Privacy Policy
Last updated:
This policy explains what data WebTheme.shop collects, why we collect it, and what we do with it. We keep data to the minimum needed to run a digital store and process your order.
1. What we collect
- Order information — your name, email address, billing country, and the products you purchased
- Payment reference — the payment ID and status from Razorpay. We never receive or store your full card number, expiry date, CVV or UPI PIN
- Technical data — IP address, browser type, and pages visited, collected for security and fraud prevention
- Download records — which products you downloaded and when, used to enforce download limits and support requests
- Account data — if you create an account, your email and saved order history
2. How we use your data
- To process payments and deliver your digital products
- To send order confirmations and download links
- To provide support, refunds and license verification
- To detect and prevent fraud, spam and abuse
- To meet legal, tax and accounting obligations
3. Payment processing and international transfers
Payments are processed by Razorpay, an independent payment gateway. Your card and UPI details go directly to Razorpay’s PCI-DSS compliant servers and never touch our servers. Razorpay acts as an independent controller for the payment data it processes, and is subject to its own privacy policy.
Because we accept international payments, some transaction data — such as your IP address, country and card issuer country — may be processed by Razorpay and its partners in India and other jurisdictions, including the United States, Europe and Singapore. This is required to comply with anti-fraud, sanctions and financial regulations.
4. Data sharing
We do not sell your personal data. We share it only with:
- Razorpay — payment processing
- Brevo — transactional email delivery (order confirmations and download links)
- Our hosting provider — website hosting and security
- Law enforcement or regulators — where legally required
5. Data retention
We keep order and invoice records for as long as required by Indian tax and accounting law (typically 8 years). Download logs are retained to support license and refund requests. We delete any data we are no longer required to keep.
6. Your rights (GDPR / CCPA)
If you are in the EU, UK, California or another jurisdiction with data protection rights, you may request:
- Access to the personal data we hold about you
- Correction of inaccurate data
- Deletion of your data (where we are not required to retain it)
- Portability of your data
- Objection to, or restriction of, certain processing
To exercise any of these rights, email akshaysarwa@webtheme.shop. We respond within 30 days. You also have the right to complain to your local data protection authority.
7. Cookies
We use cookies strictly necessary to run the store — such as keeping you logged in, remembering your cart and your selected currency. We do not use advertising or cross-site tracking cookies.
8. Security
The site is served over HTTPS. Access to customer data is restricted to staff who need it, and all administrative access uses strong authentication. No system is perfectly secure, but we continuously work to protect your data.
9. Children’s privacy
Our store is not directed at anyone under 16, and we do not knowingly collect data from children.
10. Changes to this policy
We may update this policy from time to time. The date at the top always reflects the latest version, and material changes will be announced on the site.
11. Contact
For any privacy question or request, contact us at akshaysarwa@webtheme.shop.