Effective date: 31 May 2026 · Last updated: 31 May 2026
This Privacy Policy explains how RFQS (“we”, “us”, “our”) collects, uses and protects personal data in connection with the sale and delivery of digital templates and tools through the website rfqslb.store. RFQS is operated as a sole proprietorship by Rony Francis, based in Lebanon, Jbeil.
1. Who controls your data
The data controller for the limited fulfilment and contact data that RFQS receives is Rony Francis, sole proprietor trading as RFQS, based in Lebanon, Jbeil. Payment transactions are handled by Paddle as Merchant of Record (MoR), through the Paddle entity that contracts with the buyer under the Paddle Buyer Terms. Paddle is an independent data controller for buyer transaction data (payment instrument data, billing address, transaction history) and operates under its own privacy policy at paddle.com. RFQS does not receive, store or process buyer payment-card details at any point; all payment-card data is handled solely by Paddle within the Paddle checkout. RFQS receives from Paddle only the fulfilment data necessary to deliver the purchased product and provide support.
2. What we collect
- Fulfilment data from Paddle: buyer email address, order ID, country, product purchased, license details.
- Direct contact data: name, email address and country if you contact us directly (for support, refund or other enquiries).
- Marketing contact: email address if you explicitly opt in to receive product or release announcements.
- Site cookies: minimal, essential cookies only. No tracking pixels, third-party analytics, or advertising cookies are used. If WordPress.com platform behavior changes such that non-essential cookies are introduced, a consent banner will be added at that time. We do not run advertising or third-party tracking cookies on rfqslb.store.
3. How we use it
- To deliver the digital product you purchased and provide the download link.
- To respond to support, refund and general enquiries sent to support@rfqslb.store.
- To comply with our tax and accounting obligations. Paddle, as Merchant of Record, is the seller of record for the buyer’s transaction and is responsible for calculating, collecting and remitting any applicable VAT / sales tax on the sale.
- To send product release or update emails to buyers who have opted in.
Lawful basis (GDPR Article 6). Delivery of the product and support responses: performance of a contract with the buyer (Art. 6(1)(b)). Tax and accounting record-keeping: compliance with a legal obligation (Art. 6(1)(c)). Marketing emails to opt-in subscribers: consent (Art. 6(1)(a)). Defending or pursuing legal claims: legitimate interests (Art. 6(1)(f)).
4. Marketing email
Marketing emails are sent on an opt-in basis only. You can unsubscribe at any time using the link in any marketing email, or by writing to support@rfqslb.store. Transactional emails (order confirmation, download link, refund notice) are not marketing and will be sent regardless of marketing opt-in status.
5. Data retention
- Tax and financial records: 7 years, as required for accounting and Paddle’s MoR obligations.
- Marketing contacts: retained while consent is active and for up to 24 months after last engagement, then deleted.
- Support correspondence: retained for 24 months from last contact, then deleted unless tied to an open refund or legal matter.
6. Independent controllers and sub-processors
6.1 Independent controller
Paddle — Merchant of Record, payment processing, invoicing, tax handling. Paddle is an independent data controller for buyer transaction data and processes that data under its own privacy policy at paddle.com.
6.2 Sub-processors acting on RFQS’s behalf
- Automattic Inc (WordPress.com) — website hosting.
- Brevo — transactional and (opt-in) marketing email delivery.
- Make.com — workflow automation between fulfilment systems.
Where personal data is transferred outside the European Economic Area or the United Kingdom, that transfer is made under the EU/UK Standard Contractual Clauses or an adequacy decision, and additional safeguards published by the sub-processor.
7. Your rights
Subject to applicable law (including the EU GDPR and UK GDPR where relevant), you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; request a portable copy of your data; object to or restrict certain processing; and withdraw consent for marketing at any time. To exercise any of these rights, email support@rfqslb.store. Response times. RFQS acknowledges data-subject requests within 48 business hours and provides a substantive response within 30 calendar days, in line with GDPR and UK GDPR. Complex cases may be extended by a further 60 days with notice.
8. US residents (CCPA / state privacy laws)
If you are a resident of California or another US state with a comparable privacy law, you have rights to access, correct and delete the personal information we hold about you, and to opt out of any sale or sharing of your personal information for cross-context behavioural advertising. RFQS does not sell or share personal information for cross-context behavioural advertising. To exercise these rights, email support@rfqslb.store.
9. Security
RFQS practises data minimisation (we hold only the buyer email, order ID, country and license details received from Paddle, plus any voluntary direct contact data), least-privilege access (only the operator named in §1 accesses the support inbox and fulfilment records), and TLS encryption in transit. Backups and access logs are retained per the retention schedule in §5. We rely on the security controls provided by our hosting and payment providers (Automattic and Paddle), including access controls on stored data. No system is perfectly secure; you should not send sensitive financial information to support@rfqslb.store — payment data should always go through Paddle’s checkout.
10. Contact
For any privacy question, including requests to exercise your rights:
Email: support@rfqslb.store
Operated by: Rony Francis, RFQS, Lebanon, Jbeil.
RFQS Store 