Privacy Policy

This Privacy Policy explains how we (“we”, “us”, “our”) collect, use, store and protect personal data when you visit this website (the “Website”), create an account, make a purchase, contact support or otherwise interact with our services. It also explains your privacy rights and how to exercise them.

For the processing described in this policy, the operator of the Website acts as the data controller, except where another party is identified as an independent controller. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, and other privacy laws that apply to our activities.

1. Scope and contact

This policy applies to the Website, its relevant subdomains, customer accounts, purchases and associated services. Services operated under separate privacy notices are governed by those notices.

For privacy questions, requests or complaints, use the contact form or support contact method made available on the Website. Please include “Privacy Request” in your message so that we can direct it appropriately.

2. What data we collect and why

We collect and process personal data as needed to operate the Website, provide services, manage purchases and customer relationships, protect our systems and meet legal obligations. The categories and lawful bases below apply where relevant to your interactions with us. We retain information only as long as reasonably necessary for the relevant purpose, subject to applicable legal requirements and the retention criteria described in section 7.

2.1 Account registration and login

Data: name, email address, username, cryptographically hashed password, IP address and registration or login details.
Purpose: to create, maintain and secure your account, authenticate access and make your purchases and downloads available.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR); legitimate interests in account and platform security (Art. 6(1)(f)).
Retention: generally while your account remains active, with limited additional retention where necessary for security, legal obligations or claims.

2.2 Orders, payments and invoicing

Data: contact and billing details, billing country, tax information when needed, products or plans purchased, transaction amounts and currencies, discounts, order dates, IP addresses and payment references.
Purpose: to process orders, provide purchases, issue invoices, administer refunds, detect fraud and comply with accounting and tax obligations.
Legal basis: performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); legitimate interests in fraud prevention (Art. 6(1)(f)).
Retention: transaction and invoice records are retained for the period required by applicable tax, accounting and other legal rules, and where necessary to resolve disputes.
Payment information: payments are handled by external payment service providers, currently Stripe for card payments and Paddle.com (acting as merchant of record) for PayPal and other alternative payment methods on digital downloads. We normally receive transaction status and references rather than full payment-card details. Payment providers may separately process payment information and carry out fraud checks under their own privacy notices.

2.3 Memberships and subscriptions

Data: plan or membership type, subscription status, start and renewal dates, billing history and subscription identifiers.
Purpose: to provide subscription access, manage renewals, process payments and support cancellation or changes to a plan.
Legal basis: performance of a contract (Art. 6(1)(b)).
Retention: for the subscription relationship and, where applicable, the periods described for transactions and legal obligations.

2.4 Product delivery and updates

Data: product entitlements, download activity, related timestamps and technical information such as IP addresses, and update-notification preferences.
Purpose: to deliver purchased products, maintain access, prevent misuse and provide relevant product updates.
Legal basis: performance of a contract (Art. 6(1)(b)); legitimate interests in service integrity and abuse prevention (Art. 6(1)(f)).
Retention: for as long as needed to provide entitlements, investigate misuse and meet legitimate operational or legal needs.

2.5 Customer support and contact

Data: your name, email address, message contents, attachments, related order details, support history and, where live chat is used, chat transcripts and relevant technical information.
Purpose: to answer enquiries, provide assistance, resolve complaints, investigate problems and manage refund requests.
Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b)); legitimate interests in providing customer service and resolving disputes (Art. 6(1)(f)).
Retention: for the time needed to resolve the enquiry and address follow-up questions, disputes or applicable legal obligations.

2.6 Email communication

Service emails: we send necessary account, order, payment, security and service notifications where required to provide the service or comply with the law.
Marketing emails: where permitted, we may send product announcements, offers and other marketing communications based on consent or a lawful existing-customer marketing exception. Any such exception is used only when its legal conditions are satisfied. You can unsubscribe from marketing at any time using the link in a marketing email or by contacting us. Unsubscribing from marketing does not stop essential service messages.
Data: contact details, communication preferences, consent or opt-out records, and email engagement data where lawful and applicable.
Legal basis: contract or legal obligations for essential messages; consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)), where permitted by applicable marketing law, for promotional communications.
Retention: while communications remain relevant and lawful; suppression records may be retained to ensure that opt-out requests are respected.

2.7 Affiliate programme

If you participate in an affiliate or referral programme, we may process your contact information, website or promotional channels, referral activity, payment details and commission records.
Purpose: to administer participation, attribute referrals, make payments, prevent abuse and meet accounting obligations.
Legal basis: performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); legitimate interests in fraud prevention (Art. 6(1)(f)).
Retention: for the duration of participation and as necessary for financial records, claims and other legal requirements.

2.8 Website operation, security and analytics

Data: IP address, browser and device details, operating system, language, referral source, pages viewed, timestamps, cookie identifiers where applicable and technical or security logs.
Purpose: to operate and secure the Website, diagnose issues, prevent attacks and abuse, understand usage and improve performance.
Legal basis: legitimate interests in operating and securing the Website (Art. 6(1)(f)); consent (Art. 6(1)(a)) for non-essential analytics or advertising technologies where required.
Retention: technical logs are retained for a limited operational or security period; analytics information is retained according to the purpose and relevant settings, with aggregation or anonymisation where appropriate.

2.9 Legal claims and compliance

We may use and preserve relevant information when necessary to satisfy lawful requests, comply with tax, accounting or consumer-protection rules, or establish, exercise or defend legal claims. The lawful basis is compliance with a legal obligation (Art. 6(1)(c)) or our legitimate interests in protecting legal rights (Art. 6(1)(f)), as appropriate.

