Privacy Policy
This Privacy Policy explains how omrbmn (operated by Omer Bumin, an individual seller based in Istanbul, Türkiye — "we", "us", "our") collects, uses, shares, and protects your personal data when you visit omrbmn.com and purchase our digital website templates. It also describes your rights and how to exercise them. If you have any questions, contact us at hello@omrbmn.com.
We are the "data controller" for the personal data described here. For card payments, our processor Dodo Payments acts as the merchant of record and is an independent controller for the payment itself (see §4).
1. What we collect
| Category | Examples | Why |
|---|---|---|
| Identifiers & contact | Email address (and name, if you provide it) | Deliver your download, send your receipt, provide support |
| Transaction data | Product purchased, amount, date, currency, payment reference / ID | Fulfil the order, keep tax & accounting records |
| Technical & usage | IP address, browser/device type, timestamps (standard server logs) | Security, fraud prevention, keeping the site working |
| Communications | Emails or messages you send us | Respond to and resolve your query |
We do not collect or store your card numbers or crypto-wallet keys. Card and wallet data are entered directly with our payment providers (see §4) and never reach our servers. We do not knowingly collect special-category (sensitive) data.
2. How we use your data
- To deliver your purchase (download link + licence) and send your receipt;
- To provide customer support and handle refunds or disputes;
- To keep records required by accounting and tax law;
- To protect the store against fraud, abuse, and security threats.
We do not use your data for advertising profiling, and we do not sell or rent it to anyone.
3. Legal bases (GDPR / UK GDPR)
Where these laws apply, we rely on:
- Contract — to deliver the product you bought and provide support;
- Legal obligation — to keep invoices and tax records;
- Legitimate interests — to run and secure the store, prevent fraud, and keep basic records (balanced against your rights);
- Consent — only where we specifically ask for it (you can withdraw it at any time).
4. Who we share data with
We share the minimum data necessary with the following service providers, each acting under its own privacy policy:
- Dodo Payments — card checkout and merchant of record. When you pay by card, Dodo processes the payment, handles applicable VAT/sales tax, and acts as seller of record.
- NOWPayments — processes cryptocurrency payments.
- Netlify — hosts the website and serves the site and downloadable files.
- Google (Gmail) — sends transactional emails (your download link and receipt).
- GoatCounter — privacy-friendly, cookieless web analytics (see §9).
We may also disclose data if required by law, to enforce our terms, or to protect our rights, safety, or property. We never sell your personal data.
5. International transfers
We operate from Türkiye, and our providers above may process data in the EU, UK, US, or elsewhere. Where data is transferred across borders, we rely on our providers' safeguards (such as Standard Contractual Clauses or equivalent) to protect it. By using the store, you understand your data may be processed outside your country.
6. How long we keep it
- Order & invoice records — retained for as long as required by tax and accounting law (in Türkiye, generally up to ~10 years), then deleted or anonymised.
- Support emails — kept while needed to resolve your query and a reasonable period afterward.
- Server logs — retained only for a short period for security and diagnostics.
7. Data security
Payments run over encrypted connections (HTTPS/TLS) and are handled by PCI-compliant providers; we never see full card data. Downloadable files are served from private storage and delivered only via time-limited, signed links. Access to order data is limited to what's needed to run the store. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.
8. Your rights
Depending on where you live (e.g. under GDPR/UK GDPR), you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data, or complete incomplete data;
- Erase your data ("right to be forgotten"), subject to records we must keep by law;
- Restrict or object to certain processing;
- Receive your data in a portable format;
- Withdraw consent where we relied on it.
To exercise any of these, email hello@omrbmn.com and we will respond within a reasonable time. You also have the right to lodge a complaint with your local data-protection authority.
9. Cookies & tracking
The store uses only what's essential to function; it does not use advertising or cross-site tracking cookies. Our payment providers may set their own cookies on their checkout pages during a purchase, under their own policies. We honour browser "Do Not Track" signals by not tracking you across sites in the first place.
For visitor statistics we use GoatCounter, a privacy-friendly analytics service: it sets no cookies, stores no personal data, and does not follow you across sites — it counts pageviews with anonymous aggregate data only (page visited, referrer, browser type, country). No consent banner is needed because there is nothing personal to consent to.
10. Children's privacy
The store is intended for adults and is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Third-party links
Our site or emails may link to third-party websites (e.g. payment pages). We are not responsible for their content or privacy practices; please review their policies.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows the current version; material changes will be reflected here.
Contact: hello@omrbmn.com · Omer Bumin, Istanbul, Türkiye