Privacy Policy | PouyaWeb Shop — GDPR-Compliant Store Privacy Notice

About this Notice

This Privacy Policy explains how PouyaWeb Shop (“we”, “us”, or “our”) collects and uses your personal data when you access and use our website at pouyaweb.shop, create an account, place orders, or download digital products. It also outlines your rights and how to contact us.

For information specifically about our use of cookies and similar technologies, please see our Cookie Policy.

Data Controller

The data controller responsible for your personal data on pouyaweb.shop is PouyaWeb Shop. If you have questions or requests about this Policy or your data, please contact us using the details in the Contact Us section below.

Personal Data We Collect

CategoryExamplesPurposeRetention
Contact & Identity Name, email address, billing details, messages sent via contact forms or order notes Responding to inquiries, processing orders, providing customer support 12–24 months after last interaction, unless required longer by law
Usage & Device IP address, device/browser type, pages visited, time on page, referring URLs Site security, performance, analytics and optimization of our store and content Up to 24 months (analytics data)
Account & Transactions User account data, login details (hashed), purchase history, digital downloads, license or order identifiers, invoices Account management, order fulfillment, securing access to downloads, billing, legal compliance Up to 6–10 years, primarily for tax and accounting obligations
Marketing Preferences Consent records, newsletter preferences, cookie choices Recording and respecting your consent status and communication preferences 12–24 months

Sources of Data

  • Directly from you (for example when you create an account, place an order, submit a form or contact us by email).
  • Automatically via cookies and similar technologies when you browse our shop (see Cookie Policy).
  • From service providers acting on our behalf (e.g., payment gateways, analytics tools, hosting providers, security services).

Legal Bases for Processing (GDPR)

  • Consent — for analytics and marketing cookies, and optional communications where you choose to opt in (Art. 6(1)(a)).
  • Contract — to process your orders, provide access to your account and digital downloads, and perform pre-contractual steps at your request (Art. 6(1)(b)).
  • Legitimate Interests — to secure our shop, prevent fraud, improve our services, and manage business operations, where these interests are balanced against your rights (Art. 6(1)(f)).
  • Legal Obligations — to meet accounting, tax and other regulatory requirements (Art. 6(1)(c)).

How We Use Personal Data

  • To operate, maintain and secure the PouyaWeb Shop website and user accounts.
  • To process your orders, deliver digital products, and manage licenses or downloads where applicable.
  • To respond to inquiries, provide technical or billing support, and communicate about your purchases.
  • To analyze how visitors use our shop so we can improve navigation, performance and content.
  • To personalize or measure marketing, where you have given consent to such activities.
  • To comply with legal obligations and enforce our terms, including preventing abuse or fraud.

Cookies, Analytics & Marketing

We use cookies and similar technologies as described in our Cookie Policy. On PouyaWeb Shop, we may use tools such as Google Analytics 4 to understand how our store is used, and Meta Pixel or similar technologies to measure and improve our advertising campaigns. These tools may set cookies in your browser. Where required by law, we will request your consent for non-essential cookies via a cookie banner or settings panel.

Sharing & International Transfers

We may share personal data with trusted service providers who help us operate our store, such as hosting providers, payment gateways, email delivery platforms, analytics providers and security tools. These parties only process data under our instructions and are bound by contractual obligations to protect your data.

Some of these providers may be located outside your country (including outside the European Economic Area). Where necessary, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect your data in line with applicable law.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Specific retention periods are indicated in the table above, but may be extended if we need the data for an ongoing dispute or investigation.

Your Rights

Depending on your location and applicable data protection laws, you may have the following rights:

  • Right of access — to obtain confirmation whether we process your data and receive a copy.
  • Right to rectification — to correct inaccurate or incomplete personal data.
  • Right to erasure — to request deletion of your personal data in certain circumstances.
  • Right to restriction — to request restriction of processing in specific situations.
  • Right to object — to object to processing based on legitimate interests or for direct marketing.
  • Right to data portability — to receive your data in a structured, commonly used format in certain cases.

Where processing is based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse or alteration. While no method of transmission or storage is completely secure, we continuously review and improve our safeguards to protect your information.

Children’s Privacy

Our shop and services are not directed to children under the age of 13 (or the age defined by local law). We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action, including deletion where required.

Contact Us

If you have any questions about this Privacy Policy, our data practices on pouyaweb.shop, or if you wish to exercise your privacy rights, please contact us via our contact page or using the contact information provided on the website.

Changes to this Policy

We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. When we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice where appropriate.

© 2025 PouyaWeb Shop. See also our Cookie Policy.