Privacy Policy

Who is responsible for your data?

[Company name], located at [address], [postal code] [city], the Netherlands, registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number [Chamber of Commerce number], is the data controller for the processing of personal data as described in this privacy policy. You can reach us at support@myprestashopmodules.com.

Which data do we process?

Depending on how you use our website and services, we process the following data:

• Account data: name, email address, language preference and your password. Your password is only stored in encrypted (hashed) form.
• Order and billing data: company name, billing address, VAT number, Chamber of Commerce number (optional), the modules purchased and the amounts paid.
• Payment data: the selected payment method and the payment status. Full payment details, such as credit card or bank account numbers, are processed by our payment provider and are not stored by us.
• License data: license key, the domain name or domain names of the online store(s) on which a module is used, and the versions of the module and PrestaShop in use.
• Download and security data: IP address, date and time of logins and downloads, failed login attempts and technical data about your browser.
• Contact data: name, email address, phone number (optional) and the content of your message when you use the contact form.

Why do we use your data and on what legal basis?

We only process your data for the following purposes and on the legal basis stated for each:

• Performance of a contract (Article 6(1)(b) GDPR): creating and managing your account, processing your order, delivering modules via secure download links, managing licenses and providing updates and support.
• Legal obligation (Article 6(1)(c) GDPR): keeping our accounting records and retaining invoices in accordance with statutory tax retention requirements.
• Legitimate interest (Article 6(1)(f) GDPR): securing our website and download environment, preventing fraud, license abuse and unauthorized downloads, and protecting accounts against unauthorized access attempts.
• Answering enquiries (Article 6(1)(b) or (f) GDPR): handling messages you send us via the contact form or by email.
• Service emails (Article 6(1)(b) GDPR): order confirmations, invoices and important notices about your modules, such as security updates. We do not send newsletters or marketing emails without your explicit consent.

License verification by modules

To verify the validity of a license, a module may periodically send the domain name, the license key and the versions of the module and PrestaShop to our server. No data about your customers, orders or other content of your online store is ever transmitted.

Who do we share your data with?

We never sell your data. We only share data with parties that are necessary to provide our services. Where required, we have concluded a data processing agreement with these parties.

• Our hosting provider, for hosting the website and the download environment.
• Our payment provider [name of payment provider], for processing payments.
• Our email provider, for sending order confirmations, invoices and service emails.
• Our bookkeeper or accountant, for keeping our financial records.
• Government authorities, only when we are legally required to do so.

Transfers outside the European Economic Area

We aim to process your data within the European Economic Area (EEA). If a service provider processes data outside the EEA, this only takes place with appropriate safeguards, such as an adequacy decision or the Standard Contractual Clauses of the European Commission.

How long do we keep your data?

We do not keep your data longer than necessary. We apply the following retention periods:

• Account data: for as long as your account is active. After your account is closed, we delete this data within 30 days, except for data we are legally required to retain.
• Order and billing data: 7 years, in accordance with statutory tax retention requirements.
• License data: for as long as the license is valid and for as long as necessary to provide updates and support.
• Download and security logs: a maximum of 12 months.
• Messages via the contact form: a maximum of 12 months after your enquiry has been handled.
• Download links: these are unique and temporary, and expire automatically after use or when their validity period ends.

How do we protect your data?

We take appropriate technical and organizational measures to protect your data. The entire website is only accessible via a secure HTTPS connection, passwords are stored in encrypted form, forms are protected against CSRF attacks, the number of login attempts is limited and downloads are only available after logging in, via unique and temporary links. Should a data breach nevertheless occur, we will report it to the competent supervisory authority within 72 hours and inform you where required by law.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• The right of access to the data we process about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data, insofar as we are not legally required to retain it.
• The right to restriction of processing.
• The right to data portability in a common, machine-readable format.
• The right to object to processing based on our legitimate interest.
• The right to withdraw any consent given at any time.

Send your request to support@myprestashopmodules.com. We will respond within one month. To prevent misuse, we may ask you to confirm your identity, for example by sending the request from the email address linked to your account. We will never ask for a copy of your identity document.

Filing a complaint

Are you not satisfied with how we handle your data? Please contact us first so we can work together to find a solution. You also always have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), but you may also contact the supervisory authority in your own country of residence.

Automated decision-making

We do not make decisions based solely on automated processing that significantly affect you. However, to protect your account, it is temporarily locked after too many failed login attempts. This lock is lifted automatically.

Cookies

This website only uses functional cookies that are strictly necessary for the site to work correctly and securely, such as a session cookie to keep you logged in, a security token for forms, and cookies to remember your language preference and shopping cart. No consent is required for these cookies. No tracking, analytics or advertising cookies are placed. You can delete cookies via your browser settings, but logging in and placing orders may then no longer work. Videos on module pages are only loaded from YouTube (youtube-nocookie.com) after you click play; YouTube may then place its own cookies. Fonts are hosted on our own server, so no data is sent to Google when you visit the site.

Minors

Our services are aimed at businesses and online store owners. We do not knowingly process personal data of persons under the age of 16.

Changes to this privacy policy

We may amend this privacy policy, for example in response to changes in our services or in legislation. The most recent version is always available on this page. We will inform account holders of significant changes by email.

Contact

Do you have questions about this privacy policy or about how we process your data? Please contact us at support@myprestashopmodules.com.