Privacy Policy
Last updated: September 6, 2026
Formal Letter Templates, operated by Deluge Analytics, LLC (“we,” “us,” “our”) operates formallettertemplates.com. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
When you make a purchase: We collect your name, email address, and payment information. Payment processing is handled securely by Stripe. We never store your full credit card number.
When you visit our site: We collect standard web analytics data including IP address, browser type, pages visited, and referring website via Google Analytics, plus anonymous visit counts via a self-hosted, cookie-free analytics tool (Umami) running on our own infrastructure.
When you request the free samples or subscribe: we store the email address (and name, if given) you enter, the date, and which form you used, and we email you the download link. You can unsubscribe with the link in any email or by writing to support.
How We Use Your Information
- Process and deliver your digital product purchases
- Send order confirmation and download link emails
- Improve our website and product offerings
- Respond to customer support inquiries
Payment Processing
All payments are processed securely through Stripe. We do not store credit card numbers on our servers. See Stripe Privacy Policy.
Cookies
Our website uses cookies for essential functionality (shopping cart, checkout) and analytics (Google Analytics). Our self-hosted Umami analytics sets no cookies at all. You can disable cookies in your browser settings.
Lawful Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Contract performance: Processing your order, delivering digital downloads, and managing your account.
- Legitimate interest: Analyzing site usage via Google Analytics to improve our products and services, preventing fraud.
- Consent: Sending marketing communications (you may withdraw consent at any time).
- Legal obligation: Maintaining transaction records for tax and accounting purposes.
Third-Party Data Processors
We share your data with the following service providers who process data on our behalf:
- Stripe, Inc., Payment processing. Stripe Privacy Policy
- WooCommerce/Automattic, E-commerce platform that processes orders, manages product delivery, and stores transaction data. Automattic Privacy Policy
- Google LLC, Analytics (Google Analytics 4). Google Privacy Policy
- Google LLC (Google Fonts), Web font delivery. Your IP address is transmitted to Google servers when fonts are loaded. Google Privacy Policy
- Hostinger International Ltd., Web hosting and data storage. Hostinger Privacy Policy
- LiteSpeed Technologies, Performance caching. LiteSpeed Privacy Policy
- Cloudflare, Inc., Content delivery, DDoS and bot protection; sees the IP address of every request. Cloudflare Privacy Policy
- Hostinger International Ltd. (Hostinger Reach), Email newsletter delivery for the subscription form; stores the email address you submit. Hostinger Privacy Policy
- Proton AG, Delivery of order, download and support emails. Proton Privacy Policy
Data Retention
We retain your personal data for the following periods:
- Account and order data: For the lifetime of your account, or 7 years after your last purchase for tax compliance purposes, whichever is longer.
- Analytics data: 14 months (the retention period we set in Google Analytics).
- Marketing consent records: Until you withdraw consent, plus 3 years for compliance documentation.
Data Security
We use SSL encryption, secure payment processing via Stripe, and regular security updates to protect your information.
Your Rights Under GDPR
If you are located in the EU/EEA or UK, you have the following rights regarding your personal data:
- Right of access: Request a copy of all personal data we hold about you.
- Right to rectification: Request correction of inaccurate personal data.
- Right to erasure: Request deletion of your personal data (subject to legal retention requirements).
- Right to restrict processing: Request that we limit how we use your data.
- Right to data portability: Request your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interest, including profiling.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
- Right to lodge a complaint: File a complaint with your local data protection supervisory authority.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know: What personal information we collect, use, and disclose.
- Right to delete: Request deletion of your personal information.
- Right to correct: Request correction of inaccurate personal information.
- Right to opt-out: Opt out of the sale or sharing of your personal information.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
We do not sell your personal information. Google Analytics is configured with Google Signals, which can associate your visit with your Google account for cross-device reporting; you can opt out at myadcenter.google.com or by declining analytics cookies in our banner.
To submit a request, email [email protected] with the subject line “CCPA Request.”
International Data Transfers
Your data may be transferred to and processed in the United States, where our hosting and payment providers operate. For EU/EEA residents, our providers (Stripe, Google, Hostinger, Cloudflare) rely on Standard Contractual Clauses or the EU-US Data Privacy Framework for these transfers.
Data Controller
The data controller responsible for your personal data is:
Formal Letter Templates, operated by Deluge Analytics, LLC
United States
Email: [email protected]
Contact Us
Questions about this policy? Contact us at: [email protected]
