Privacy Policy

1. Data controller

Lacrim Group. Contact for data protection matters: .

2. Data we process

• Order data: name, email, billing address, country, company and VAT ID (if provided), purchased product, amount and payment status.
• Payment data: processed by Stripe. We only receive limited information (e.g. card brand and last 4 digits), never full card details.
• License data: license key, Shopify store domain (.myshopify.com and public domain), theme ID and version, IP address and time of license checks.
• Technical data: IP address and browser at checkout, download and access page use – for security and abuse prevention.

3. Purposes and legal bases

• Performance of the contract – order processing, delivery, issuing and verifying the license, support (Art. 6(1)(b) GDPR).
• Legal obligations – accounting and tax requirements (Art. 6(1)(c) GDPR).
• Legitimate interest – fraud prevention, preventing license misuse and system security (Art. 6(1)(f) GDPR).

4. Recipients

Data is shared only with providers required for the service: Stripe Payments Europe Ltd. (payments and invoices), our hosting provider and our email provider. We do not sell data or share it with third parties for marketing. This site uses no advertising or analytics cookies.

5. Retention

Order and invoice data is kept for the period required by accounting law (up to 10 years). License data is kept while the license is active. Detailed license check records are deleted automatically after 180 days.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. To exercise them, email us at the address above. You may lodge a complaint with your local data protection authority (in Bulgaria: www.cpdp.bg).

7. Cookies

We only use strictly necessary cookies (e.g. for the security of the admin area). Fonts are loaded from Google Fonts.

8. Changes

We may update this policy. The current version is always published on this page.