Home›Privacy Policy

Privacy Policy

Last updated 30 August 2026

BuildingRC is a small operation selling design files, and the data side of it is deliberately small too. We ask for an email address so we can send you what you bought. We do not run advertising, we do not profile you, and we do not sell anything about you to anyone. This page sets out the detail.

Who is responsible for your data

The data controller is Christine Heger, trading as BuildingRC, at Brisvägen 5, 239 42 Falsterbo, Sweden. You can reach us about anything on this page at contact@buildingrc.com.

What we collect and why

When you buy something

We collect your email address, what you ordered, and the amount paid, and we keep a record of the order. We need this to send you your files, to prove you are entitled to re-download them, and to handle refunds or complaints. The legal basis is performance of our contract with you (Article 6(1)(b) GDPR).

Your card details never reach us. Payment happens on Stripe's own checkout page, and we only receive confirmation that it succeeded. If Stripe collects a billing address or name for tax or fraud purposes, that stays with Stripe.

When you create an account

Accounts are optional. You can buy as a guest. If you make one, we store your email address and a securely hashed password so you can sign in and see your past orders in one place. If you previously bought as a guest using the same email address, we link those orders to the account. Legal basis: performance of the contract.

When you email us

We keep the correspondence so we can follow up and, if it concerns an order, so we have a record of what was agreed. Legal basis: performance of the contract, or our legitimate interest in handling enquiries and defending claims (Article 6(1)(f)).

Bookkeeping

Sales records have to be kept for accounting and tax purposes. Legal basis: legal obligation (Article 6(1)(c)). We cannot delete these on request, even if you ask us to delete everything else.

That is the complete list. We do not run analytics, advertising pixels, remarketing, newsletters, or a discussion forum. We do not buy data about you, and we do not make automated decisions or profile you within the meaning of the GDPR.

Who else sees it

Only the services we need to run the store. Each one processes your data on our instructions:

  • Stripe: payments and refunds.
  • Supabase: the database holding accounts and orders, and file storage.
  • Cloudflare: hosting and delivery of this website.

Some of these operate outside the EEA. Where that happens, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision. We will hand data to an authority if the law requires it, and we will tell you if that happens unless we are forbidden from doing so. Nobody else gets it, and none of it is for sale.

How long we keep it

  • Order and sales records: seven years, because accounting law requires it.
  • Account details: until you delete the account, or after a long period of inactivity.
  • Email correspondence: up to three years, so we can deal with follow-up questions and claims.

Cookies

The site uses a small number of strictly necessary cookies and equivalent browser storage: keeping you signed in, remembering your cart, and remembering the choice you made on the cookie banner. These are required for the site to work, so they do not need your consent.

We set nothing optional: no analytics, no advertising, no tracking pixels. That is why you were not asked to agree to anything when you arrived. If that ever changes, a banner will appear first and nothing optional will run until you have said yes. Declining will always be as easy as accepting, and the store will keep working either way.

You can clear this site's data in your browser at any time. That signs you out and empties your cart, since those are the things we store.

Your rights

Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time, which does not affect anything done beforehand.

Email contact@buildingrc.com and we will deal with it within one month, free of charge. Bear in mind we may have to keep sales records for the bookkeeping period above even after deleting your account.

If you think we have handled your data badly, please tell us first, but you are entitled to complain to a data protection authority regardless. Ours is Integritetsskyddsmyndigheten (IMY), and you can also go to the authority where you live.

Children

The store is not aimed at young children and we do not knowingly collect data from anyone under 13. If you are under 18, please ask a parent before buying anything. If you believe a child has given us personal data, email us and we will remove it.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. If the change is significant and we have your email address, we will tell you directly rather than relying on you noticing.

This policy forms part of our Terms & Conditions. See also our License Agreement and Refund and Returns Policy.