Privacy policy

Last updated: 21 July 2026

Who we are

MockupSmith is operated by Solanex BV, a company registered in Belgium (VAT BE 0543.454.772). Solanex BV is the data controller for the personal data described in this policy. Contact:hello@mockupsmith.com.

What we collect, why, and on what legal basis

When you place an order — your email address, the country you select, the items you bought, the amounts and VAT breakdown, and your payment status. If you buy as a business: your company name, contact name, address, and VAT number. We process this to deliver your files and manage your order (performance of a contract, Art. 6(1)(b) GDPR) and to meet our tax and bookkeeping obligations (legal obligation, Art. 6(1)(c) GDPR). Business VAT numbers are checked against the European Commission's public VIES service to apply the correct VAT treatment.

When you pay — payment itself happens on Mollie's hosted checkout. We never see or store your card, bank, or wallet details; Mollie tells us only whether the payment succeeded.

When you log in — the email address you enter, used once to send a sign-in link if we have orders for that address (performance of a contract). Login requests are throttled and the request log is minimal (address + last request time).

When you join the mailing list (for example to get the free sample pack) — your email address, with a confirmation step before you're marked subscribed (consent, Art. 6(1)(a) GDPR). Every email includes an unsubscribe link; you can withdraw consent at any time, as easily as you gave it.

When you browse — our hosting provider (Cloudflare) processes technical request data such as IP addresses in server logs to serve the site and protect it against abuse (legitimate interest, Art. 6(1)(f) GDPR: keeping the service secure). We run no analytics or tracking scripts and set no cookies — see thecookie statement.

Who processes data for us

These parties process data only on our instructions. Where a processor operates outside the EEA (Cloudflare, Resend), transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell personal data, ever.

How long we keep it

Order and invoice data: as long as Belgian tax and accounting law requires (up to 10 years). Mailing-list data: until you unsubscribe or ask us to delete it. Unconfirmed signups and login requests are routinely cleared. Server logs are short-lived and managed by Cloudflare.

Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest or withdraw consent at any time. Emailhello@mockupsmith.com and we'll respond within a month. Note that we must keep order records that the law requires us to retain, even if you ask for deletion — we'll tell you exactly what we kept and why.

If you believe we've handled your data wrongly, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données,gegevensbeschermingsautoriteit.be) or to the supervisory authority in your own EU country.

No profiling, no automated decisions

We don't profile you and no decision with legal or similar effect is made about you by automated means. The only automated check is the VIES VAT-number validation at checkout, which simply applies the VAT rules.

Changes

If this policy changes materially, we'll update this page and the date at the top. Questions?hello@mockupsmith.com.