Privacy Policy

This policy explains how CenoDigital Pvt Ltd ("we") uses your personal data when you visit or buy from Unboxd. We are the controller of your data. Contact us about privacy at [email protected].

What we collect

• Order details: your name, email address, billing country and postcode (and company name if you give one), what you bought, the price and the licence.
• Account details, if you create an account: your name, email address and a securely hashed password.
• Payment details are collected and processed by Stripe. We receive the payment result and limited details such as the card brand and last four digits, never your full card number.
• Download activity: when files from your order were downloaded, so we can support you and handle refunds fairly.
• Technical data: IP address and browser details in our server logs, used for security and to keep the site running.
• Messages you send us, such as support emails.

Why we use it

• To take your payment, deliver your files and send your order emails (to perform our contract with you).
• To give you access to My downloads if you have an account (contract).
• To keep records for tax and accounting (legal obligation).
• To prevent fraud and keep the store secure (our legitimate interests).
• To answer your questions and handle refunds (contract and legitimate interests).

We don't sell your data, and we don't send marketing emails unless you have asked to receive them.

Who we share it with

We use trusted providers who process data for us under contract, only for the purposes above:

• Stripe for payments.
• Resend for sending order and account emails.
• Contabo for storing product files (in the EU, Germany), and our hosting providers for running the store.

We may also share data where the law requires it, or to protect our rights in a dispute.

International transfers

We are based in Sri Lanka, and our providers may process data in other countries, including the EU and the US. Where data leaves the UK or the EU, we rely on safeguards such as adequacy decisions or standard contractual clauses.

How long we keep it

• Order records: for as long as the law requires us to keep tax and accounting records, typically up to 7 years.
• Accounts: until you ask us to delete your account, after which we keep only what we must keep for the reason above.
• Server logs: usually no longer than 90 days.

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to someone else. Email us and we will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You can also complain to your data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), in the EU the authority in your country, or in Sri Lanka the Data Protection Authority.

Cookies

We only use cookies the store needs to work. See our Cookie Policy.

Changes

If we change this policy, we will update the date at the top of this page.