GDPR Compliance Statement

Last Updated: May 14, 2026

This GDPR Statement explains how we collect, handle, and process data for our European and international customers who purchase our digital design assets and UI frameworks.

1. Data Controller

For the purposes of the GDPR, Premium UI Kits is the Data Controller of your personal information. This means we determine the purposes and ways in which your personal data is processed when you use our website or purchase our digital products.

2. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contractual Necessity: To fulfill our contract with you (e.g., delivering the UI kits and source code to your email after purchase).
• Consent: When you voluntarily subscribe to our newsletter or agree to our cookie policy.
• Legal Obligation: To maintain accurate financial records for tax and accounting purposes.

3. Your Data Subject Rights

Under the GDPR, you possess several powerful rights regarding your personal data. You have the right to:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data when it is no longer necessary for the purposes it was collected.
• Right to Restrict Processing: Request a temporary halt on processing your data under certain conditions.
• Right to Data Portability: Receive your data in a structured, commonly used format to transfer to another service.
• Right to Object: Object to our processing of your data for direct marketing purposes.

4. Third-Party Processors

We do not sell or trade your data. We only share necessary information with fully GDPR-compliant third-party processors to run our business efficiently. Most notably, all payment transactions are handled securely by Stripe. We do not store your credit card information; it is processed directly by Stripe in accordance with their strict privacy standards.

5. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this GDPR Policy. Account information is retained as long as your account is active to provide you with ongoing access to your purchased digital assets and lifetime updates.

6. How to Exercise Your Rights

To exercise any of your GDPR rights, or if you have questions about our data processing practices, please submit a formal request to our Data Protection Officer (DPO) via the contact methods below. We will respond to all legitimate requests within 30 days.