Privacy Policy

1. Who we are

Nzi.codes ("we", "us", "our") is an independent software studio. We sell commercial software products — source code, templates, themes, plugins, starter kits and other downloadable assets — and provide custom development services. For data protection purposes we are the controller of the personal data described below. You can reach us through our contact page or at contact@nzi.codes.

2. Information you give us

Account and purchase data: your name, email address, billing country, and any company name or tax identifier you enter at checkout. Support data: the content of messages you send us by email or through the contact form. Marketing data: your email address, if you subscribe to our newsletter.

3. Information we collect automatically

When you use the site we record technical data such as your IP address, browser and device type, the pages you view and the page that referred you. When you download a purchased product we log the time, the file and the licence used, so that we can apply download limits and investigate abuse.

4. Payment information

Card payments are processed by Stripe. Card details are submitted directly to Stripe and are never stored on our servers. We receive only what we need to fulfil the order: the transaction reference, amount, currency, payment status, billing country, and the card brand and last four digits.

5. Why we use your data

To create and maintain your account and deliver the products you buy (performance of a contract). To provide support and respond to your messages (performance of a contract and our legitimate interest in helping customers). To take payment, prevent fraud and meet accounting and tax obligations (legal obligation and legitimate interest). To keep the service secure and working (legitimate interest). To send product updates and newsletters where you have subscribed (consent, which you can withdraw at any time).

6. Cookies and similar technologies

We use cookies that are necessary for the site to work — signing you in, keeping your cart, and protecting forms against cross-site request forgery. Any non-essential analytics or preference cookies are described in our Cookie Policy, which also explains how to control them.

7. Who we share data with

We do not sell personal data. We share it only with service providers that process it on our behalf under contract: Stripe for payments, our hosting and infrastructure providers for running the site, and our transactional email provider for account and order emails. We may also disclose data where the law requires it, or to establish or defend legal claims.

8. International transfers

Some of our processors operate outside your country. Where personal data is transferred out of the UK, EEA or Switzerland, we rely on transfer mechanisms recognised by the relevant regulator, such as Standard Contractual Clauses or an adequacy decision.

9. How long we keep data

Account and order records are kept for as long as your account is open and then for as long as tax and accounting rules require, typically seven years from the end of the relevant financial year. Support messages are kept for up to three years. Newsletter records are kept until you unsubscribe. Server and download logs are kept for up to twelve months.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent. To exercise any of these rights, email contact@nzi.codes. We will respond within one month. If you are unhappy with our response you may complain to your local data protection authority.

11. Marketing choices

Every marketing email includes an unsubscribe link, and unsubscribing takes effect immediately. Account, order and security emails are not marketing and are sent for as long as you hold an account.

12. Security

We use encryption in transit, access controls, least-privilege administrative accounts and regular dependency updates. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator where the law requires it.

13. Children

Our products and services are intended for professional use and are not directed at children under 16. We do not knowingly collect personal data from children.

14. Changes to this policy

We may update this policy as our products change. The date at the bottom of this page shows when it was last revised. If a change materially affects you, we will let you know by email or with a notice on the site.

15. Contact

Questions about this policy or how we handle your data: contact@nzi.codes.