Privacy policy

Effective October 20, 2026

Plainwork Kits is the store of Arin Partners, South Korea. This policy explains what personal information we collect when you visit plainworkkits.com, join a waitlist, buy a kit or email us, who receives it, and the choices you have.

The short version

• Our website is hosted by Lovable. Checkout runs on Shopify, and PayPal processes payments. We never see your full card number.
• We collect what we need to deliver your kit, answer your emails, process refunds and keep tax records.
• We use the Meta pixel to measure our ads. It doesn't load on our site or our checkout pages if your browser sends a Global Privacy Control signal or if you turn it off with "Ad tracking choices".
• We don't sell your personal information for money.
• You can ask us to show, correct or delete your information by emailing support@plainworkkits.com.

Who we are

Plainwork Kits sells digital kits (spreadsheets, templates, checklists, guides and tools) for small businesses, mostly in the United States. We are based in South Korea. For anything about this policy or your information, email support@plainworkkits.com.

What we collect and why

When you visit plainworkkits.com

Our website is hosted by Lovable. Like any web host, Lovable receives your IP address and basic request information, such as the page you asked for, the time and your browser type, so it can show you the page and keep the site secure. If we turn on Lovable's built-in site analytics, Lovable also measures visits for us in aggregate, such as page views, approximate location, device type and where visitors came from.

If you arrive from an ad or a link that carries campaign tags (utm_source, utm_medium, utm_campaign, utm_content and utm_term) or a Facebook click ID (fbclid), your browser keeps them for that visit in session storage. When you click a buy button, we add them to the checkout link and to your order, so we can see which ads and links lead to purchases.

If you turn off ad tracking (see "Your ad tracking choices" below), your browser remembers that choice in local storage on our site.

When you buy

Our checkout runs on Shopify. To complete an order, you give your email address, your name, your billing address or country, and a phone number if the checkout asks for one. You pay through PayPal, with a PayPal account or, where PayPal offers it, with a card.

• Shopify receives your order and contact details so it can process the order, send your receipt and email your download link. Shopify may also use some information for its own purposes, such as preventing fraud. Shopify's privacy policy: https://www.shopify.com/legal/privacy
• PayPal processes your payment under its own privacy statement: https://www.paypal.com/us/legalhub/paypal/privacy-full. We do not see or store your full card number.
• We receive your name, email address, order details, billing location, payment status and the campaign tags described above. We use them to deliver your kit, email free updates for kits that include them, answer support requests, process refunds, prevent fraud and keep the records that tax and accounting rules require.

If you choose to receive marketing emails at checkout, we also use your email address for that.

When you join a waitlist

On some product pages you can join a waitlist with your email address. We store:

• your email address and which waitlist you joined
• whether you also asked to hear about other Plainwork kits (this box is off unless you tick it)
• which version of the sign-up wording you saw
• the campaign tags from your visit, and whether a Facebook click ID was present (yes or no, not the ID itself)
• the page you signed up on and the time

We don't store your IP address with your sign-up. Sign-ups are kept in our website's database, which Lovable provides.

We use your email address only to tell you about that kit: when it's ready, and if the price or contents change before launch. If you ticked the box, we also email you about other Plainwork kits. To send these emails, we may import your email address and choices into our Shopify customer list and send them with Shopify's email tools. Every email has an unsubscribe link. We don't sell your email address.

When you email us

Email you send to support@plainworkkits.com is forwarded by Cloudflare to our inbox, which is hosted by Google (Gmail). We use your message and email address to answer you and, for orders, to keep a record of what we did, such as a refund.

Kit files

Our kits are files you download and open on your own computer. They don't send us anything. If you use our "make a copy" links to open a template in Google Sheets or Google Docs, Google handles that under its own terms, and we don't receive a list of who makes copies.

Meta pixel and ads

We use the Meta pixel, a small piece of code from Meta Platforms, Inc., on plainworkkits.com. We use it to measure our ads and to show ads to people who may be interested in our kits.

When the pixel loads, Meta receives information about your visit: the pages you view, actions such as clicking a buy button or joining a waitlist (but not the email address you type), your browser and device type, your IP address, and cookie or similar identifiers, such as Meta's _fbp and _fbc cookies. Meta may connect this information with your Meta account.

The pixel does not load on our site when:

• your browser sends a Global Privacy Control (GPC) signal, or
• you have turned it off with the "Ad tracking choices" link at the bottom of our pages.

Checkout pages are run by Shopify. We also add the Meta pixel to them with Shopify's customer events tool. When you start checkout and when you complete an order, it sends Meta the kit you chose, the price and currency, and a checkout or order reference, along with the browser, device, IP address and cookie information described above. It doesn't send your name, email address, phone number or billing address. It doesn't run if your browser sends a Global Privacy Control signal, if you turned off ad tracking on our site before you went to checkout, or if Shopify's privacy settings show that you opted out. Shopify's privacy settings and Shopify's privacy policy apply to the rest of the checkout.

