Privacy Policy

UniteElements is a digital software business operated by Jyotirmay Ray, an individual operating from Bhubaneswar, Odisha, India. We design and sell WordPress themes, plugins, website bundles, and SaaS tools through our website at uniteelements.com.

This Privacy Policy explains how we handle personal data we collect from visitors and customers. By using our website or purchasing our products, you agree to the practices described in this policy.

For any privacy-related questions, contact us at:
Email: hello@uniteelements.com

We collect only the minimum information necessary to process your orders, deliver your products, and provide support. We do not collect any personal information beyond what WooCommerce requires for order processing.

When you make a purchase, we collect:

• Full name and billing address
• Email address (used to send order confirmation, license keys, and product downloads)
• Phone number (if provided during checkout)
• Payment information — processed securely by our payment gateway partners. We do not store any card or banking details on our servers
• Order history and purchased product details
• License keys issued to your account

When you browse our website, we automatically collect:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent, and navigation patterns
• Referral source (how you arrived at our website)

When you contact support, we collect:

• Your name and email address
• The content of your message or support ticket
• Order reference or license key (if relevant to your query)

We use your information strictly for the following purposes:

• Order processing: To fulfil your purchase, generate your license key, and deliver your digital products via email and your customer account
• Account management: To maintain your purchase history, allow re-downloads, and manage your active licenses
• Customer support: To respond to support requests submitted via email, WhatsApp, or our support ticket system
• Legal compliance: To comply with applicable laws in India including the Information Technology Act, 2000, and tax regulations requiring us to maintain transaction records
• Website improvement: Aggregated, anonymised analytics data helps us understand how visitors use our site and improve it
• Fraud prevention: To detect and prevent fraudulent transactions

We use the following trusted third-party services to operate our website and business. Each service has its own privacy policy and data practices:

Google Analytics — We use Google Analytics to understand website traffic and user behaviour. Google may collect your IP address and browsing activity on our site. You can opt out at tools.google.com/dlpage/gaoptout. Privacy policy: policies.google.com/privacy

Cloudflare — Our website is protected and accelerated by Cloudflare, which processes your IP address and request data to provide security (DDoS protection, firewall) and performance optimisation. Cloudflare’s data is processed in accordance with their privacy policy: cloudflare.com/privacypolicy

Facebook Pixel — We use Meta’s Facebook Pixel to measure the effectiveness of our marketing. The Pixel may collect browser and device data and link it to your Facebook profile if you are logged in. You can manage your ad preferences at facebook.com/ads/preferences.

Payment Processors — Payments are processed by our payment gateway partners. We do not receive or store your full card details. The payment processor’s privacy policy governs any data they collect.

WhatsApp Business — If you contact us via WhatsApp, your messages are handled under Meta’s WhatsApp Privacy Policy. We use WhatsApp solely for support communication and do not use it for marketing without your consent.

Our website uses cookies — small text files stored on your device — to function correctly and to provide you with a better experience. We use the following categories of cookies:

Strictly Necessary Cookies — Required for the website to function. These include your shopping cart session, login authentication, and security tokens. These cannot be disabled.

Analytics Cookies — Set by Google Analytics to collect anonymous data about how visitors use our website (pages visited, session duration, traffic sources). No personally identifiable information is included.

Marketing Cookies — Set by Facebook Pixel to measure advertisement performance and show relevant ads. These cookies may link browsing activity to your social media profile.

Performance & Security Cookies — Set by Cloudflare to protect our website from malicious traffic and improve load performance.

We take the security of your personal data seriously and implement the following measures:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using HTTPS
• Cloudflare Protection: Our website is protected by Cloudflare’s enterprise-grade DDoS mitigation, Web Application Firewall (WAF), and bot protection
• No Card Data Storage: We never store payment card details on our servers. All payment processing is handled by PCI-compliant payment gateways
• Access Control: Administrative access to customer data is strictly limited and protected by strong authentication
• Regular Updates: Our platform software (WordPress, WooCommerce, plugins) is kept updated to protect against known vulnerabilities

While we implement commercially reasonable security measures, no system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order records: Retained for a minimum of 7 years as required by Indian tax laws (GST records) and the Income Tax Act
• License records: Retained for the lifetime of your license to allow re-downloads and license validation
• Support communications: Retained for up to 2 years after your last interaction
• Analytics data: Retained per Google Analytics default retention settings (typically 26 months for aggregated data)
• Cookie data: Session cookies expire when you close your browser. Persistent cookies expire as defined by each service (typically 1–2 years)

When retention periods expire, your data is securely deleted or anonymised.

Regardless of your location, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of any inaccurate or incomplete personal data
• Right to Deletion: Request deletion of your personal data, subject to our legal retention obligations (e.g., tax records)
• Right to Withdraw Consent: Withdraw consent for analytics or marketing cookies at any time through your browser settings
• Right to Data Portability: Request your order and account data in a portable format
• Right to Object: Object to the processing of your data for marketing purposes

For EU/EEA residents: You have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at hello@uniteelements.com. We will respond within 30 days.

Our products and services are intended for use by developers, businesses, and adults aged 18 years and above. We do not knowingly collect personal information from anyone under the age of 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@uniteelements.com and we will delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the “Effective Date” at the top of this page
• Post a notice on our website for significant changes
• Notify existing customers via email for changes that materially affect their rights

Your continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

This policy is governed by the laws of India, including the Information Technology Act, 2000, and the rules framed thereunder.