GDPR Policy

1. Introduction

Scriptwala ("we", "us", "our") operates https://scriptwala.com, a marketplace and storefront for scripts, software, themes, plugins, templates and related digital products. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable laws.

2. Personal Data We Collect

We may collect the following categories of personal data when you use our website or purchase products:

• Identity & contact: name, email address, billing/shipping address, phone number (when provided).
• Account credentials: username, hashed password, account preferences.
• Payment & transaction: transaction records, payment confirmations (note: payment card details are processed by third-party payment providers and are not stored on our servers unless explicitly stated).
• Technical data: IP address, browser type, device information, operating system, geolocation at a coarse level derived from IP.
• Usage data: pages visited, downloads, purchase history, and other analytics data about your interactions with the site.
• Support communications: correspondence you send to our support team (via support@scriptwala.com) and support ticket history.

We do not intentionally collect special categories of personal data (sensitive data) such as racial or ethnic origin, political opinions, religious beliefs, or biometric data.

3. Purposes & Lawful Bases for Processing

We process personal data for the following purposes and lawful bases:

• Order fulfilment / contract: processing purchases, delivering digital goods, and providing refunds (lawful basis: performance of a contract).
• Customer support: responding to inquiries and support requests (lawful basis: legitimate interests / performance of a contract).
• Security & fraud prevention: to detect and prevent fraudulent or illegal activity (lawful basis: legitimate interests).
• Analytics & improvements: to analyze use of our website and improve products and services (lawful basis: legitimate interests).
• Marketing & newsletters: with your consent, we may send promotional emails about our products and offers (lawful basis: consent — you may withdraw consent at any time).
• Legal compliance: to comply with tax, accounting, or other legal obligations (lawful basis: legal obligation).

4. Data Retention

We retain personal data only as long as necessary for the purposes described above and to meet legal, regulatory, tax or accounting requirements. Typical retention periods include:

• Account and order records: retained while your account is active and for a period required by tax and accounting laws.
• Support correspondence: retained for up to 12 months after resolution unless longer retention is necessary for legal reasons.
• Analytics and logs: retained for a limited period (typically months to a few years) in anonymized or aggregated form where possible.

5. Sharing & Disclosure

We do not sell personal data. We may share personal data with trusted third parties who perform services on our behalf under contract, including:

• Payment processors (e.g., Stripe, PayPal) for processing transactions.
• Hosting, backup and infrastructure providers.
• Email delivery and CRM providers for account and marketing communications.
• Analytics providers to help us understand site usage.

All third parties are required to implement appropriate technical and organizational measures to protect personal data and may only process data for the specific purposes we authorize.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the website, personalize content, and analyze traffic. You can control cookie settings via your browser; however disabling certain cookies may affect website functionality. For full details, consult our Cookie Policy (link or include a separate cookie policy page).

7. International Transfers

Your personal data may be processed in India and in other countries where our service providers operate. Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place (for example, appropriate contractual clauses or other GDPR-compliant mechanisms).

8. Your GDPR Rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your personal data where there is no lawful ground for continued processing.
• Restriction — request restriction of processing in certain circumstances.
• Data portability — receive your personal data in a commonly used, machine-readable format.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw consent at any time.

To exercise any of these rights, contact us at the address below. We will respond to your request without undue delay and in any event within one month of receipt. In complex cases or where requests are manifestly unfounded or excessive, we may extend the response period as permitted by law.

9. Data Security

We employ administrative, technical and physical safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Examples include SSL/TLS encryption in transit, access controls, regular software updates, and secure backups. While we strive to protect your personal data, no system can be guaranteed 100% secure.

10. Third-Party Links & Services

Our website may contain links to third-party websites and services that are not controlled by Scriptwala. We are not responsible for the content or privacy practices of those sites. Please review third-party privacy policies before submitting personal data to them.

11. Contact & Complaints

If you have questions about this policy or wish to exercise your rights, please contact us:

Scriptwala — Data Protection Contact
Email: support@scriptwala.com
Website: https://scriptwala.com

You also have the right to lodge a complaint with a supervisory authority in your EU member state, the UK Information Commissioner's Office (ICO), or other relevant data protection authority.

12. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will publish the updated policy on this page with a revised Effective Date. We encourage you to review this page regularly.

© Scriptwala — Effective date: October 19, 2025. This policy is provided for informational purposes and does not constitute legal advice. For legal compliance tailored to your specific business structure and jurisdictions, consult a qualified data protection attorney.