Legal
Privacy Policy
Last updated
This page states what data we collect, why we collect it, who processes it and what rights you have. We collect the minimum needed to sell you a file and deliver it.
What we collect
- Order data — name, email address, billing country and order contents. Collected at checkout because we need it to deliver files and to meet tax obligations.
- Account data — email address and order history, if you create an account.
- Support messages — anything you send us when you contact us.
- Technical data — IP address, browser type and pages visited, used for security, fraud prevention and aggregate traffic measurement.
What we never collect
Card numbers. Payment is handled entirely inside Shopify's PCI-compliant checkout, so full card details never reach this website or anyone at ResellersSupplyForge.
Who processes your data
- Shopify — store platform, checkout, customer accounts and order records.
- Payment providers — Shopify Payments, Stripe and PayPal, depending on the method you choose.
- Digital delivery and email — the app that issues download links and the service that sends your confirmation email.
Each is an independent processor with its own privacy terms. We do not sell your personal data, and we do not share it for advertising purposes beyond the aggregate conversion measurement described below.
Cookies and measurement
Essential cookies keep your cart and session working. Session cookies are HTTP-only and secure. If advertising or analytics measurement is enabled on this store, it is disclosed here and loaded only for that purpose; at the time of this update no third-party advertising or analytics scripts are active on the site.
How long we keep data
Order records are retained for as long as tax and accounting law requires, typically six to seven years depending on jurisdiction. Support messages are kept for two years. Account data is kept until you ask us to delete the account.
Your rights
Depending on where you live, you can request access to your data, correction, deletion, a copy in portable form, or that we stop processing it. Under GDPR and UK GDPR you may also complain to your supervisory authority. Under the CCPA you may request disclosure and deletion, and we do not sell personal information. Send any request through the contact page and we will respond within 30 days.
Security
The site is served over HTTPS only. Download links are signed and expire. Administrative access to the store requires two-factor authentication. We do not store payment data, and API credentials and webhook secrets are held server-side only.
Children
This store is not intended for anyone under 18, and we do not knowingly collect data from children.