1. Who We Are
Themezinho (“we”, “us”, “our”) operates the website themezinho.net and provides premium WordPress themes, HTML templates, and website services. Our registered address is Istanbul, Turkey. You can contact us at privacy@themezinho.net.
2. What Data We Collect
When you use our website or purchase a product, we collect:
- Account data — name, email address, and password when you register.
- Purchase data — billing name, address, and payment method details (processed securely by Stripe or PayPal; we never store full card numbers).
- Usage data — pages visited, time on site, browser type, and IP address, collected via Google Analytics.
- Support data — messages, attachments, and correspondence when you contact us.
- Cookie data — see our Cookie Policy for details.
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your orders and deliver purchased products.
- Send order confirmations, receipts, and download links.
- Provide customer support and respond to enquiries.
- Send you product updates and important account notifications (you can unsubscribe at any time).
- Improve our website and product catalogue based on aggregate usage patterns.
- Comply with legal and financial obligations.
4. Legal Basis for Processing
We process your data under the following legal bases:
- Contract performance — processing is necessary to fulfil your purchase and deliver digital products.
- Legitimate interests — fraud prevention, site security, and improving our services.
- Consent — for marketing emails and non-essential cookies, where we ask for your consent first.
- Legal obligation — retaining financial records as required by Turkish and EU tax law.
5. Who We Share Data With
We do not sell your personal data. We share it only with trusted third parties necessary to operate our business:
- Stripe / PayPal — payment processing.
- Google Analytics — anonymised usage statistics.
- Mailchimp / email provider — transactional and marketing emails.
- WooCommerce / WordPress — e-commerce and CMS platform.
6. Data Retention
We retain your account and order data for as long as your account is active and for 7 years afterward to comply with financial record-keeping obligations. You may request deletion of your data at any time; exceptions apply where retention is required by law.
7. Your Rights
Under GDPR and applicable Turkish privacy law, you have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data (“right to be forgotten”).
- Restrict or object to our processing of your data.
- Receive your data in a portable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email privacy@themezinho.net. We will respond within 30 days.
8. Security
We use SSL encryption, secure password hashing, and restrict access to personal data to authorised staff only. Payment data is processed directly by PCI-compliant payment providers and never stored on our servers.
9. Changes to This Policy
We may update this policy from time to time. We will notify registered users of significant changes by email. The “Last updated” date at the top of this page reflects the most recent revision.
