Nalekur Privacy Policy
Effective date: October 9, 2026 (version 2)
This policy explains what personal information we collect when you visit nalekur.com or buy a template, how we use it, who we share it with, and the choices you have. In plain terms: we collect only what we need to take your order, deliver your file, answer your messages, keep records the law requires, and keep the site safe. We do not sell your information and we do not use it for advertising.
1. Who we are
Nalekur is a trading name of MBM INDUSTRIES LIMITED, a private company with limited liability incorporated in Hong Kong ("we", "us", "our"). Business address: Room 2107, 21/F., C C Wu Building, 302-308 Hennessy Road, Wanchai, Hong Kong. We decide how your information is used. Contact for all privacy questions: support@nalekur.com. Contact is in writing by email only. We reply in writing within 2 working days.
2. What we collect
When you buy. You enter your details on Lemon Squeezy's checkout. Lemon Squeezy is our reseller and merchant of record: it takes your payment and card details (using its own payment processors) and uses your information under its own privacy policy (lemonsqueezy.com/privacy). We never see or store your full card number. Through our Lemon Squeezy account we receive:
- your name and email address;
- your billing country (and other billing details, such as your ZIP/postal code, if Lemon Squeezy passes them on);
- the product, price, any sales tax, the date and time, and the order number and receipt;
- the order status (paid or refunded).
Download records. Your files are delivered by Lemon Squeezy. Where available to us or to Lemon Squeezy, we use the date and time your files are delivered or downloaded to confirm delivery, to answer support and refund requests, and to deal with payment disputes.
Messages. Anything you write to us by email, including refund requests, and the email address you write from.
- Tips and suggestions: if you send us a tip or suggestion by email, we use your email address and message only to read and reply, and to improve our products; we keep it for up to 12 months, and don't share it, except with our email provider who handles it for us. You can ask us to delete it. Please do not include anything else personal in a suggestion.
Technical data. When you visit the site, our hosting provider (Cloudflare) processes basic technical data such as your IP address, browser type, pages requested and the date and time, and may keep it in server logs for security and to keep the service running. Lemon Squeezy processes similar data on its checkout and order pages under its own privacy policy.
Cookies and trackers. Our website sets no cookies and uses no analytics, advertising or tracking tools. Lemon Squeezy's checkout and order pages are run by Lemon Squeezy and may use their own cookies, for example for fraud prevention and security, under Lemon Squeezy's privacy policy.
What we do not collect. We do not ask for government ID numbers, health information, precise location or biometric data. Our templates are spreadsheet files; they do not send data to us. Anything you type into a template stays in your own copy of the file.
3. How we use your information
| Purpose | Information used |
|---|---|
| Take your order and help you get your file (Lemon Squeezy sends your receipt and download link) | Name, email, order details |
| Answer your messages, apply our Refund Policy and handle payment disputes | Email, order details, download records, your messages |
| Check that orders come from the United States (orders with a billing address outside the United States are cancelled and refunded), prevent fraud and keep the site secure | Billing country, technical data, order details |
| Keep accounting, tax and legal records | Order and payment records |
| Read and reply to tips and suggestions, and improve our products | Email address, your message |
Email. We send only messages about your order or replies to messages you sent us. We do not send marketing emails. If that changes, we will ask for your permission first and put an unsubscribe link in every marketing email.
4. Who we share it with
| Who | Why |
|---|---|
| Lemon Squeezy (reseller and merchant of record) | Processes your order: takes your payment and card details (through its own payment processors), calculates, collects and pays sales tax, sends your receipt and download link, and handles refunds and payment disputes. It receives your name, email address, billing details and the order, and uses your information under its own privacy policy: lemonsqueezy.com/privacy |
| Cloudflare | Hosts the website and runs our domain name service |
| Migadu | Runs the support@nalekur.com mailbox |
| Your card issuer, through Lemon Squeezy | Only if a payment is disputed: our order and delivery records and our messages with you |
We may also disclose information if the law requires it, to respond to valid legal requests, to enforce our terms, or to protect our rights, our customers or others. If our business is ever sold or reorganised, customer records may be transferred to the new owner, who must follow this policy.
We do not sell your personal information. We do not share it for cross-context behavioural advertising.
5. Where your information is processed
We are based in Hong Kong, and our providers operate in the United States and other countries. Your information may therefore be stored and processed in Hong Kong, the United States and other places where our providers operate. These places may have different data protection laws from the state where you live. We take reasonable steps to protect your information wherever it is processed.
6. How long we keep it
| Information | How long |
|---|---|
| Order, payment and refund records | 7 years from the transaction, for accounting and tax records |
| Support emails | 12 months after the matter is closed, unless we need them for a refund, a dispute or a legal reason |
| Tips and suggestions sent by email | Up to 12 months, then deleted |
| Payment, card, receipt and download records held by Lemon Squeezy | Kept by Lemon Squeezy under its own policy |
| Server and security logs | Kept by our hosting provider under its own settings and policy |
After that we delete the information or remove anything that identifies you.
7. Your choices and rights
You can ask us what personal information we hold about you, and ask us to correct it or delete it. Email support@nalekur.com with "Privacy request" in the subject line. We may ask for the email address used for your order so we can confirm it is you. We cannot delete records we must keep by law (see section 6), but we will delete the rest.
US state privacy rights. Depending on the state where you live, you may have rights to know what we collect, to get a copy, to correct or delete it, and to opt out of the sale or sharing of your information (we do neither). We will handle these requests from any customer in the United States, and we will not treat you differently for making one. We aim to respond within 45 days. You may ask someone to make a request for you; we may ask for proof that they are authorised. If we refuse a request, you may reply to ask us to review it.
Hong Kong. Under Hong Kong's Personal Data (Privacy) Ordinance you may ask to see the personal data we hold about you and to have it corrected. Giving us your information is voluntary, but we cannot take or deliver an order without your name and email address. We do not use your information for direct marketing.
Do Not Track and Global Privacy Control. We do not track you across other websites and we do not sell or share your information, so there is nothing for these signals to switch off.
8. Children
Nalekur is for people running a business or freelance work. It is not directed to children under 13, and you must be 18 or older (or the age of majority where you live) to buy. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email support@nalekur.com and we will delete it.
9. Security
We use reasonable measures to protect your information, such as encrypted connections and limiting access to those who need it. No online service is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will tell you as the law requires.
10. Links to other sites
Our site and emails may link to other sites, including Lemon Squeezy's checkout and order pages. We are not responsible for their privacy practices.
11. Changes to this policy
If we make a material change, we will post the new version here with a new date and, if the change affects how we use your information, email customers whose email address we hold.
12. Seller and contact
Nalekur is a trading name of MBM INDUSTRIES LIMITED, a company with limited liability incorporated in Hong Kong.
Maker and licensor: MBM INDUSTRIES LIMITED
Orders: processed by Lemon Squeezy, our reseller and merchant of record, which issues your receipt and handles sales tax and payment
Business address: Room 2107, 21/F., C C Wu Building, 302-308 Hennessy Road, Wanchai, Hong Kong
Email: support@nalekur.com
Support: in writing by email only. We reply in writing within 2 working days.
Last updated: October 9, 2026