Privacy policy
Last updated Oct 6, 2026
Template — review with a lawyer before launch. Data controller: [STORE LEGAL NAME], [BUSINESS ADDRESS], [PRIVACY EMAIL].
What we collect
- Orders: name, email, country, IP address, items bought and PayPal transaction IDs. We never receive or store card numbers — PayPal handles payment details.
- Account: email, name and a hashed password if you create one.
- Downloads and licences: download times, IP address and domains you activate licence keys on.
- Messages and newsletter: what you send us, and your email if you subscribe.
- Analytics: only if you accept analytics cookies (Google Analytics 4).
Why (legal bases)
To fulfil your order (contract), to prevent fraud and keep records (legitimate interest and legal obligation), and for newsletters/analytics (consent).
Sharing
PayPal (payments), our hosting provider (Hostinger), our email provider, and Google Analytics if you consent. We do not sell personal information.
Retention
Order records are kept as long as tax law requires (usually [X] years). Other data is deleted when no longer needed.
Your rights (GDPR / UK GDPR / CCPA)
You can ask to access, correct, delete or export your data, object to processing, or withdraw consent. California residents can request to know and delete their data; we do not sell or share personal information for cross-context behavioural advertising. Contact [PRIVACY EMAIL]. You may also complain to your data protection authority.