Privacy Policy
The short version
We collect your email if you ask for free clips or buy a pack. We use it to send you your files and, if you agreed, occasional emails about new packs. We don't sell your data to anyone, ever. You can get out at any time and we'll delete you.
The rest of this page is the same thing, in the detail the law requires.
1.Who's responsible for your data
If you have any question about your data, Contact 3003 Support. It comes to a real person.
2.What we collect, and why
If you download free clips
What: Your name, your email address, and where you found us.
Why: To send you the download link and register your access.
Legal basis: Your consent, given when you submit the form.
How long: Until you unsubscribe or ask us to delete you.
If you buy a pack
What: Your name, email address, country, and your order details.
Why: To deliver your files, give you access, and issue your invoice.
Legal basis: Performing our contract with you — we can't sell you something without this. Keeping the invoice is a legal obligation.
How long: Transaction and invoice records are kept for as long as Spanish tax and commercial law requires — currently up to six years. Your account and download access stay until you ask us to remove them.
We never see your card details. Stripe handles payment directly. Your card number never touches our website or our hands.
If you email us or use the contact form
What: Your name, email address, and whatever you write to us.
Why: To answer you.
Legal basis: Your consent — you tick a box before you send it — and our legitimate interest in replying to people who contact us.
How long: As long as the conversation is useful, then deleted.
Contact form messages are sent to us by email only — they aren't saved in a database or stored anywhere else on the site. They don't go through any third-party form service either.
If you're on our email list
What: Your email address, and whether you opened or clicked.
Why: To tell you when new packs drop, and to know whether anyone's reading.
Legal basis: Your consent. If you bought from us, we may also email you about similar packs on the basis of legitimate interest — and every one of those has an unsubscribe link.
How long: Until you unsubscribe.
If you just visit the site
What: Standard server logs — IP address, browser, pages visited, timestamps. Plus analytics data, only if you accept analytics cookies.
Why: Security, keeping the site working, and understanding what people look at.
Legal basis: Legitimate interest for the security logs. Consent for the analytics.
How long: Logs, a few months. Analytics, 14 months.
3.Who else touches your data
We use a small number of companies to run the business. They only get what they need, and none of them get to use it for their own purposes.
| Who | What they do | Where |
|---|---|---|
| Stripe | Takes your payment | Ireland / USA |
| InMotion Hosting | Runs the website and stores the files | Amsterdam, Netherlands |
| Google Analytics | Tells us which pages people look at — only with your consent | USA |
Our email system (AcyMailing) runs on our own server, so your email address doesn't get handed to a third-party mailing company.
Where your data actually lives: our server is in Amsterdam, in the EU. Your details, your orders and anything you send us stay there. InMotion is a US company, so their support staff can access the server from the US when they're helping us fix something — that's covered by our agreement with them.
The two things that do leave the EU are payment processing (Stripe) and analytics (Google, and only if you accepted). Both operate under the EU-US Data Privacy Framework, which is the current legal mechanism for those transfers.
We do not sell your data. We do not share it for advertising. There is no list anyone can buy.
4.Your rights
Under the RGPD you can:
- See what we hold about you
- Correct anything wrong
- Delete it — the "right to be forgotten"
- Restrict what we do with it
- Take it with you in a portable format
- Object to us using it
- Withdraw consent at any time, without it affecting anything we did before you withdrew
To use any of these, Contact 3003 Support. We'll respond within one month. We won't make it difficult, and we won't ask why.
If we get it wrong and you're not happy with how we handled it, you can complain to the Spanish data protection authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid
www.aepd.es
5.A few things we don't do
- We don't make automated decisions about you
- We don't profile you
- We don't knowingly collect data from anyone under 16
- We don't have a data breach history, and if we ever do, we'll tell you and the AEPD within 72 hours
6.Security
The site runs over HTTPS. Payment is handled entirely by Stripe. Access to the admin side is restricted. We keep the software updated.
We're honest about the limits: no website is perfectly secure, and anyone who tells you otherwise is guessing.
7.Changes
If we change this policy we'll update the date at the top. If it's a material change and you're on our list, we'll email you.