How We Handle Your Data

GplSale ("we", "our", "us") operates the website at gplsale.com (the "Site"), an online marketplace for GPL-licensed WordPress plugins and themes. We are committed to protecting your privacy and handling your personal data transparently and securely, in accordance with the applicable data protection laws including the General Data Protection Regulation (GDPR).

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have regarding your personal information. By using the Site, you agree to the practices described in this policy.

We collect the following categories of information:

• Account Information: When you register, we collect your name, email address, and a securely hashed password.
• Order & Billing Information: When you make a purchase, we collect your billing details, order history, plan selections, and payment references. All card and UPI payments are processed by our payment provider (PayU); we do not store your full card numbers or bank details on our servers.
• User Content: Information you submit through contact forms, support requests, reviews, and wishlists.
• Device & Usage Data: We automatically collect technical data such as your IP address, browser type, operating system, pages visited, referring URLs, and timestamps to operate and improve the Site.
• Cookies & Similar Technologies: We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Site is used.

We use the information we collect for the following purposes:

• To create and manage your account and verify your identity.
• To process orders, payments, subscriptions, and deliver products and download access.
• To send transactional messages such as order confirmations, download links, and account notifications.
• To provide customer support and respond to your enquiries.
• To improve, maintain, and secure the Site, including fraud prevention and abuse detection.
• To send promotional communications only where you have opted in, and to allow you to opt out at any time.
• To comply with legal obligations and enforce our Terms and Conditions.

Where the GDPR applies, we rely on the following legal bases to process your personal data:

• Performance of a Contract: To provide the products and services you have purchased.
• Legitimate Interests: To operate, secure, and improve our Site and services, provided your rights do not override our interests.
• Consent: For marketing communications, cookies that are not strictly necessary, and any other use where you have given clear consent. You may withdraw consent at any time.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes.

We use cookies and similar technologies to enhance your experience. These include strictly necessary cookies required for authentication and security, functional cookies that remember your preferences, and analytics cookies that help us understand how visitors use the Site so we can improve it.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Site, such as staying signed in or maintaining your shopping cart.

We do not sell, rent, or trade your personal information. We only share data with third parties where necessary to provide our services:

• Payment Processors: We share order and billing references with PayU and other payment gateways to process your payments securely.
• Service Providers: We work with trusted vendors for hosting, email delivery, analytics, and customer support, who process data on our behalf under strict confidentiality obligations.
• Legal & Safety: We may disclose information when required by law, regulation, or legal process, or to protect the rights, property, and safety of our users, ourselves, or others.

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations (such as tax and accounting records), to resolve disputes, and to enforce our agreements. When data is no longer required, we delete or anonymise it securely.

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Restriction: Ask us to limit how we process your data in certain circumstances.
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or to direct marketing.
• Right to Withdraw Consent: Withdraw any consent you have given at any time.

To exercise any of these rights, contact us at support@gplsale.com. We will respond within one month of receiving a verifiable request. You also have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), password hashing, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Your personal information may be processed in countries other than your own. Where we transfer data across borders, we take appropriate safeguards (such as standard contractual clauses) to ensure your data is protected to a level consistent with the GDPR.

The Site may contain links to third-party websites (for example, live product previews or plugin documentation). This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by email. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: