Welcome to FIVEGRAB LTD. We operate as a premier digital marketplace specializing in technical scientific assets, CAD drawings, and graphic design resources. This Privacy Policy serves to inform users of our practices regarding the collection, use, and disclosure of Personal Information for anyone using our Service.

By choosing to use our platform, you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy. We are registered in England and Wales (Company Number: 17125380) and comply with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to:

• Identity Data: Includes first name, last name, and username.
• Contact Data: Includes email address and billing address.
• Financial Data: While we do not store full card numbers, we collect transaction identifiers to verify your Available Download credits.
• Technical Data: Includes internet protocol (IP) address, login data, browser type and version, time zone setting and location, and operating system.
• Usage Data: Detailed logs of which assets (PSD, DWG, AI) you have accessed and downloaded.

Under the UK GDPR, the main grounds that we rely upon in order to process your personal information are the following:

• Contractual Necessity: To fulfill the contract we are about to enter into or have entered into with you (e.g., providing access to downloads after purchase).
• Legitimate Interests: For our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., detecting and preventing fraud).
• Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., maintaining tax records for the UK government).

Payment security is our highest priority. FIVEGRAB LTD utilizes world-class payment processors like Payoneer, Stripe, and PayPal. We do not store or process your sensitive credit card data on our own servers. All payment data is encrypted via SSL and handled by the respective payment provider according to PCI-DSS standards.

When you make a purchase, the payment gateway provides us with a confirmation token and basic billing information which we use to activate your download credits and generate your VAT invoice.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, and whether we can achieve those purposes through other means.

• Account Data: Retained as long as your account is active.
• Transaction Records: Retained for 6 years to comply with UK tax laws.
• Download Logs: Retained for 2 years to monitor for copyright infringement.

You have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data (commonly known as a “data subject access request”).
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data where there is no good reason for us continuing to process it.
• Object to processing of your personal data where we are relying on a legitimate interest.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party (Data Portability).
• Withdraw consent at any time where we are relying on consent to process your personal data.

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device’s internal memory.

Our website uses these “cookies” to collect information and to improve our Service. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service, such as maintaining your login session or accessing the download dashboard.

While we are a UK company, some of our service providers (like cloud hosting and email delivery systems) may be located outside the UK or the European Economic Area (EEA). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented, such as Standard Contractual Clauses (SCCs).

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.