1. Introduction

ThemeRex (website url address: https://themerex.net) values your business and trust. We are a Cyprus-based company, creating products to enhance your website building experience. Please read this Privacy Policy and provide consent to both documents to have permission to use our services.

2. Data Collected
Data Storage Location

We are a Cyprus-based company and operate web servers hosted in Germany. Our hosting provider Hetzner Online GmbH adheres to the EU/US “Privacy Shield”, ensuring that your data is securely stored and GDPR compliant. For more information on Hetzner Online GmbH privacy policy, please see here: Hetzner Data Privacy Policy

Registration Data

If you register on our website, we store your chosen username, your email address, and any additional personal information added to your user profile. You can view, edit, or delete your personal information at any time (except changing your username). Website administrators can also view and edit this information.

Purchase Data

To receive product support, you must have one or more Envato/ThemeREX purchase codes on our website. These purchase codes will be stored together with support expiration dates and your user data. This is required for us to provide you with downloads, product support, and other customer services.

Support Data

If you have registered on our website and have a valid support account, you can submit support tickets for assistance. Support form submissions are sent to our third-party Ticksy ticketing system. Only the data you explicitly provide is sent, and you are asked for consent each time you want to create a new support ticket. Ticksy adheres to the EU/US “Privacy Shield” and you can see their privacy policy here: Ticksy Privacy Policy.

Comments

When you leave comments on the website, we collect the data shown in the comments form, as well as the IP address and browser user agent string to help with spam detection.

Contact Form

Information submitted through the contact form on our site is sent to our company email, hosted by Zoho. Zoho adheres to the EU/US “Privacy Shield” policy and you can find more information about this here: Zoho Privacy Policy.

These submissions are only kept for customer service purposes; they are never used for marketing purposes or shared with third parties.

Google Analytics

We use Google Analytics on our site for anonymous reporting of site usage. No personalised data is stored. If you would like to opt out of Google Analytics monitoring your behaviour on our website, please use this link: Google Analytics Opt-out.

Cases for Using the Personal Data

We use your personal information in the following cases:

  • Verification/identification of the user during website usage;
  • Providing Technical Assistance;
  • Sending updates to our users with important information about news/changes;
  • Checking account activity to prevent fraudulent transactions and ensure the security
  • of our customers’ personal information;
  • Customising the website to make your experience more personal and engaging;
  • Ensuring overall performance and administrative functions run smoothly.
3. Embedded Content
Pages on this site may include embedded content, such as YouTube videos. Embedded content from other websites behaves exactly as if you visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website. Below is a list of the services we use:
Facebook
The Facebook page plugin is used to display our Facebook timeline on our site. Facebook has its own cookie and privacy policies over which we have no control. No cookies from Facebook are installed and your IP is not sent to a Facebook server until you consent to it. See their privacy policy here: Facebook Privacy Policy .
Twitter
We use the Twitter API to display our tweets timeline on our site. Twitter has its own cookie and privacy policies over which we have no control. Your IP is not sent to a Twitter server until you consent to it. See their privacy policy here: Twitter Privacy Policy .
YouTube
We use YouTube videos embedded on our site. YouTube has its own cookie and privacy policies over which we have no control. No cookies from YouTube are installed and your IP is not sent to a YouTube server until you consent to it. See their privacy policy here: YouTube Privacy Policy.
4. Cookies
This site uses cookies – small text files placed on your device to help the site provide a better user experience. Generally, cookies are used to retain user preferences, store information such as shopping carts, and provide anonymised tracking data to third-party applications like Google Analytics. Cookies primarily exist to enhance your browsing experience. However, you may prefer to disable cookies on this site and others. The most effective way to do this is by disabling cookies in your browser. We recommend consulting your browser’s help section.
Necessary Cookies (all site visitors)
  • cfduid: Used by our CDN CloudFlare to identify individual clients behind a shared IP address and apply security settings on a per-client basis. More information on privacy can be found here: CloudFlare Privacy Policy.
  • PHPSESSID: Used to identify your unique session on the website.
Necessary Cookies (Additional for Logged-in Customers)
  • wp-auth: Used by WordPress to authenticate logged-in visitors, password authentication, and user verification.
  • wordpress_logged_in_{hash}: Used by WordPress to authenticate logged-in visitors, password authentication, and user verification.
  • wordpress_test_cookie Used by WordPress to ensure cookies are functioning correctly.
  • wp-settings-[UID]: WordPress sets several wp-settings-[UID] cookies. The number at the end is your individual user ID from the users database table. This is used to customise your view of the admin interface, and possibly also the main site interface.
  • wp-settings-[UID]: WordPress also sets several wp-settings-{time}-[UID] cookies. The number at the end is your individual user ID from the users database table. This is used to customise your view of the admin interface, and possibly also the main site interface.
5. Who Has Access To Your Data
If you are not a registered client on our site, there is no personal information we can retain or view about you. If you are a client with a registered account, your personal information can be accessed by:
  • Our system administrators.
  • Our support team when they need to access client account information to provide assistance.
6. Third Party Access to Your Data
We do not share your data with third parties in a way that reveals any of your personal information such as email or name. The only exceptions are partners with whom we must share limited data to provide the services you expect from us. Please see below:
Envato Pty Ltd
To validate and retrieve your purchase information regarding licences for this theme, we send your provided tokens and purchase keys to Envato Pty Ltd and use their API response to register your validated support data. See the Envato privacy policy here: Envato Privacy Policy.
Ticksy
Ticksy provides the support ticketing platform we use to handle support requests. The data they receive is limited to what you explicitly provide and consent to when creating a support ticket. Ticksy adheres to the EU/US “Privacy Shield” and their privacy policy can be found here: Ticksy Privacy Policy.
7. How Long We Retain Your Data For

