Privacy Policy
Last updated: August 2026
1. Controller
The controller of personal data processed through suitcasetype.com is:
Tomáš Brousil — Suitcase Type Foundry
Soběslavská 27, 130 00 Prague 3, Czech Republic:
mail@suitcasetype.com
Tomáš Brousil — Suitcase Type Foundry
Soběslavská 27, 130 00 Prague 3, Czech Republic:
mail@suitcasetype.com
2. What we process
Website operation and analytics
When you visit the Website, we may process technical request data such as your IP address, requested page, date and time, browser, device information and errors. We use this data to operate, secure and troubleshoot the Website based on our legitimate interest under Article 6(1)(f) GDPR.
The Website is hosted on Vercel. We also use Vercel Web Analytics to obtain aggregated information about page views, referrers, approximate location, browser and device type. Vercel Web Analytics does not use cookies or persistent cross-site identifiers.
We do not intentionally send names, email addresses, order numbers, account identifiers or access tokens to Vercel Analytics.
The Website is hosted on Vercel. We also use Vercel Web Analytics to obtain aggregated information about page views, referrers, approximate location, browser and device type. Vercel Web Analytics does not use cookies or persistent cross-site identifiers.
We do not intentionally send names, email addresses, order numbers, account identifiers or access tokens to Vercel Analytics.
Accounts, trial fonts and orders
When you create an account, request trial fonts or purchase a licence, we may process:
– your name, email address and account information;
– billing, company and VAT information;
– orders, invoices, licences and download history;
– selected trial fonts and acceptance of the applicable licence;
– payment status and transaction identifiers.
We process this data to provide the requested account, fonts and licences, complete orders, issue invoices and maintain records of purchases and licences.
The legal bases are performance of a contract under Article 6(1)(b) GDPR, compliance with legal obligations under Article 6(1)(c) GDPR, and our legitimate interest in documenting licences, protecting accounts and preventing misuse under Article 6(1)(f) GDPR.
– your name, email address and account information;
– billing, company and VAT information;
– orders, invoices, licences and download history;
– selected trial fonts and acceptance of the applicable licence;
– payment status and transaction identifiers.
We process this data to provide the requested account, fonts and licences, complete orders, issue invoices and maintain records of purchases and licences.
The legal bases are performance of a contract under Article 6(1)(b) GDPR, compliance with legal obligations under Article 6(1)(c) GDPR, and our legitimate interest in documenting licences, protecting accounts and preventing misuse under Article 6(1)(f) GDPR.
Payments
Online payments are processed by Stripe or PayPal, depending on the payment method you select. Payment details are submitted directly to the selected payment provider. We do not store full payment-card numbers or security codes, but we receive information such as the payment status, amount and transaction identifier.
Stripe and PayPal may process data both on our behalf and for its own purposes, including fraud prevention and compliance with financial regulation. See the Stripe Privacy Policy and the PayPal Privacy Statement.
Stripe and PayPal may process data both on our behalf and for its own purposes, including fraud prevention and compliance with financial regulation. See the Stripe Privacy Policy and the PayPal Privacy Statement.
Enquiries
If you contact us, we process your contact details and correspondence to answer your request, prepare or perform a contract and provide support. The legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the nature of the request.
Newsletter
If you subscribe to our newsletter, we process your email address, subscription status and consent record. The mailing list is administered through Mailchimp.
The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in any newsletter. Withdrawal does not affect processing carried out before consent was withdrawn.
Requesting trial fonts or creating an account does not automatically subscribe you to the newsletter.
The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in any newsletter. Withdrawal does not affect processing carried out before consent was withdrawn.
Requesting trial fonts or creating an account does not automatically subscribe you to the newsletter.
3. Service providers and international transfers
We use the following principal service providers:
– Vercel for hosting, technical logs and aggregated Website analytics;
– Stripe for payment processing;
– PayPal for PayPal payment processing, transaction administration and fraud prevention;
– Mailchimp for newsletter administration.
These providers may process data outside the European Economic Area, including in the United States. Where required, transfers are protected by an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses or another lawful transfer mechanism.
We may also disclose data where required by law or where necessary to establish, exercise or defend legal claims.
– Vercel for hosting, technical logs and aggregated Website analytics;
– Stripe for payment processing;
– PayPal for PayPal payment processing, transaction administration and fraud prevention;
– Mailchimp for newsletter administration.
These providers may process data outside the European Economic Area, including in the United States. Where required, transfers are protected by an adequacy decision, the EU–US Data Privacy Framework, Standard Contractual Clauses or another lawful transfer mechanism.
We may also disclose data where required by law or where necessary to establish, exercise or defend legal claims.
4. Cookies
The Website uses only cookies or similar storage necessary for login, sessions, preferences, shopping-cart operation, checkout and security.
Vercel Web Analytics does not use cookies. We do not use advertising cookies, Google Analytics or social-media tracking pixels.
Stripe and PayPal may use cookies or similar technologies when their payment interfaces are opened. Their respective privacy and cookie notices apply.
Vercel Web Analytics does not use cookies. We do not use advertising cookies, Google Analytics or social-media tracking pixels.
Stripe and PayPal may use cookies or similar technologies when their payment interfaces are opened. Their respective privacy and cookie notices apply.
5. Retention
We retain personal data only for as long as necessary:
– account data is retained while the account is active;
– invoices and tax records are retained for the period required by law, generally up to 10 years;
– order and licence records are retained for as long as necessary to document and administer the licence;
– trial-font and correspondence records are ordinarily retained for up to three years after the last relevant interaction;
– newsletter data is retained until you unsubscribe; minimal suppression data may be retained afterwards to respect the unsubscribe request;
– Vercel runtime logs are retained according to our Vercel plan, for no longer than 30 days under our current configuration;
– Vercel’s temporary Analytics visitor identifier is discarded after 24 hours.
Data may be retained longer where required by law or necessary for a legal claim.
– account data is retained while the account is active;
– invoices and tax records are retained for the period required by law, generally up to 10 years;
– order and licence records are retained for as long as necessary to document and administer the licence;
– trial-font and correspondence records are ordinarily retained for up to three years after the last relevant interaction;
– newsletter data is retained until you unsubscribe; minimal suppression data may be retained afterwards to respect the unsubscribe request;
– Vercel runtime logs are retained according to our Vercel plan, for no longer than 30 days under our current configuration;
– Vercel’s temporary Analytics visitor identifier is discarded after 24 hours.
Data may be retained longer where required by law or necessary for a legal claim.
6. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent.
Contact us at mail@suitcasetype.com to exercise these rights.
You may also lodge a complaint with the competent supervisory authority, including the Czech Office for Personal Data Protection.
Contact us at mail@suitcasetype.com to exercise these rights.
You may also lodge a complaint with the competent supervisory authority, including the Czech Office for Personal Data Protection.
7. Required information
Information marked as required during registration, checkout or a trial-font request is necessary to provide the requested service. Without it, we may be unable to create an account, deliver fonts or complete an order.
Newsletter subscription is voluntary.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Stripe and PayPal may perform automated fraud and payment-risk checks under their respective privacy terms.
Newsletter subscription is voluntary.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Stripe and PayPal may perform automated fraud and payment-risk checks under their respective privacy terms.