>

Privacy Policy

DigitalCraft Market – Privacy Policy

(Last revised: 15 September 2026)

DIGITALCRAFT Sp. z o.o., KRS 0001154174, NIP 6762686737, REGON 540856131, with its registered office at ul. Szlak 77/222, 31-153 Kraków, Poland (the “Company”), owns and operates https://digitalcraft-market.com/ (the “Website”).

This Privacy Policy (the “Policy”) explains how we collect, use, disclose and protect personal data obtained from visitors and customers of the Website, registered users and, where applicable, creators and suppliers of digital content (the “Users”).

By using the Website, a User confirms that they have read this Policy. Where processing of personal data or the use of non-essential cookies requires separate consent, such consent is requested separately. This Policy does not, by itself, restrict a User’s right to contact a competent supervisory authority or court.

Contents

  • Personalinformation we collect
  • Purposesof processing personal information
  • Conditionsand methods of processing personal information
  • Recipients,international transfers and retention
  • Users’rights
  • Cookiepolicy
  • Measuresused to protect personal information
  • Disputeresolution
  • Additionalprovisions
  • Contactinformation

 

1. Personal information we collect

  • Wecollect, access and use Users’ personal data, as well as technical and other information relating to Users, in accordance with this Policy.
  • Technical information, including IP address, device identifiers, browser information, operating system information,access logs and other technical events, may constitute personal data where it relates to an identified or identifiable natural person.
  • Personal data may include information voluntarily provided by a User during registration, checkout, customer-supportcommunications or other use of the Website, as well as data generated in connection with order  Such data may include name, username, email address, account identifier, order details, transaction ID, price, payment and refund status, invoicing information, access/download history, customer-support correspondence and other information objectively necessary to provide the service.
  • If a User is a creator or supplier of content, we may also process data necessary for the contractual relationship,identity or business verification, verification of a bank/payout account, tax status, KYC/KYB, sanctions screening, fraud prevention and evidence of intellectual-property rights.
  • Wemay also process data made public by the data subject or data that must be disclosed under applicable
  • We do not assume that all submitted information is automatically accurate. Users must provide accurate informationand update it where necessary, and the Company may perform reasonable verification where required for security, payments, KYC/KYB, compliance with law or performance of a contract.

 

2. Purposes of processing personal data

We process data primarily to operate the DigitalCraft Market online platform and to sell, license and deliver digital assets, including 3D models, templates, plugins, software components and other digital materials. In particular, we use data to:

  • registerand manage User accounts;
  • identifythe contracting party and fulfil orders;
  • processpayments, refunds and payment disputes;
  • deliverdigital content and licences and provide customer support;
  • preventfraud, card testing and abuse and protect Website security;
  • complywith accounting, tax and other legal obligations;
  • improveservice quality and develop the Website;
  • analyseWebsite performance and statistics, including by using analytics technologies where the required consent has been obtained;
  • sendmarketing communications and information about new services and offers where an applicable legal basis exists;
  • onboardcreators/suppliers, perform KYC/KYB and sanctions screening, verify payout details and verify rights to digital content;
  • establish,exercise or defend legal

Technical information is used only to the extent necessary for the relevant purpose and is not automatically treated as anonymous. Where data has genuinely been anonymised so that an individual can no longer be identified, it may be used for aggregated statistics.

3. Conditions and methods of processing personal data

  • The legal basis for processing depends on the specific purpose. Depending on the circumstances, the Company may process data for performance of a contract or steps taken before entering into a contract, compliancewith a legal obligation, protection of legitimate interests of the Company or third parties, or on the basis of the User’s consent where consent is required by applicable law.
  • Processingmay include collection, recording, organisation, structuring, accumulation, storage, updating, retrieval, use, transmission, anonymisation, restriction, deletion and destruction of personal data.
  • Confidentialityis maintained except where the User voluntarily makes information public or disclosure is permitted or required by law.
  • Wemay disclose data to third parties where necessary for performance of a contract, payment processing, provision of technical infrastructure, KYC/KYB, fraud prevention, support services, compliance with legal obligations or protection of legal rights. Recipients may include acquiring banks and payment providers, hosting/cloud/IT providers, identity-verification/KYC/KYB/sanctions-screening providers, email and customer-support providers, analytics providers where the required consent has been obtained, accountants, auditors, lawyers, public authorities and other counterparties to the extent necessary for the specific purpose.

4. Recipients, international transfers and retention

  • Wherepersonal data is transferred outside the European Economic Area, the Company uses an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.
  • Personal data is retained only for as long as necessary for the relevant purpose, including performance of contracts,accounting and tax requirements, fraud prevention, dispute resolution and applicable limitation  The specific retention period depends on the category of data and applicable legal requirements.

5. Users’ rights

  • Subjectto applicable law, a User may have the right to request access to personal data, rectification, erasure, restriction of processing, to object to certain processing, to receive data in a portable format and to withdraw consent where processing is based on consent.

 

  • Withdrawalof consent does not affect the lawfulness of processing carried out before
  • AUser may lodge a complaint with the competent data-protection  The User is not required to complete the Company’s internal dispute-resolution procedure before doing so.

6. Cookie policy

  • Whatare cookies?

Cookies are small text files stored by the Website in the User’s browser to recognise a device, enable core functions and remember settings.

Cookie category / Purpose / Retention

  • Strictlynecessary / Core Website functions (authentication, shopping cart, checkout, security) / According to the actual purpose of the relevant cookie;
  • Preferences/ Language, currency and other User preferences / According to the actual cookie inventory;
  • Analytics/ Helps us understand how Users interact with the Website / Only after the required consent; retention is stated in the current cookie inventory;
  • Marketing/ Used for marketing and advertising / Only after the required consent; retention is stated in the current cookie inventory.
  • Strictly necessary cookies may be used without consent to the extent permitted by applicable law. Non-essentialfunctional, analytics and marketing cookies are used only after the required consent has been obtained through the cookie banner/preferences centre.
  • A User may accept all non-essential cookies, reject them or change their selection through the preference mechanismavailable on the  Cookies can also be blocked through browser settings, although disabling strictly necessary cookies may limit Website functionality.

More detailed rules are set out in the separate Cookie Policy.

 

7. Measures used to protect personal data

We implement appropriate legal, organisational and technical measures to protect personal data against unauthorised access, destruction, alteration, restriction, copying, disclosure or other unlawful processing. No system can guarantee absolute security, and Users are also encouraged to protect their credentials and not share passwords with third parties.

8. Dispute resolution

  • Complaintsmay be sent to info@digitalcraft-market.com with the subject line “Claim / Dispute”, stating the order number, transaction date and description of the issue where applicable.
  • Weaim to respond within five business days and propose a possible  Use of this internal procedure is recommended for efficient resolution but is not a mandatory precondition for contacting a competent court, supervisory authority or consumer-protection body.

9. Additional provisions

The Company may update this Policy from time to time. The current version is published on the Website with the date of the latest revision. Where a change requires separate consent under applicable law, such consent will be requested separately. Continued use of the Website alone does not replace consent where consent is legally required.

This Policy is governed by the laws of Poland, without prejudice to mandatory rights of data subjects and consumers under applicable law.

10. Contact information

DIGITALCRAFT Sp. z o.o.

Registered office: ul. Szlak 77/222, 31-153 Kraków, Poland

 

KRS: 0001154174

NIP: 6762686737

REGON: 540856131

Website: https://digitalcraft-market.com/ Email: info@digitalcraft-market.com

Thank you for trusting DigitalCraft Market. If you have any questions regarding privacy, please contact us.