Privacy Policy
Last updated:
Controller
Digital Atelier Development SRL, CUI 34136458, Trade Register J2015002098405, Bucharest, Romania, is the controller. Email us at privacy@journal-theme.com or use our contact form (opens in a new tab).
This notice covers our website, public OpenCart demos, customer portal, support desk and license API.
Data and purposes
| Purpose | Data and source | Legal basis |
|---|---|---|
| Accounts, downloads, updates and support | Name, email, password hash, two-factor data, tickets and attachments you provide | Contract; for a business, our legitimate interest in managing the account |
| Verify entitlements | Purchase codes, domains, purchase dates, support status and Envato username from you, Paddle and Envato | Contract; for a business, and to enforce licenses, our legitimate interest in protecting valid licenses |
| License checks and security | Purchase code, domain/address, software versions and server identifier from Journal; IP addresses, timestamps, browser and country in activity logs | Legitimate interest in verifying licensed use, preventing fraud and protecting our systems |
| Contact requests | Name, email, subject and message you provide | Steps you ask for before a purchase; otherwise our legitimate interest in answering you |
| Accounting and claims | Order, payment, refund and correspondence records | Legal obligation to keep accounting records; our legitimate interest in handling legal claims |
| Usage analytics | Page views, basic interactions, referrers, browser/device information, approximate country and technical session identifiers | Legitimate interest in understanding how our sites are used and improving them |
| Error monitoring | Error reports and associated technical context, such as the affected page and software information | Legitimate interest in finding and fixing faults |
| Public demos | Information you submit to try the demo | Legitimate interest in showing Journal’s features and running the demo |
Account/license details are required to create accounts and verify entitlement; contact/support details are needed to answer requests. Any optional tracking consent is not a condition of service.
Paddle collects payment information; we receive order contents, amounts, tax, currency, invoice number and payment/refund status, without full card details. Envato supplies purchase-verification information when you import licenses.
Recipients and transfers
Our support desk is operated internally. Hosting, email delivery and error monitoring use EU regions. We also use a provider for website security/content delivery. Necessary information may go to professional advisers or authorities where justified or required.
Paddle and Envato are independent controllers for their respective resale/marketplace activities; see Paddle’s notice (opens in a new tab) and Envato’s policy (opens in a new tab).
Our website-security provider and sales platforms may process information outside the EEA, including in the UK, US and Australia. The website-security provider’s processing terms include EU standard contractual clauses for transfers where required. Paddle’s and Envato’s notices explain their own international processing and protections. Contact us for details or copies of applicable safeguards.
Retention
You can request deletion of your personal data at any time using the contact details above. We honour valid requests, subject to limited records needed for a continuing license, legal obligations or specific legal claims.
Accounting records covered by Law 82/1991 Art. 25 must be retained for five years from 1 July following the relevant financial year. Account deletion does not make a license unowned or available to someone else.
Cookies, analytics and demos
Where enabled on our website, documentation, portal, support desk or demos, our self-hosted, cookieless analytics measures basic usage. Technical requests may include IP addresses and derived session identifiers; cookieless data is not necessarily anonymous. We do not use session replay.
Essential cookies maintain sessions and protect forms; preference storage remembers choices you request. Where required, we will ask for consent before using non-essential tracking.
Portal session and form-security cookies expire 30 minutes after your last activity. If you select “Remember me”, sign-in lasts 30 days from signing in, ending earlier if you sign out or change your password. Display preferences are remembered for 30 days after your last visit.
Removing cookies in your browser may prevent sign-in. Paddle checkout has its own privacy information and storage controls.
The public demos showcase Journal’s design and features. Information you enter may be stored in the demo. Use fictional data; do not enter real personal data, sensitive information or payment details. You may request removal through our privacy contact.
Troubleshooting
Temporary store/server access is used for requested troubleshooting. Revoke it afterwards and request removal of any stored credentials. Processing store-customer data on your behalf requires an appropriate data processing agreement.
Your rights
Subject to legal conditions, you have rights to access, correction, deletion, restriction and portability. You may object to legitimate-interest processing and withdraw consent without affecting earlier lawful processing.
Contact us using the details above. We respond within one month or explain a lawful extension. You may complain directly to ANSPDCP (opens in a new tab) or another competent supervisory authority.
Automatic license validation may limit Journal’s admin when the license or domain does not match your entitlement. Write to license@journal-theme.com for human review of an incorrect result.
We update this notice when practices change and provide further notice or consent where required.