Privacy Policy
Last Updated: June 2026
We Are Cayo ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (wearecayo.co.uk) and use our online template shop.
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.
1. Information We Collect About You
We may collect and process the following data about you:
Identity and Contact Data: Your name, billing address, and email address, which you provide when purchasing a digital template or contacting us with an enquiry.
Transaction Data: Details about payments to and from you, and details of the specific digital products you have purchased from our shop.
Technical and Usage Data: Information about how you use our website, your IP address, browser type, and operating system, collected automatically via cookies through our website platform (Squarespace).
2. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:
To Deliver Your Purchase: To process your order and automatically deliver the secure digital download links for your templates.
Customer Support: To respond to your enquiries, issues, or requests for help with your files.
Legal Obligations: To comply with standard UK accounting and tax requirements (such as retaining financial transaction records for HMRC).
Marketing Communication: If you explicitly opt-in to receive updates from us, we may send you information about new templates or business operations support tools. You can opt out at any time.
3. How Your Data Is Stored and Shared
We do not sell, rent, or trade your personal data with third parties. To run our digital shop, we share your data with trusted third-party service providers who act as our processors:
Squarespace: Our website platform, which securely hosts our storefront and captures your order details.
Payment Processors: Your payment details are processed directly and securely via our encrypted payment gateways (such as Stripe or PayPal). We never see or store your full credit or debit card details.
We ensure all third-party processors comply with UK data protection laws and maintain strict security standards.
4. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By UK law, we must keep basic information about our customers (including Contact, Identity, and Transaction Data) for six years after they cease being customers for tax purposes.
5. Your Legal Rights
Under the UK GDPR, you have comprehensive rights in relation to your personal data, including the right to:
Request access to your personal data.
Request correction or erasure of your personal data.
Object to or restrict the processing of your personal data.
Request the transfer of your personal data.
Withdraw consent at any time where we are relying on consent to process your data.
If you wish to exercise any of these rights, please contact us directly.
6. Cookies
Our website uses cookies to distinguish you from other users, provide smooth checkout functionality, and analyse our website traffic. You can set your browser to refuse all or some browser cookies, but please note that some parts of our template shop may become inaccessible or not function properly if cookies are disabled.
7. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us via the contact form or email address listed on our website.