Who is responsible for your data
Ombelo, of Indore, India, decides how the data described here is used, and is the controller for the purposes of data-protection law. For anything on this page, write to support@ombelo.co.
What we collect
When you order. Your name, email address and country, the products you bought, the amount, the time, and a payment reference from PayPal. Country is collected because tax rules depend on it. There is no shipping address because nothing is shipped.
Your account. An account is created at checkout so you can find your downloads again. It holds the same details plus your password, stored in a hashed form we cannot read.
When you write to us. The name, email, order number and message you put in the contact form, plus the IP address the message came from, which is kept so we can deal with abuse of the form.
When you review a product. The name you sign the review with, your email, and what you wrote. The name is shown publicly; the email is not.
Server logs. Our host records requests to the site — IP address, page, time, browser — as part of running a server safely.
How you use the shop. The Meta Pixel records the pages you view, what you add to your cart and what you buy, so we can measure our ads. Microsoft Clarity records how you move through our pages (scrolling, clicks, time spent) so we can make the shop easier to use. See Cookies below.
What we never collect
Card numbers, bank details and PayPal passwords never reach this site. Payment happens on PayPal’s own systems; we are told whether it succeeded and given a reference, and nothing more. No data broker is involved in this shop. The one advertising tool we use, the Meta Pixel, is described under Cookies.
Why we are allowed to hold it
- To perform our contract with you — taking the order, delivering the file, keeping your downloads available, answering support.
- To meet a legal obligation — tax and accounting records have to be kept for a set number of years, whatever either of us would prefer.
- Because we have a legitimate interest — keeping the site secure, preventing fraud and abuse, measuring our advertising, and defending a dispute or chargeback.
- Because you agreed — for anything optional, such as a newsletter if we ever run one. You can take that back at any time.
Cookies
This shop sets the cookies it needs to work:
- a cart cookie, so your cart survives a page reload;
- a session and login cookie once you sign in, so you stay signed in;
- a short-lived security token on forms, which is what stops someone else submitting them on your behalf.
We also use the Meta Pixel, from Meta, the company behind Facebook and Instagram. It sets advertising cookies so we can see which of our ads lead to visits and sales, and show our ads to people likely to be interested. It records the pages you view, what you add to your cart and what you buy (the products and the amount, never card details). If you type your email at checkout, a scrambled (hashed) copy may be sent so Meta can match the visit to an account. You can turn this off in your Facebook or Instagram ad settings, or block cookies in your browser. The shop works the same either way.
We also use Microsoft Clarity, from Microsoft. It sets cookies and records how visitors use our pages (where you scroll and click, how long you stay) as anonymous replays and heatmaps, so we can see what is unclear and fix it. It hides what you type into forms, and it is not used for advertising. You can block it by blocking cookies in your browser.
Who else sees your data
- PayPal — takes the payment and holds the payment data. Their privacy policy governs what they do with it.
- Gumroad — only if you bought through our Gumroad listing rather than here, in which case they are the seller of record for that transaction.
- Our host — stores the site and its database, and keeps server logs.
- Our email provider — sends your order and support emails.
- Meta — receives the page, cart and purchase data from the Meta Pixel described under Cookies, to measure and show our ads. Their privacy policy governs what they do with it.
- Microsoft — receives the usage data from Microsoft Clarity described under Cookies, to show us how the shop is used. Their privacy policy governs what they do with it.
The first four are used because the shop cannot run without them, and none of them is allowed to use your data for their own marketing. We do not sell, rent or trade personal data, and we never will.
Where your data is held
The site and its database are hosted in the region our host operates in, and our suppliers may process data outside your country. Where that happens, they are bound by standard contractual clauses or an equivalent safeguard.
How long we keep it
- Order and invoice records — for as long as tax law requires, currently eight years in our jurisdiction.
- Your account and downloads — until you ask us to close it.
- Contact-form messages — two years, so we can pick up an old thread.
- Reviews — until you ask for them to be removed.
- Server logs — as long as our host retains them, typically weeks rather than years.
Your rights
You can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, or stop using it in a particular way. You can object to processing we do on the basis of legitimate interest, and withdraw any consent you gave.
Ask by writing to support@ombelo.co from the address on your order. We reply within 30 days, and there is no charge. Two limits worth knowing: we cannot delete records we are legally required to keep, and deleting your account ends access to your downloads.
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the data-protection authority where you live.
Children
This shop is not aimed at children, and we do not knowingly hold data about anyone under 16. If a child has given us data, write to us and it will be deleted.
Security
The site runs over HTTPS, passwords are hashed, download links are signed so they cannot be guessed, and administrative access is limited to the people who need it. No system is perfect; if something goes wrong that puts your data at risk, we will tell you and the relevant authority as required.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. Material changes will be announced on the page rather than emailed, so it is worth a look if you are about to buy again after a long gap.
Contact
Email support@ombelo.co or use the contact form. A person reads it.