Legal
Privacy policy
Updated October 18, 2026
Read this first
These pages are written for Vellum Press, a small publisher of digital guides based in Dammam, Saudi Arabia. They are a practical starting point, not a law-firm opinion. The owner must still confirm the registered legal name and the commercial registration (or other license) that covers online sales. Governing law is set to the Kingdom of Saudi Arabia. Have a lawyer review these pages before you rely on them.
Who we are
Vellum Press ("we") publishes digital PDF guides. You can reach us at glarz.com@gmail.com. We are based in Dammam, Saudi Arabia.
This policy describes the store when payments are processed by PayPal, and the labeled demo used when PayPal is not connected. It does not cover third-party sites we link to.
What we collect
Checkout asks for an email address so we can build your receipt and download link. Payments are processed by PayPal. A card or a PayPal balance is entered on PayPal's pages. When Apple Pay is available, Apple shows the payment sheet and PayPal processes the charge. We do not receive your full card number, your Apple Pay token, or your PayPal password.
The contact form collects your name, email, topic, and message. The newsletter form collects an email address and your consent to hear about new guides. The free-sample form collects an email address in exchange for the sample PDF.
The cart and the theme preference are stored in your browser (local storage). They are not sent to us until you choose to check out.
What we do not do
We do not sell personal information. We do not ask you to create a password. Google Analytics, the Meta Pixel, and the TikTok Pixel are not loaded unless the store owner sets the matching public id. When one of those ids is set, that provider's script loads, and a completed purchase can send an order id, total, and product names from the receipt page. When the ids are unset, those scripts are not included.
We do not use the health, money, or stress content you might type into a worksheet. Those worksheets live in the PDF on your device.
Why we use the information
We use your email to deliver downloads, send a receipt, respond to support requests (including a request to re-send a file that is corrupted, missing, or whose download link failed), and, if you opted in, to send occasional notes about new guides. You can unsubscribe from those notes by replying to one.
If a contact webhook URL is configured, contact-form submissions are forwarded to that endpoint. If it is not, the contact form is validated and nothing is emailed, and the form says so. Newsletter signups and free-sample requests are forwarded when a newsletter webhook URL is set. Otherwise they are written to the server log, and the form still confirms that the address was recorded.
Download links
After purchase we sign a download token that contains the order id, the email you entered, the product names, and an expiry. The default expiry is 14 days. Anyone with the link can download the files until it expires, so treat it like a receipt you do not post publicly.
The token is checked on our server. The full PDFs are not sitting in a public folder.
Processors
PayPal processes payments for this store, including cards, a PayPal balance, and Apple Pay where it is available, under PayPal's own privacy policy. In demo mode, when PayPal is not configured, no payment processor is contacted. Stripe and Moyasar are not offered unless the owner explicitly enables them. If they are enabled, those companies process that payment under their own privacy policies.
If you deploy this store, your host (for example Vercel) will also process technical logs such as IP address and user agent as part of running the site. Review that host's policy.
How long we keep it
This store does not include a database of orders. PayPal retains PayPal payments according to PayPal's own retention. Newsletter and free-sample addresses are sent to the configured webhook, or, when no webhook is set, written to the server log. Webhook forwards are retained by whatever service receives them.
Download tokens expire on their own. They are not a permanent archive of your library. Save the PDFs.
Children
The store is meant for adults buying educational PDFs. We do not knowingly collect personal information from children under 16. If you believe a child has given us an email, write to us and we will delete it from any inbox we control.
Your choices
Email glarz.com@gmail.com to ask what a given address was used for, to request deletion of a newsletter signup or a contact message we still have, or to opt out of non-essential notes. We may keep a record of a purchase where we need it for tax, fraud prevention, or a payment-network dispute.
You can clear the cart and theme preference in your browser settings.
Changes
If we change this policy, we will update the date at the top of the page. Continued use of the site after the change means you have the new policy available. Material changes to how we use email will be described on this page before they take effect.