Privacy Policy

DashboardPack (“we”, “us”, “our”) is the operator of dashboardpack.com. We sell admin dashboard templates and related products to customers worldwide. For the purposes of EU data-protection law (GDPR), DashboardPack is the data controller for personal data collected through the site.

Our business address is Calea Vacaresti 234, bl. 83, sc. 2, et. 7, ap. 67, Bucharest, Romania. You can reach us about anything privacy-related at [email protected].

We only collect the information we actually need to run the site, process your purchases, and support you afterwards. Specifically:

• Account & purchase data — name, email address, billing address, country, and the Products you have purchased. We need this to create your account, deliver downloads, and issue invoices.
• Payment data — processed by our payment providers (Stripe and Braintree/PayPal). We never see or store your full card number or banking credentials — only a transaction ID and the last four digits of the card, returned by the processor.
• Communications — the content of support requests, contact-form submissions, and emails you send us, plus any account or order details needed to answer you.
• Newsletter — if you opt in, your email address and, optionally, your name — stored by Mailchimp on our behalf.
• Technical & usage data — IP address, browser type, device type, referring page, pages viewed, and approximate location (country/region). This is collected automatically through server logs and analytics cookies.
• Cart-abandonment data — if you start a checkout and provide an email address but don’t complete the purchase, we may send you a reminder. You can unsubscribe from these emails at any time.

We use the information we collect to:

• process orders, deliver downloads, issue invoices, and provide refunds;
• create and maintain your account, and let you re-download Products covered by your license;
• provide support and respond to your questions;
• send transactional emails (order confirmations, license keys, support replies, account notifications);
• send marketing emails — only to people who have opted in — about new templates, updates, and offers;
• remind you about an abandoned cart, if you started a checkout and provided an email;
• understand how the site is used so we can improve it (aggregated analytics — not used to identify you individually);
• detect and prevent fraud, abuse, and breaches of our Terms;
• comply with our legal and tax obligations (for example, retaining invoices for the period required by Romanian and EU tax law).

Under GDPR, we only process your personal data when at least one of these legal bases applies:

• Contract — processing necessary to provide the Products and services you have purchased (account, downloads, support).
• Consent — for the newsletter, optional analytics or marketing cookies, and other activities where we ask you to opt in. You can withdraw consent at any time.
• Legal obligation — processing necessary to comply with tax, accounting, and consumer-protection laws.
• Legitimate interests — running and securing the site, preventing fraud, and improving our Products. We balance these interests against your rights and freedoms.

We use cookies and similar technologies to make the site work, remember your preferences, and understand how the site is used. The main categories are:

• Strictly necessary — required to log in, keep a session, and let you complete a purchase. These cannot be switched off.
• Functional — remember settings like your cart contents or preferred currency.
• Analytics — help us understand which pages are popular and how visitors move through the site (Google Analytics, Google Tag Manager). These are set only with your consent where required.

You can control or delete cookies in your browser settings at any time. Disabling strictly necessary cookies will prevent parts of the site (such as checkout) from working.

We rely on a small set of trusted third-party providers to run the site. Each one acts as a data processor on our behalf and is bound by its own privacy commitments:

• StripeCard payments. Stripe receives your card details directly — we don’t.
• Braintree / PayPalCard and PayPal payments. Operated by PayPal.
• MailchimpHosts our newsletter subscriber list and sends marketing emails.
• Google AnalyticsAggregated site-usage statistics (page views, traffic sources).
• Google Tag ManagerLoads and manages our analytics tags.
• Cart Abandonment RecoverySends reminder emails for unfinished checkouts when an email is provided.
• FluentSMTPDelivers our transactional emails (order confirmations, password resets, support replies).
• CloudflareCDN, DDoS protection, and DNS for dashboardpack.com.
• HetznerThe data centre (Germany) where our servers are hosted.

Some of the providers above (Stripe, PayPal, Mailchimp, Google, Cloudflare) are based in the United States. When we transfer personal data outside the European Economic Area, we rely on the safeguards required by GDPR — primarily the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

You can request a copy of the relevant safeguards by emailing [email protected].

We keep personal data only for as long as we need it for the purpose we collected it — or for as long as the law requires us to.

• Account data — for as long as your account is active. You can ask us to delete it at any time.
• Order and invoice data — up to 10 years, as required by Romanian and EU accounting and tax law.
• Support correspondence — up to 3 years after the last interaction.
• Newsletter — until you unsubscribe (via the unsubscribe link in every email).
• Analytics — aggregated, typically retained for up to 14 months.
• Server & security logs — up to 90 days.

If you’re in the EU/EEA, the UK, or another jurisdiction with similar laws, you have the following rights over your personal data. To exercise any of them, email [email protected] from the address linked to your account.

• AccessGet a copy of the personal data we hold about you.
• RectificationHave us correct any inaccurate or incomplete data.
• ErasureHave us delete your data, subject to legal retention obligations (such as invoices we must keep for tax reasons).
• RestrictionAsk us to limit processing while we investigate a concern.
• PortabilityReceive your data in a structured, machine-readable format and transfer it to another controller.
• ObjectionObject to processing based on legitimate interests, including direct marketing.
• Withdraw consentWithdraw consent at any time for processing that relies on it (for example, the newsletter).
• Lodge a complaintComplain to a supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (dataprotection.ro).

We aim to respond to all requests within 30 days. We may need to verify your identity before fulfilling certain requests.

We take reasonable technical and organisational measures to protect personal data, including HTTPS for all traffic, encrypted password storage, restricted server access, and regular backups. Payment data is handled exclusively by PCI-compliant providers (Stripe, Braintree/PayPal) — we never store full payment details on our systems.

No system is 100% secure, but if we ever discover a breach affecting your personal data, we will notify the relevant supervisory authority and any affected users in the timeframes required by GDPR.

DashboardPack is a B2B product aimed at developers and design professionals. We don’t knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, email [email protected] and we’ll delete it.

We may update this Privacy Policy from time to time — for example, when we add a new service or change how we use data. When we make a material change, we’ll update the “Effective” date at the top of this page and, where appropriate, notify you by email or via a notice on the site. We encourage you to review this page periodically.

For anything privacy-related — a question, a rights request, or a complaint — please reach out:

• Email — [email protected]
• Postal address — DashboardPack, Calea Vacaresti 234, bl. 83, sc. 2, et. 7, ap. 67, Bucharest, Romania
• Contact form — dashboardpack.com/contact-us