Confidentiality policy

1. Responsible for the treatment

The person responsible for processing personal data collected on the site is:

Theme FullStack Ltd

203 TRIQ TAL-FRANCIZ, Apartment 2, IS-SWIEQI, SWQ2138, Malta

E-Mail: contact@themefullstack.com

2. Personal data collected

Depending on the functionalities used, Theme FullStack Ltd may collect the following personal data:

• name;
• first name;
• email address;
• billing address;
• countries;
• VAT number;
• telephone number;
• payment information and payment history;
• Shopify store URL;
• license data;
• exchanges with customer support;
• screenshots or information sent as part of the support;
• audience measurement, navigation and consent data when the tracers concerned are accepted.

3. Purposes and legal bases of the treatment

Personal data is processed for the following purposes:

• order management, payments and invoicing;
• management of the member area and the license manager;
• license verification and management;
• customer support management;
• sending emails related to the purchase and the follow-up of the customer relationship;
• affiliate program management;
• fraud prevention and payment security;
• compliance with legal, accounting and fiscal obligations;
• audience measurement, analytics, session replay, advertising and retargeting when consent is required and has been given;
• management of requests relating to the rights of the persons concerned.

Depending on the case, treatments are based on:

• the execution of a contract or pre-contractual measures;
• compliance with legal obligations;
• the legitimate interest of Theme FullStack Ltd;
• consent, when required.

4. Data recipients

Personal data is accessible, within the limits of their respective responsibilities, to authorized persons and services within Theme FullStack Ltd.

They may also be transmitted to service providers and subcontractors involved in the operation of the service, in particular:

• Stripe ;
• systeme.io ;
• Google Ads ;
• Meta Ads ;
• Tracklution ;
• PostHog ;
• gmail ;
• Supabase ;
• Shopify ;
• Vercel ;
• N8n.

Billing data may also be accessible to Theme FullStack Ltd accounting providers.

5. Transfers outside the European Union

Some service providers or subcontractors may be located outside the European Union or transfer certain personal data there.

In this case, Theme FullStack Ltd ensures that these transfers are supervised in accordance with the applicable regulations, in particular on the basis of an adequacy decision by the European Commission or appropriate guarantees such as standard contractual clauses when necessary.

6. Shelf life

Personal data is kept for the time necessary for the purposes for which they are processed.

Except for legal obligations or special need for longer storage:

• the data of prospects and persons without an active contractual relationship are kept for a maximum period of 36 months from the last contact;
• data related to the customer relationship is kept for the duration of the contractual relationship, then for a maximum period of 36 months from the end of this relationship, unless there is a longer legal obligation to keep it;
• data relating to invoicing and accounting or fiscal obligations are kept for the period legally required;
• the exchanges of support, license data and data associated with the account may be retained during the contractual relationship and then for a maximum period of 36 months, unless there is a legal or evidentiary need for longer retention;
• the data collected via trackers subject to consent are kept in accordance with the parameters of the tool concerned and the choices expressed by the user.

7. Rights of the persons concerned

In accordance with the applicable regulations, you have, depending on the case, the following rights:

• right of access;
• right to correction;
• right to erasure;
• right to the limitation of processing;
• right to object;
• right to data portability;
• right to withdraw your consent at any time when the treatment is based on it.

You can exercise these rights by writing to: contact@themefullstack.com

You also have the right to file a complaint with the competent supervisory authority.

8. Cookies and trackers

The site uses cookies and other trackers. Some are strictly necessary for the operation of the site, while others are only deposited or read with your consent, when required.

Consent management is provided via Axeptio.

The tracers used can in particular make it possible to:

• audience measurement;
• navigation analysis;
• the replay session and the heatmaps;
• advertising and retargeting;
• conversion tracking with consent management.

‍