your account, your orders or your files.
• Our accountant, and the Belastingdienst where the law requires it, for the invoice records we’re obliged to keep.

How long we keep things

The per-item periods are in the table above. Two of them pull in opposite directions and are worth spelling out:

• Invoices: 7 years.Dutch tax law (AWR art. 52) requires us to keep our administration for seven years, and an invoice is part of it. We can’t delete an invoice on request, even yours: the AVG doesn’t require deleting what another law requires keeping.
• Everything else: only as long as it’s useful. Your account and its downloads, licenses and logs go when you ask us to close it.

So a deletion request leaves your invoices behind and takes the rest with it. We’ll tell you exactly what was kept and why.

Backups are the exception, and we’d rather say so than imply otherwise. We take encrypted nightly backups and keep them offsite; they can only be restored whole, so we can’t reach into one to remove a single person. Erasure applies to our live systems immediately, and if we ever had to restore from a backup we would re-apply any erasure that happened since it was taken.

Your rights

Under the AVG you can ask us to do any of the following, free of charge, and we’ll answer within one month:

• See it: get a copy of the personal data we hold about you.
• Correct it: have anything wrong or out of date fixed.
• Delete it: have your account and its data removed, except the invoice records above.
• Restrict it: have us park the data instead of using it while a dispute is sorted out.
• Take it with you: get your account and order data in a machine-readable file, or have us send it somewhere else.
• Object: tell us to stop processing that rests on our legitimate interest, such as the download logs.
• Withdraw consent: turn analytics back off at any time, without affecting what was collected while it was on.

For deletion specifically, there’s a button: Account settings → Delete my data. It sends us the request rather than deleting on the spot: a person handles it, because the invoice retention above has to be explained rather than sprung on you. For anything else, email info@lans.cloud and say what you want. We may ask you to confirm you control the account’s email address first, so we don’t hand your data to someone else.

If you think we’ve got it wrong, please tell us, but you have every right to go straight to the Dutch supervisory authority instead. That’s the Autoriteit Persoonsgegevens, and you can lodge a complaint with them directly.

Automated decisions

There aren’t any. Nothing here profiles you or decides anything about you automatically: no scoring, no automated refusal of an order, no personalised pricing. What you see in the shop is what everyone sees.

Security

Passwords are stored hashed with bcrypt, never in readable form. Two-factor authentication is available on your account and its secret is encrypted at rest. Downloads are served through short-lived signed links rather than public URLs, so a purchased file can’t be passed around by copying an address. Traffic is TLS-encrypted end to end.

Changes to this policy

If what we do with your data changes, this page changes with it and the date at the top moves. Material changes (a new processor, a new purpose) we’ll tell account holders about by email rather than expect you to re-read this page.