At CanvasCraftHub, operated by webORBIS webDESIGN GmbH, we take the protection of your personal data and your creative identity seriously. This Privacy Policy outlines our transparent practices regarding the collection, usage, and safeguarding of your information.

---

 

1. 1. Data Controller
      The responsible party (Controller) for processing your personal data under this website, in accordance with the General Data Protection Regulation (GDPR), is:

• • Company Name: webORBIS webDESIGN GmbH

• • Registered Office: Altmühlweg 3, 91737, Ornbau, Germany

• • Commercial Register: Amtsgericht Ansbach, HRB 6667

• • Official Email: design@canvascrafthub.com

• • Phone: +49 9826 6592636

2. 2. Secure Payment Processing (Stripe)
      To ensure the highest level of financial security and PCI-DSS compliance, CanvasCraftHub does not store or process your credit card or sensitive payment information on our internal servers.

• • Third-Party Processing: All payment transactions are handled exclusively by our authorized payment processor, Stripe.

• • Data Handling: Stripe collects and processes your payment data (such as card details, billing address, and transaction metadata) in accordance with their own global privacy standards.

• • Fraud Prevention: By initiating a purchase on www.canvascrafthub.com, you acknowledge that your information will be securely transmitted to Stripe to facilitate the transaction and protect against unauthorized or fraudulent activity.

3. Data Retention & Legal Compliance
   

   We retain personal data only for as long as necessary to provide our digital products or to fulfill legal mandates:

   • Business & Tax Records: Pursuant to German Commercial Law (HGB), we retain invoices and accounting-related data for 10 years.

   • Transaction Correspondence: General enquiries and order-specific communications are typically retained for 3 years following the delivery of the digital assets to ensure service continuity.

4. 4. Age Requirement & Professional Intent
      Our digital products are designed exclusively for professional use by business entities and adult creative professionals.

• • Eligibility: Users must be at least 18 years of age to register an account or purchase digital products.

• • Protection: We do not knowingly collect data from individuals under 18. This threshold is strictly enforced to prevent unauthorized payment usage and ensure compliance with international digital privacy standards.

5. 5. Intellectual Property & Usage Licensing
      To provide clarity on the “Digital Deliverables” you purchase, the following rights apply:

• • Final Deliverables: Upon full payment, the client is granted a non-exclusive, perpetual, and worldwide license to use the final visual website design for their business or personal presence.

• • Proprietary Core: All underlying source code, architectural frameworks, and generic technical components developed by webORBIS webDESIGN GmbH remain our non-exclusive intellectual property.

• • Restriction of Redistribution: Clients are prohibited from reselling or redistributing our proprietary source code or core frameworks as standalone products without express written authorization.
  • Digital Deliverables: Upon full payment, the client is granted a non-exclusive, perpetual, and worldwide license to use the website design for their business or personal presence.

6. 6. User Rights (GDPR & US Laws)
      Regardless of your location, we honor your digital rights. Depending on whether you are based in the EU (GDPR) or the USA (CCPA/State Laws), you have the following rights:

• • The right to access, rectify, or delete your personal data.

• • The right to object to or restrict specific data processing activities.

• • The right to data portability.

• • The right to withdraw consent for future processing at any time.

• • To exercise these rights, please contact us at design@canvascrafthub.com. We strive to provide initial feedback within 24 hours and will resolve all verified requests within the statutory 30-day period.

7. 7. Security Measures
      We implement robust technical and organizational security measures (TOMs) designed to protect your data against unauthorized access, loss, or alteration. Our protocols are specifically audited to meet the high-security expectations of our professional clientele in Europe and North America.