Privacy policy

Effective October 24, 2026. Last updated October 28, 2026.

Wow Themes ("we", "us") runs this website and sells software licenses. We are the controller of the personal data described here. Our address is 651 N Broad St, Suite 206, Middletown, Delaware 19709, United States, and you can reach us on support(at)wow-themes.com for anything to do with your privacy.

This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have wherever you live, including under the EU and UK GDPR and California privacy law.

What we collect

Account. Your name, email address and a hashed password. If you turn on two-factor sign-in or passkeys, we store what is needed to verify them.

Purchases. What you bought, the amounts, tax, your billing country and the dates. Your card details are entered on Stripe's page; we never see or store your card number. We keep Stripe's customer and payment reference numbers so we can match payments, refunds and renewals to your account.

Licenses and downloads. Your license key and its status; the websites you activate it on (their address and the version of our product and of the platform it runs on); when each site last checked for updates; and the IP address of license checks and downloads. We use this to apply the number of sites your plan allows, deliver updates and prevent abuse.

Support, contact messages, comments and reviews. Messages you send us, including through the contact form (with your name, email address and the IP address it was sent from), and reviews you write. A published review shows only your first name and the initial of your last name. If you leave a comment on a post or product, we keep the name and email address you give us (the email address is never shown publicly) and a scrambled, one-way code made from your IP address, which lets us spot repeat spam without storing the address itself. Comments are checked by us before they appear.

How you found us. If you arrive through a tracked marketing link, we remember which campaign it was (see the cookie policy). We do not do this if your browser sends Do Not Track or Global Privacy Control.

Technical data. Standard server logs (IP address, browser, pages requested) and error reports, used to run and secure the site.

We do not knowingly collect special-category data (such as health or political views), and we do not ask for it.

Why we use it, and our legal basis

Under the EU and UK GDPR we need a legal basis for each use of your data. These are ours:

What we do	Why	Legal basis
Create and run your account, take payment, issue and manage your license, and let you download and update what you bought	To provide the product you asked for	Contract
Keep purchase, refund and tax records	To meet accounting and tax laws	Legal obligation
Count the sites a license is used on, check for updates and detect license abuse	To enforce the terms of your plan and protect our work	Contract and legitimate interests (preventing misuse)
Answer support and contact messages, and send account emails such as verification, password reset, receipts and renewal reminders	To give you the service and support you paid for	Contract, or legitimate interests where you are not yet a customer
Publish reviews and comments you choose to submit	To share useful feedback with other visitors	Legitimate interests, and your choice to submit them
Spam and abuse protection, rate limiting, security logs and error monitoring	To keep the site working and safe	Legitimate interests
Measure which marketing links bring visitors and sales	To learn which of our campaigns work	Legitimate interests (a small first-party cookie, not set if you send Do Not Track or Global Privacy Control)
Respond to legal claims and lawful requests from authorities	To protect our rights and meet legal duties	Legal obligation and legitimate interests

Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object to that use at any time (see "Your rights"). Where we rely on consent, you can withdraw it at any time without affecting what happened before.

We do not send marketing email unless you ask us to. We do not make decisions about you by automated means that have legal or similarly significant effects.

Who we share it with

We share data only with the services that help us run the shop, each acting under its own privacy terms or a data processing agreement:

• Stripe: payments, subscriptions, tax calculation and fraud prevention.
• Our email delivery provider: sending license emails, support replies and account emails such as email verification and password reset.
• Our hosting and storage provider: running the website and storing files and backups.
• Cloudflare: the network that delivers this site and protects it from attacks. Your requests pass through it, and it may also run spam checks on forms (see the cookie policy).
• Sentry: error monitoring (technical data about faults; we keep Sentry's collection of personal data switched off).

We may also disclose data when the law requires it, or to protect our rights, our customers or the public. If our business is sold or merged, your data may transfer to the new owner, who must honor this policy.

We do not sell your data

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by California law and similar laws. We do not use advertising or tracking networks on this site.

How long we keep it

• Account data: until you close your account.
• Purchase and tax records: for as long as the law requires us to keep accounting records, generally up to seven years. If you close an account that has purchases, we anonymise it and keep only the financial record.
• Support and contact messages: while your account exists and for a limited period afterwards so we can answer follow-up questions.
• Comments: while they are published, or until you ask us to remove them.
• Server logs and error reports: a limited time, typically 30 to 90 days.
• Marketing attribution cookie: 90 days.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent where we rely on it. California residents also have the right to know what we collect and why, to delete and correct their information, to opt out of any sale or sharing (we do neither), and not to be treated worse for using these rights. We honor the Global Privacy Control signal.

You can see your data, download a copy and close your account yourself from Settings after signing in. For anything else, email support(at)wow-themes.com. We may need to confirm it is you before acting. We answer within 30 days (45 where the law allows, and we will tell you if we need longer). You can also use an authorised agent to make a request for you.

If you are in the EU, UK or a similar region and are unhappy with how we handled a request, you can complain to your local data protection authority. We would appreciate the chance to put it right first.

International transfers

We are based in the United States, and our providers may process data in other countries. Where data leaves the EU, UK or Switzerland, we rely on approved safeguards such as the European Commission's standard contractual clauses, or on the provider's certification under the EU-US Data Privacy Framework.

Security

We use encryption in transit, hashed passwords, optional two-factor and passkey sign-in, role-based access for our staff, and an audit log of sensitive staff actions. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Children

This site is not for people under 16, and we do not knowingly collect their data. If you believe a child has given us data, email support(at)wow-themes.com and we will delete it.

Changes

If we change this policy in a way that matters, we will update the date above and email account holders.

Wow Themes, 651 N Broad St, Suite 206, Middletown, Delaware 19709, United States, support(at)wow-themes.com