Skip to content
Cart 0

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains what personal information [LEGAL ENTITY NAME] (“we”, “us”, “our”) collects through getdigitalproducts.com, why we collect it, who we share it with, and the rights you have over it.

1. Information we collect

Information you give us

  • Order information — your name, email address, and billing details, including billing address and country where required for tax.
  • Account information — if you create an account, your username, email address, and password (stored only as a secure hash, never in readable form).
  • Communications — anything you send us by email or through a contact form, including the message itself.
  • Marketing preferences — your email address if you subscribe, and whether you have opted in or out.
  • Reviews — any review or rating you submit, and the name you choose to display with it.

Information collected automatically

  • Device and usage data — IP address, browser type, operating system, referring page, pages viewed, and the dates and times of your visits.
  • Cookies and similar technologies — see the Cookies section below.
  • Download activity — which files you download and how many times, so we can enforce download limits and help with support.

Information from third parties

Our payment processors confirm to us that a payment succeeded and pass us limited details such as the last four digits of your card, the card brand, and the billing name and address. We never receive or store your full card number or security code.

2. How we use your information

  • To process your order, deliver your files, and provide download links.
  • To send transactional email — receipts, download links, and order updates. These are not marketing and you cannot unsubscribe from them while an order is active.
  • To provide customer support and respond to your questions.
  • To maintain your account and purchase history.
  • To send marketing email, but only if you have opted in, and only until you opt out.
  • To detect, prevent, and investigate fraud, abuse, and security incidents.
  • To understand how the Site is used so we can improve it.
  • To comply with our legal, tax, and accounting obligations.

We do not use your personal information to make decisions about you by automated means that produce legal or similarly significant effects.

3. Payment processing

Payments are handled by Stripe and PayPal. When you pay, your card or account details go directly to them, not to us. Each acts as an independent controller of that data and handles it under its own privacy policy. Please read Stripe’s privacy policy and PayPal’s privacy policy.

4. Email

Transactional email is sent through [EMAIL SERVICE, e.g. Brevo / Resend / Postmark]. Marketing email, if you have opted in, is sent through [EMAIL MARKETING SERVICE, e.g. ConvertKit / MailerLite]. Every marketing email contains an unsubscribe link, and unsubscribing takes effect immediately. Unsubscribing from marketing does not stop receipts or download links for orders you have placed.

5. Cookies and analytics

We use cookies and similar technologies to keep your cart and session working, remember your preferences, and understand how the Site is used. Strictly necessary cookies are required for the Site to function — for example, to keep items in your cart through checkout — and cannot be switched off.

We use [ANALYTICS PROVIDER, e.g. Google Analytics 4] to measure traffic and usage. You can manage non-essential cookies at any time through the cookie banner or the preferences link in our footer, and through your browser settings.

6. Who we share information with

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, and only as needed to run the store:

  • Payment processing — Stripe, PayPal
  • Hosting — [HOSTING PROVIDER, e.g. Hostinger]
  • Email delivery — [EMAIL SERVICE]
  • Email marketing — [EMAIL MARKETING SERVICE]
  • Analytics — [ANALYTICS PROVIDER]

We may also disclose information if we are legally required to, to enforce our terms, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your information becomes subject to a different privacy policy.

7. How long we keep it

  • Order and transaction records — kept for [7] years, as required for tax and accounting.
  • Account data — kept while your account is open, and deleted on request.
  • Marketing data — kept until you unsubscribe, then suppressed so we do not email you again by mistake.
  • Support emails — kept for [2] years.
  • Analytics data — kept for the period set in our analytics account, currently [14] months.

8. Security

The Site is served over HTTPS, product files are stored so they cannot be reached by guessing a URL, and access to the admin is restricted and protected by two-factor authentication. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take these obligations seriously and will notify you and any regulator where the law requires it after a breach.

9. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we have collected, the categories of sources, the purposes, and the categories of third parties we disclose it to.
  • Access a copy of the specific pieces of personal information we hold about you.
  • Delete personal information we hold about you, subject to exceptions such as completing a transaction or meeting a legal obligation.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of personal information.
  • Limit the use of sensitive personal information.
  • Non-discrimination — we will not deny you goods, charge you a different price, or give you a lower quality of service for exercising these rights.

Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months, and we do not knowingly sell or share the personal information of anyone under 16.

To exercise any right, email [SUPPORT EMAIL] with the subject “Privacy Request”. We will verify your identity by asking you to confirm information we already hold, such as the email address used for an order, and we will respond within 45 days. An authorised agent may make a request on your behalf with written permission that we can verify.

10. Other US state privacy rights

If you live in a state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana — you have broadly similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising and sale. Use the same contact route above, and you may appeal a refused request by replying to our decision.

11. Children

The Site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us at [SUPPORT EMAIL] and we will delete it.

12. Visitors outside the United States

We operate from the United States, and your information will be processed there. Privacy laws in the US may differ from those where you live. By using the Site you understand that your information will be transferred to and processed in the United States.

[IF YOU SELL TO THE EU OR UK, THIS SECTION NEEDS EXPANDING TO COVER LAWFUL BASES, INTERNATIONAL TRANSFER MECHANISMS, AND GDPR RIGHTS — TAKE ADVICE FIRST.]

13. Changes to this policy

We may update this policy. The “last updated” date above shows when it last changed, and material changes will be highlighted on the Site.

14. Contact

Privacy questions and requests: [SUPPORT EMAIL], or write to [LEGAL ENTITY NAME], [BUSINESS ADDRESS].