Privacy Notice

Who is responsible

CF Library is operated by Cristina Fialho Pereira Janeiro, trading as CF Agency / CF Library, an individual sole trader established in Portugal. For the purposes of data protection law, the seller is the data controller of the personal data described in this notice. Contact: hello@cfagency.pt.

What we collect and why

• Email address — when you download a free resource or create an account. Used to deliver the resource, create and secure your account, and provide customer support. Legal basis: performance of a contract and legitimate interests.
• Account information — when you sign in (for example with Google), we receive your name, email and a unique account identifier from the sign-in provider. Used to give you access to your purchases. Legal basis: performance of a contract.
• Purchase history — the resources you buy, amounts, currency, payment references and status. Used to unlock your downloads, keep your order history and meet tax and accounting obligations. Legal basis: performance of a contract and legal obligation.
• Support messages — anything you send us when you ask for help. Legal basis: legitimate interests.
• Usage and device data — basic technical data such as IP address, browser and device identifiers, and how the site is used. Used for security, fraud prevention and improving the service. Legal basis: legitimate interests.

Payment card details are collected and processed directly by Paddle, our Merchant of Record — we never see or store your card number.

Who we share it with

• Paddle (Merchant of Record) — for the sale of products, subscription and payment management, tax compliance and invoicing.
• Service providers — hosting, authentication and infrastructure providers that process data on our behalf under appropriate safeguards.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to do so by law.

We do not sell your personal data to anyone.

How long we keep it

We keep personal data only for as long as needed for the purposes above: account data while your account is active, purchase and invoice records for the period required by Portuguese tax law, and support messages for up to 24 months. When data is no longer needed it is deleted or anonymised.

Your rights

As a resident of the EU/EEA you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. We respond to requests within one month. You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD — Comissão Nacional de Proteção de Dados) or your local authority. To exercise any right, email hello@cfagency.pt.

Security and transfers

We apply appropriate technical and organisational measures, including encryption in transit and strict access controls; download links are short-lived and server-signed. Some of our service providers (including Paddle and our hosting and authentication providers) may process data outside the EU/EEA; where they do, transfers are protected by adequacy decisions or standard contractual clauses.

Cookies

We use only essential cookies and storage needed to keep you signed in and operate the site. We do not use marketing or third-party tracking cookies. You can clear or block cookies in your browser settings, but sign-in will stop working if essential storage is blocked.