Empire Ecommerce ("we", "our", "us") is a digital preset store operating at empireecommerce.shop. We are the data controller responsible for your personal information when you visit our site or purchase our products.

Privacy contact: support@empireecommerce.shop

You give us directly:

• Account registration: Name, email address, encrypted password
• Purchase: Name, email, billing country. Payment card data handled entirely by Stripe — we never see it
• Support messages: Information you share when contacting us
• Newsletter: Email address, only if you choose to subscribe

Collected automatically:

• Technical data: IP address, browser type, device type
• Usage data: Pages visited, time on site, clicks, referral source
• Transaction data: Order IDs, amounts, timestamps — for fulfilment only

We do not sell your data to anyone. We work with these trusted providers who process data strictly on our behalf:

• Stripe Inc. — Processes your payment securely. They handle card data under their own privacy policy. We receive only a transaction reference, never your card details.
• Web hosting providers — Store our website and account data on secure servers under data processing agreements.
• Email service providers — Send order confirmations, download links, and (with consent) marketing emails.
• Google Analytics — Receives anonymised, aggregated usage data only. No personally identifiable data is shared.
• Legal authorities — Only when required by law or court order.

Our cookie banner lets you choose on first visit. Change preferences at any time.

• SSL/TLS encryption: All data encrypted via HTTPS
• PCI-DSS payment security: Card processing via Stripe at PCI-DSS Level 1 — we never handle card details
• Password hashing: Account passwords stored using bcrypt one-way hashing
• Access controls: Customer data accessible only by authorised personnel

If a data breach occurs affecting your rights, we will notify you and relevant authorities as required by law.

• Account data — While active; deleted within 30 days of closure
• Transaction records — 7 years (legal/accounting obligation)
• Download records — While account is active
• Support communications — Up to 3 years from last interaction
• Marketing opt-in — Until you unsubscribe; opt-out records kept to prevent re-contact

• Access: Request a copy of the personal data we hold
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restrict Processing: Ask us to temporarily stop processing
• Data Portability: Receive your data in a machine-readable format
• Object: Object to marketing or processing based on legitimate interests
• Withdraw Consent: Withdraw marketing consent at any time with no penalty
• Complain: Lodge a complaint with your local data protection authority

Some providers (such as Stripe and Google Analytics) may process your data outside your country. Where this occurs we ensure adequate protections via Standard Contractual Clauses or adequacy decisions. Contact support@empireecommerce.shop for details.

Our site is intended for adults and is not directed at anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us their information, email support@empireecommerce.shop immediately and we will delete it.

We may update this policy as our practices or legal requirements change. We will update the "Effective" date and notify registered customers by email where appropriate. Continued use of our site after any update constitutes acceptance.

• Email: support@empireecommerce.shop
• Response time: Within 5 business days for general queries; 30 days for formal requests
• Supervisory authority: You have the right to contact your local data protection authority if unsatisfied