Privacy policy
What we collect, why, and your choices.
Last updated: [DATE OF PUBLICATION]
1. Controller
Hamid Mustafa (sole proprietor), Lahore, Punjab, Pakistan. Privacy questions: support@theorbital.shop.
2. What we collect
- Account: name, email and profile picture from Google sign-in.
- Orders: what you bought, when, and order totals. Card details are handled by our merchant of record (Creem) and never reach us.
- Licences: your licence status and the domain(s) where a theme is activated, plus the theme version reported during licence checks.
- Support: messages and attachments you send us.
- Newsletter: your email, only if you opt in, with the date of consent.
- Usage: privacy-friendly, aggregated analytics without advertising cookies.
3. Why
To deliver purchases and updates, verify licences, provide support, prevent fraud, meet legal and tax duties, and (with consent) send the newsletter.
4. Who we share with
Service providers that run the site for us: Creem (payments, tax, invoices), Cloudflare (hosting and file storage), Neon (database), and our email delivery provider. We do not sell personal data.
5. How long we keep it
Order and invoice records are kept as long as tax law requires. Account data is kept while your account exists. Newsletter data is deleted when you unsubscribe, apart from a suppression record.
6. Your rights
You can ask to access, correct, export or delete your data, and you can withdraw consent at any time. Email support@theorbital.shop.
7. International transfers
Our providers may process data outside your country, under appropriate safeguards.