3. Cookies, consent and tracking technologies

The Website may use cookies and similar technologies in the following categories:

Essential: support sign-in, shopping carts, security, payments and saved consent preferences. These are required for relevant features to function.
Preferences: remember choices such as language, currency or display preferences.
Statistics: measure how visitors use the Website and help us improve it.
Marketing: measure advertising performance and, where enabled, support personalised advertising.

Where applicable law requires consent, we request it before using non-essential cookies or similar tracking technologies. You may decline or withdraw consent using the cookie preference controls available on the Website. Withdrawal does not affect processing carried out lawfully before it.

Information about specific cookies, their purposes, providers and lifetimes should be available through the Website’s cookie notice or consent-management interface. Where enabled and legally permitted, advertising measurement may involve pseudonymised identifiers, including hashed contact details. Hashing does not necessarily make such data anonymous.

4. Who we share data with

We disclose personal information only where necessary for the purposes described in this policy or where legally required. Depending on the services used, recipients may include:

Payment providers: to process payments, refunds, subscriptions and fraud screening.
Hosting, cloud and delivery providers: to operate the Website, store data, deliver digital products and protect network traffic.
Email and communication providers: to deliver essential messages, permitted marketing and customer communications.
Customer-support providers: to manage enquiries, tickets and live chat.
Analytics and advertising providers: to measure use and campaigns, subject to consent and other applicable legal requirements.
Embedded-content providers: when external videos, fonts or similar content are loaded or used.
Professional advisers, regulators and public authorities: where disclosure is necessary and lawful.

Some recipients act as processors under appropriate agreements; others act as independent controllers and provide their own privacy notices. We may also transfer relevant information as part of a merger, acquisition or business reorganisation, subject to legal protections and notice requirements.

We do not sell personal data for money. Certain advertising disclosures may nevertheless count as a “sale” or “sharing” under some privacy laws; where applicable, we provide the required choice and opt-out mechanisms.

5. International transfers

Personal data may be processed in countries outside your own, including outside the European Economic Area or the United Kingdom, by providers supporting our services. Where applicable, we use lawful transfer mechanisms, such as an adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or UK addendum, and supplementary safeguards when necessary. You may contact us through the Website to request information about the safeguards relevant to your data.

6. How we protect your data

We implement technical and organisational measures appropriate to the nature of the data and the risks involved. These may include:

Encryption in transit through HTTPS/TLS.
Secure password hashing and controlled authentication processes.
Access restrictions for authorised personnel and additional account-security controls.
Security monitoring, software maintenance, vulnerability management and protective infrastructure.
Backups, incident-response procedures and confidentiality obligations where appropriate.
Contractual privacy and security safeguards for service providers that process data on our behalf.

No online system can be guaranteed to be completely secure. Where a personal-data breach triggers notification duties, we will notify the relevant supervisory authority and affected individuals in accordance with applicable law, including GDPR notification deadlines where applicable.

7. How long we keep data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law. Relevant criteria include the duration of your account or service relationship, the need to provide access to purchases, security and abuse-prevention requirements, the applicable statutory periods for accounting and tax records, and the time limits for legal claims. We review information where appropriate and delete or anonymise it when it is no longer required. We may keep a limited record of opt-outs or privacy requests to honour and document them.

8. Your rights

Depending on the law applicable to you, you may have the following rights:

Access: request confirmation of processing and a copy of your personal data.
Rectification: request correction of inaccurate or incomplete information.
Erasure: request deletion where the applicable legal conditions are met.
Restriction: ask us to limit processing in certain circumstances.
Portability: receive eligible information in a structured, commonly used, machine-readable format.
Objection: object to processing based on legitimate interests and object at any time to processing for direct marketing.
Withdrawal of consent: withdraw consent at any time without affecting earlier lawful processing.
Automated decisions: exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, use the contact or support channel on the Website and state that your message concerns privacy. We may need to verify your identity before fulfilling a request. Under the GDPR, we generally respond within one month, subject to permitted extensions and exceptions. Requests are generally free of charge, except in circumstances permitted by law.

You also have the right to complain to a competent data-protection supervisory authority, including an authority in the EU member state of your habitual residence, place of work or place of an alleged infringement, or the UK Information Commissioner’s Office where the UK GDPR applies.

9. California residents (CCPA/CPRA)

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing, California residents may have rights to know or access personal information, correct inaccuracies, request deletion, receive information about disclosed categories and exercise rights without unlawful discrimination or retaliation. Residents may also have rights to opt out of the sale or sharing of personal information and to limit certain uses of sensitive personal information, where relevant. We may collect identifiers, commercial or transaction records, internet activity, account-related details and affiliate payment information for the purposes described in section 2, and disclose relevant categories to the recipients described in section 4.

We do not sell personal information for monetary consideration. To the extent advertising technologies constitute “sharing” or “selling” under California law, applicable opt-out controls will be provided, including recognition of legally required opt-out preference signals where applicable. California privacy requests, including requests submitted by authorised agents, can be made through the Website’s contact or support channel. We verify and respond to requests as required by law.

10. Children

The Website and services are intended for adults and are not directed at children. We do not knowingly seek to collect personal data from children. If you believe a child has provided personal information to us without an appropriate lawful basis, contact us through the Website so that we can investigate and take appropriate action.

11. Third-party websites

The Website may link to websites and services operated by third parties, including product demonstrations and original software publishers. Those third parties control their own content and privacy practices. We encourage you to review their privacy notices before providing information to them.

12. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The revision date at the top indicates when it was last updated. Where required or appropriate, we will provide additional notice of material changes through the Website or customer communications.

13. Contact

For privacy-related questions, requests or complaints, please email [email protected] or use the contact form on the Website and mark your message “Privacy Request”. We will route it to the person responsible for handling data-protection enquiries.