Meta's privacy policy: https://www.facebook.com/privacy/policy

Your ad tracking choices

• On our site: use the "Ad tracking choices" link at the bottom of our pages to turn off the Meta pixel. The choice is saved in that browser, so repeat it on each browser or device you use.
• Global Privacy Control: turn on GPC in your browser or with a browser extension (https://globalprivacycontrol.org). We treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising, and the Meta pixel doesn't load on our site.
• In your Meta account: open Accounts Center > Ad preferences > Manage info, and turn off the use of activity information from ad partners: https://accountscenter.facebook.com/ad_preferences
• In your browser: block or delete cookies, or use a browser that blocks third-party trackers.
• Industry tools: https://optout.aboutads.info and https://thenai.org/how-to-opt-out/

If none of these work for you, email support@plainworkkits.com and we'll help.

Who receives your information

We share personal information only with the service providers that run our store, and only what each one needs:

These providers may store and process information in the United States and in other countries where they or their subcontractors operate. Each has its own privacy policy:

• Lovable: https://lovable.dev/privacy
• Shopify: https://www.shopify.com/legal/privacy
• PayPal: https://www.paypal.com/us/legalhub/paypal/privacy-full
• Meta: https://www.facebook.com/privacy/policy
• Cloudflare: https://www.cloudflare.com/privacypolicy/
• Google: https://policies.google.com/privacy

We may also disclose information when the law requires it, or when it's needed to protect our rights, our customers or the public, for example to prevent fraud. If our store or business is sold or transferred, customer information may move to the new owner, who must keep using it as this policy describes.

What we don't do

• We don't sell your personal information for money.
• Under some US state laws, letting Meta collect information through the pixel for advertising may count as "selling" or "sharing" personal information, or as "targeted advertising". You can opt out at any time; see "Your ad tracking choices" above.
• We don't knowingly collect sensitive personal information. Card numbers go to PayPal, not to us.
• We send marketing emails only to people who ask for them, for example by joining a waitlist or ticking a box at checkout, and every marketing email has an unsubscribe link. Emails about a kit you bought, such as your receipt, download link and free updates, are not marketing emails.

How long we keep information

• Orders and refunds: five years after the purchase, or longer if a tax or legal rule requires it.
• Support emails: up to three years after our last message, unless they are part of an order or refund record.
• Waitlist sign-ups: until you unsubscribe, ask us to delete them, or we close that waitlist. If you unsubscribe, we keep only your email address on a do-not-email list so we don't email you again.
• In your browser: campaign tags in session storage are cleared when you close the tab. Your ad tracking choice stays until you clear our site's data.
• Our providers keep information, such as Lovable's server logs and the data Meta receives, under their own policies.

When we no longer need information, we delete it or make it anonymous.

How we protect information

We use established providers that run their own security programs, we limit access to our accounts, and we don't store card numbers. No method of storing or sending information is completely secure, but we work to protect yours.

International transfers

We are based in South Korea. Most of our customers are in the United States, and our service providers operate in several countries, including the United States. When you visit our site, buy a kit, join a waitlist or email us, your information is sent over the internet to us in South Korea and to our providers in the countries where they operate. Privacy laws in those countries may differ from the laws where you live. We use these providers only for the purposes described in this policy.

Your privacy rights

Wherever you live, you can ask us to:

• tell you what personal information we have about you and give you a copy
• correct it
• delete it
• stop sending you marketing emails (you can also use the unsubscribe link in any email)

US state privacy rights

California, Colorado, Connecticut, Virginia, Texas, Oregon and a growing number of other states give their residents privacy rights. Depending on your state, these can include the right to:

• know what personal information we collect, use and disclose, and get a copy in a portable format
• correct inaccurate personal information
• delete personal information
• opt out of the sale of personal information, of "sharing" it for cross-context behavioral advertising (California), and of targeted advertising and profiling
• not be treated differently for using these rights
• appeal our decision on your request

These laws may not apply to a store of our size, but we honor these requests from anyone in the United States.

What we collect, in the categories California law uses:

We don't collect sensitive personal information. Identifiers, commercial information and internet activity may be "shared" with Meta for advertising as described above. We don't sell any category for money.

Opt-out preference signals. We treat a Global Privacy Control signal as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising in that browser.

How to make a request. Email support@plainworkkits.com with "Privacy request" in the subject line. Send it from the email address you used with us, or include your order number, so we can match your request to our records. We may ask for one more detail to confirm it's you. You don't need to confirm your identity to opt out of ad tracking. You can also use an authorized agent; we'll ask for your signed permission.

We confirm your request within 10 business days and answer within 45 days. If we need more time, up to another 45 days, we'll tell you why. If we can't delete something because a tax or legal rule requires us to keep it, we'll tell you what we kept and why.

Appeals. If we decline your request, you can appeal by replying with "Appeal" in the subject line. We answer appeals within 45 days. If we decline your appeal, you can contact your state attorney general.

We won't charge you or treat you differently for using any of these rights.

Outside the United States

If you live outside the United States, including in Korea, the European Union or the United Kingdom, you may have similar or additional rights under local law. Email support@plainworkkits.com, and we'll respond as the law that applies to you requires.

Children

Our kits are business tools. Our site is not directed to anyone under 16, and we don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email support@plainworkkits.com and we'll delete it.

Changes to this policy

When we change this policy, we update the effective date at the top. If a change materially affects how we use information we already have, we'll post a notice on our site and, where the law requires, ask for your consent.

Contact

Privacy questions and requests: support@plainworkkits.com

Plainwork Kits, the store of Arin Partners, South Korea