When you submit a support ticket or comment, its metadata is retained until (if) you request its removal. We use this data so that we can recognise you and approve your comments automatically rather than holding them for moderation.

If you register on our website, we also store the personal information you provide in your user profile. You can view, edit, or delete your personal information at any time (except for changing your username). Website administrators can also view and edit this information.

8. Security Measures

We use the SSL/HTTPS protocol throughout our site. This encrypts communications between users and servers so that personally identifiable information cannot be intercepted or accessed by unauthorised third parties.

In the event of a data breach, system administrators will immediately take all necessary steps to ensure system integrity, contact affected users, and attempt to reset passwords if required.

9. Your Data Rights
General Rights

If you have a registered account on this website or have left comments, you may request an exported file of the personal data we hold, including any additional data you have provided.

You may also request that we erase any personal data we have stored. This does not include data we are required to keep for administrative, legal, or security reasons. In short, we cannot erase data essential for you to remain an active customer (e.g. basic account information like an email address).
If you request that all your data be erased, we will no longer be able to provide support or other product-related services to you.

GDPR Rights

Your privacy is extremely important to us. In compliance with the GDPR, we aim to support the GDPR standard. ThemeREX permits residents of the European Union to use its service. Therefore, ThemeREX intends to comply with the European General Data Protection Regulation. For more details please see here: EU GDPR Information Portal.

10. Third Party Websites

ThemeREX may include links to third party websites on this site. These third party websites are not reviewed by ThemeREX for privacy or security compliance, and you release us from any liability regarding the conduct of these third party websites.
All social media sharing links, whether shown as text links or social media icons, do not connect you to any associated third parties unless you explicitly click on them.

Please note that this Privacy Policy, along with any other applicable policies and amendments, does not create enforceable rights for third parties nor require disclosure of any personal information relating to members of the Service or Site. ThemeREX accepts no responsibility for information collected or used by any advertiser or third party website. Please review the privacy policy and terms of service for each site you visit via third party links.

11. Release of Your Data for Legal Purposes

Occasionally, it may be necessary or appropriate for ThemeREX, for legal reasons, to disclose your information in response to a request from a government agency or private litigant. You agree that we may disclose your information to a third party when we believe in good faith that it is appropriate for purposes of civil action, criminal investigation, or other legal matters. If we receive a subpoena affecting your privacy, we may choose to notify you to allow you to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obliged to do either. We may also proactively report you and release your information to third parties where we consider it prudent for legal reasons, such as suspicion of fraudulent activity. You release us from any damages arising from or related to the release of your information to law enforcement agencies or private litigants.

Any disclosure of personal data for legal purposes will be conducted in compliance with the laws of your country of residence.