Legal

Privacy Policy

Published: October 2, 2026

This policy describes what personal data this store collects, why it collects it, how long it keeps it and what you can ask for. It describes the system as it is actually built.

Who is responsible for your data

Controller: [LEGAL BUSINESS NAME]
Contact: [support@YOURDOMAIN]
Address: [BUSINESS ADDRESS]

Data this store collects

Account information

Email address, and the password you set. The password is stored only as a one-way hash.
Billing details you enter: name, address, city, postcode, country, phone. Phone is optional unless the payment provider requires it.
Marketing preferences, if you set any.

Order information

Which products you bought, at what price, in what quantity, and when.
Order status, including refunds and cancellations.
Which files you have downloaded, how many times, and when.
Invoice records, which are retained to meet tax and accounting record-keeping requirements.

Payment information

Card numbers are not stored on this site. Payment details are entered on the payment provider's own pages, and the store receives a token or a reference it can use to take a payment, issue a refund and check fraud signals. Card numbers and card security codes never pass through or reside on this site.

Technical data collected automatically

Server access logs, including IP address, timestamp, the page requested and the browser user agent.
The contents of cookies set by WordPress and WooCommerce, described in the cookie policy.

Why that data is collected

Purpose
Item	Detail
Create and manage your account	To let you sign in, download what you bought and keep your details current.
Take payment and issue refunds	To complete a transaction, keep the order record, and process a refund where one is granted.
Serve and protect downloads	To verify that a download request comes from the account that paid for it, and to enforce download limits.
Meet legal obligations	To keep accounting and tax records, and to respond to a lawful request.
Answer support requests	To diagnose the problem you reported and reply to you.
Keep the site running	To find faults, block abuse and understand which pages work.

Data is not collected for any other purpose. There is no advertising network on this site and no third-party advertising tracker.

Cookies and local storage

The site sets cookies that are needed for it to function — keeping you signed in, remembering what is in your cart, and letting WooCommerce recognise a returning visitor. Any analytics or marketing cookies that are actually installed are listed on the cookie policy page. If none are listed there, none are being set.

Sharing your data

Data is shared only where it is needed to run the store:

With the payment provider, to take the payment and process refunds.
With the hosting provider — Who runs the server this site is on.
With an email delivery service, to send order confirmations and download notices.
Where there are any analytics or marketing services — They are named on the cookie policy page. If that list is empty, none are in use.

Data is not sold. Data is not shared for advertising. There is no data broker involved.

Data may also be disclosed where the law requires it — for example in response to a valid court order, a competent regulator, or a properly served copyright notice. See the Copyright & DMCA page.

International transfers

The payment provider and the email service may process data on servers outside your country, including outside your region. If that applies to you and you need the specific safeguards in place, ask and they will be confirmed rather than assumed.

How long data is kept

Record
Item	Detail
Account	Kept while the account exists. Deleting the account removes the profile, though records that must be kept for tax or accounting purposes are retained separately.
Orders and invoices	Retained for as long as your local tax and accounting rules require. This is normally longer than any other record here.
Download history	Kept with the order for as long as the order is kept, because it is part of the delivery record.
Server logs	Rotated and deleted on the schedule set by the hosting provider.
Support messages	Kept while the issue is open, then archived for a period after, so a repeat question can be answered without starting again.

Your choices and rights

Depending on where you live, you may have rights to access the personal data held about you, to correct it, to have it deleted, to restrict or object to its processing, to data portability, and to object to direct marketing. Contact the address below and the request will be dealt with.

Access and correction — most fields can be changed yourself under My Account → Account details.
Export — ask and you will receive a copy of your account and order data in a readable format.
Deletion — ask and the account can be closed. Anything that must be retained for accounting or tax purposes will be kept, and the store will tell you what that is.
Marketing — unsubscribe from any email using the link in it, or ask and the preference will be switched off.
Objecting to processing, restricting it, or complaining to a regulator — contact the address below.

Order and download records are tied to the purchasing account and are needed to deliver what was paid for. They are not deleted on request while an order remains open or within the accounting retention period.

Security

Data is sent over HTTPS. Passwords are stored hashed, never in plain text. Downloads are not public URLs: a download address is checked against the signed-in session and the order before any file is served, and the number of times a file can be fetched is recorded. Access to order data is limited to what support needs to resolve an issue.

No system is perfectly secure. If a breach affecting your data is confirmed, the store will investigate and will notify affected people and the relevant authority as required.

Children

This store is not directed at children, and accounts are not intended for anyone below the age at which they can contract where they live. Data collected from a child will be deleted on request once it is identified.

Changes to this policy

This policy may be updated when the store changes, or when the law does. The revision date at the top of this page always reflects the current version.

Contact

Privacy contact: [support@YOURDOMAIN]
Trading name: [LEGAL BUSINESS NAME]
Address: [BUSINESS ADDRESS]