Privacy Notice

Who controls your data

Glasspaper Technologies is the seller of Mecoblanza and the data controller for personal data handled through this website. This means we decide why and how that data is used.

Data we collect and why

We collect the delivery email address and order identifiers you provide when purchasing the digital edition. We use them to create and fulfil your order, confirm payment, secure your download, prevent duplicate delivery, and respond to purchase support. The legal basis is performance of our contract with you.

Our hosting and security systems may process technical information such as your IP address, browser or device details, timestamps, request logs, and security events. We use this information to operate, protect, diagnose, and improve the website. The legal basis is our legitimate interest in providing a secure and reliable service.

If you contact us, we process your message and contact details to answer your request. The legal basis is contract performance or our legitimate interest in providing support. Where the law requires consent for a particular use, we will ask for it and you may withdraw it at any time.

Payments and sharing

Paddle is our Merchant of Record and separately processes payment information for product sales, payment handling, tax compliance, invoicing, refunds, and related customer service. We do not receive or store your complete card details.

We may share relevant data with service providers that support hosting, storage, security, analytics, and customer support; professional advisers such as legal or accounting advisers; and public authorities when the law requires it. Providers may only process data for the agreed purpose and under appropriate safeguards.

Retention and international transfers

We retain order and transaction records for as long as needed to deliver the product, resolve disputes, prevent fraud, and meet accounting, tax, and legal obligations. Security and support records are kept only while reasonably necessary for those purposes. When data is no longer needed, we delete or anonymise it.

Our providers may process data outside your country. Where applicable, transfers are protected by recognised safeguards such as adequacy decisions or standard contractual clauses.

Your rights

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of your personal data, object to certain processing, or withdraw consent. You may also complain to your local data protection authority. We will respond within the period required by applicable law, including within one month where UK or EEA law applies.

Security and cookies

We use appropriate technical and organisational safeguards, including access controls, encrypted connections, private file storage, limited-use download links, and payment verification. No method of transmission or storage can be guaranteed completely secure.

The museum may store essential preferences on your device, including local Passport progress. During checkout, Paddle may use cookies or similar technologies necessary for payment, security, and fraud prevention. We do not currently use advertising cookies. You can manage optional cookies through your browser settings, although blocking essential storage may affect site or checkout functions.

Contact and changes

For privacy questions or rights requests, use the contact option supplied with your order or through Paddle customer support. We may update this notice when our services or legal duties change, and will publish the revised effective date here.