Privacy policy
Last updated: October 29, 2026
We collect as little personal information as we can. There are no accounts, no advertising trackers and no cookies of our own. This policy explains the little we do handle. It is written for Canada's PIPEDA, Quebec's Law 25 and the privacy laws of US states.
Who is responsible
Templatomato is operated from Canada, and its operator is responsible for personal information under its control. You can reach our privacy officer through our contact form.
What we collect, and why
When you browse
We use Cloudflare Web Analytics to count visits and see which pages are popular. It doesn't use cookies, doesn't track you across sites and doesn't build a profile of you. Our host, Cloudflare, also processes technical data such as your IP address to deliver pages and protect the site from abuse, and keeps it only briefly.
When you buy
Checkout is run by Stripe. Stripe collects your payment details, email address, name and billing country to process the payment, prevent fraud and send your receipt. We never receive your full card number. From Stripe, we receive your email address, name, country, the template you bought, the amount and the date. We use this to deliver your files, handle refunds and support requests, and keep the business and tax records the law requires.
When you contact us
The contact form sends us your name, email address, message and the country your connection comes from. It's stored privately with Cloudflare. We use it only to reply and to keep a record of the conversation.
What we don't do
- We don't sell or rent personal information, or share it for targeted advertising.
- We don't send marketing emails.
- We don't use cookies for tracking or advertising.
Who processes data for us
- Stripe: payments and receipts.
- Cloudflare: hosting, file delivery, security and privacy-first analytics.
These providers may store and process data in the United States and other countries, where it may be accessible to authorities under local law. We choose providers with strong security and privacy commitments.
How long we keep it
We keep purchase records for as long as tax law requires, generally six years after the end of the tax year of the sale in Canada, and then delete them. Contact-form messages and our replies are kept for up to two years after the conversation ends.
Your rights
Depending on where you live, you have the right to ask what personal information we hold about you, to correct it, and to ask us to delete it unless we have to keep it by law. In Quebec, you may also ask how we use it and withdraw consent where consent is the basis. US residents of states with consumer privacy laws have similar rights to know, correct and delete, and we don't sell or share personal information. To make a request, use our contact form. We will respond within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada or your local privacy regulator.
Security
Template files are stored privately and served only through download links that expire after 15 minutes. All traffic uses HTTPS. Template files are encrypted, and access to our admin tools is password-protected.
Children
Templatomato is for adults and organizations. We don't knowingly collect information from children.
Changes
If we change this policy, we will update the date at the top of this page.