Privacy Policy

This Privacy Policy explains how Fabrica ("we", "us") collects, uses and protects personal data when you use fabricatools.com. Fabrica is a trading name of Meridian Digital Holdings LLC. We are committed to handling your data lawfully, fairly and transparently in accordance with the UK GDPR and EU GDPR where applicable.

1. Data controller

Fabrica (trading name of Meridian Digital Holdings LLC)
London, United Kingdom
Email: privacy@fabricatools.com

2. What data we collect

Account and profile data

• Name and email address when you register
• Seller profile information (display name, bio, avatar, social links) if you sell on Fabrica
• Primary intent preference (buy / sell / both) if provided at signup

Payment data

Payments are processed by Stripe. We receive transaction identifiers, amounts and payout status — we do not store full card numbers or CVV codes on our servers.

Usage and technical data

• Pages visited, search queries, filters applied and referral sources
• Device type, browser, IP address and approximate location (country/region)
• Log data for security, fraud prevention and debugging

Uploaded content

Sellers upload listing files, descriptions and media. Buyers may leave reviews. We store this content to operate the marketplace and deliver purchases.

3. Why we use your data

• Account management — create and authenticate your account, provide dashboard features
• Payment processing — facilitate purchases, seller payouts and tax reporting
• Delivery — generate secure download links and purchase records
• Fraud prevention — detect abuse, chargebacks and prohibited content
• Analytics — understand how the site is used and improve the product
• Communications — send transactional emails (receipts, password resets, payout notices)
• Legal compliance — VAT, financial record-keeping and responding to lawful requests

4. Legal basis for processing

• Contract performance — processing necessary to provide the marketplace services you sign up for
• Legitimate interests — security, analytics, product improvement and fraud prevention, balanced against your rights
• Legal obligation — tax, accounting and regulatory requirements
• Consent — non-essential cookies and optional marketing where applicable; you may withdraw consent at any time

5. Third-party processors

We share data with trusted service providers who process it on our instructions:

• Supabase — database, authentication and file storage
• Stripe — payment processing and seller payouts
• Resend — transactional email delivery
• Vercel — website hosting and edge delivery
• Quaderno — VAT calculation and remittance for EU/UK sales
• Plausible — privacy-friendly analytics (no cross-site tracking cookies)

Each provider is bound by data processing terms appropriate to their role. We do not sell your personal data.

6. International transfers

Some processors may store or process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses or UK International Data Transfer Agreements.

7. Data retention

• Account data — kept while your account is active and for a reasonable period after closure to handle disputes
• Financial and transaction records — retained for 7 years for tax and accounting purposes
• Support and dispute records — retained as long as needed to resolve the matter
• Analytics — aggregated and anonymised where possible; raw logs rotated per provider policies

8. Your rights

Depending on your location, you may have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion where no overriding legal basis applies
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — ask us to limit processing in certain circumstances
• Withdraw consent — where processing is consent-based

To exercise these rights, email privacy@fabricatools.com. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

9. Cookies

We use:

• Essential cookies — required for login sessions and security (no consent required)
• Analytics — Plausible Analytics, configured to minimise personal data collection; basic pageview analytics may not require cookie consent under ePrivacy guidance
• Preference cookies — e.g. remembering cookie banner acceptance

Our cookie consent banner appears on first visit. You can manage preferences via the banner or your browser settings. See also Section 11 of our Terms of Service.

10. Security

We implement technical and organisational measures including encryption in transit, access controls, signed download URLs and regular review of third-party security practices. No system is completely secure; please use a strong, unique password.

11. Children

Fabrica is not intended for users under 18. We do not knowingly collect data from children. Contact us if you believe a minor has created an account.

12. Changes and contact

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be communicated by email or site notice.

Privacy enquiries: privacy@fabricatools.com