Privacy Policy

This Privacy Policy explains how Theme Bullet website (“We”, “Us”, “Our”) collect, use, and protect your personal data in compliance with the privacy and data protection laws. Our website address is: https://themebullet.com. You can contact Theme Bullet via contact page here or via email support -at- themebullet -dot- com.

Data Use

Theme Bullet only uses your personal data where necessary, lawful, and relevant to the services we offer. This includes:

  • Providing our services – such as setting up and managing your account, processing payments, delivering digital downloads, and offering customer support.
  • Maintaining security and preventing fraud – to protect our website and services from misuse, detect and prevent fraudulent activity, and comply with security-related legal obligations.
  • Communicating with you – by sending essential emails relating to your account, order confirmations, service updates, or changes to our terms and policies.
  • Post-purchase support – to respond to queries, feedback, disputes, or issues relating to your order or our services.
  • Improving our website and services – by analysing usage data to understand how our services are used, helping us improve user experience, deliver updates, and develop new features.

Theme Bullet treats privacy very seriously and respects your privacy and comply with UK data protection law. ThemeBullet does not sell your personal data to any third parties.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

What personal data we collect and why we collect it

Purchase and Payments

When you purchase from us, we’ll ask you to provide information including your name, minimum billing address such as valid postcode and country, email address needed for deliver and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Set up your account for our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

We aim to keep the amount of collected data at the possible minimum. However while you visit our site, we’ll track:

  • Name or username
  • Email
  • Transaction amount
  • Transaction Date
  • Country and IP Location data for tax location data
  • Products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed
  • Location IP address: we’ll use this for purposes like estimating taxes and digital delivery only
  • We’ll also use cookies to keep track of cart contents while you’re browsing our site.
  • We DO NOT need your exact address, as only for the country evidence for the tax purposes. So we use IP and Country box for tax and legal audit purposes.

If you create an account, we will store your username, address, email which will be used for the orders fulfilling purposes.

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 6 years for tax and accounting purposes. This includes your name, email address and billing addresses.

We will also store comments or reviews, if you choose to leave them.

Questions & Answers Section and Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

If you upload images to the website, i.e. for your avatars, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

We do not sell your data to anyone. If you request a password reset, your IP address will be included in the reset email.

PayPal

We accept payments through PayPal. When processing payments, some of your data will be passed to PayPal, including information required to process or support the payment, such as the purchase total and billing information which are necessary for fulfilling transaction. Due to the  digital nature (downloadable product) Theme Bullet does not require physical address with the exception of the country which is required to comply with the financial laws. IP and country code is used for this purpose to determine buyers location. 

Please see the PayPal Privacy Policy for more details.

Wordfence

Theme Bullet uses the Wordfence security plugin, provided by Defiant, Inc., on our website to protect against malicious activities such as hacking, malware, and brute force attacks.

Wordfence may collect and process the following personal data to ensure website security:

  • IP Addresses: Used to detect and block malicious activities, such as brute force attacks, based on our legitimate interest in maintaining the security of our website and services (Article 6(1)(f) UK GDPR).
  • Cookies: Essential cookies (e.g., wfwaf-authcookie-(hash) for logged-in user access, wf_loginalerted_(hash) for admin login alerts, and wfCBLBypass for country blocking bypass) to enable security features. These cookies are necessary for the website’s functionality and security and cannot be disabled.

To comply with the UK & UE privacy laws, Theme Bullet disabled the Wordfence Real-Time Security Network feature to prevent the transfer of IP addresses to servers in the United States without your consent.

For more information on how Wordfence processes personal data, please review their Privacy Policy at https://www.wordfence.com/privacy-policy/.

hCaptcha

For website security reasons, our users and spam protection we use the hCaptcha service to protect forms on our website from spam and automated bots. hCaptcha provides a verification mechanism to distinguish between human users and bots.

We use the hCaptcha security service (hereinafter “hCaptcha”) on our website. This service is provided by Intuition Machines, Inc., a Delaware US Corporation (“IMI”). hCaptcha is used to check whether user actions on our online service (such as submitting a login or contact form) meet our security requirements. To do this, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, how long the visitor has been on the website or app, or mouse movements made by the user). The data collected during the analysis will be forwarded to IMI. hCaptcha analysis in the “invisible mode” may take place completely in the background. Website or app visitors are not advised that such an analysis is taking place if the user is not shown a challenge. Data processing is based on Art. 6(1)(b) of the GDPR: the processing of personal data is necessary for the performance of a contract to which the website visitor is party (for example, the website terms) or in order to take steps at the request of the website visitor prior to entering into a contract. Our online service (including our website, mobile apps, and any other apps or other forms of access offered by us) needs to ensure that it is interacting with a human, not a bot, and that activities performed by the user are not related to fraud or abuse. In addition, processing may also be based on Art. 6(1)(f) of the GDPR: our online service has a legitimate interest in protecting the service from abusive automated crawling, spam, and other forms of abuse that can harm our service or other users of our service. IMI acts as a “data processor” acting on behalf of its customers as defined under the GDPR, and a “service provider” for the purposes of the California Consumer Privacy Act (CCPA). For more information about hCaptcha’s privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Questions Categories