Last updated: 16 August 2026
Online Store Kit (“we”, “us”) operates www.onlinestorekit.com. This policy explains what personal data we collect when you browse, purchase, or ask for support, and what we do with it. The short version: we collect only what running the store requires, and we never sell it.
The data controller is Walter D.T. Pinem (owner of Online Store Kit), Medan, Indonesia. Online Store Kit is a one-person business, so in practice one person handles every request made under this policy. Contact: [email protected]
What we collect
- Account details. Name, email address, and password hash when you register.
- Order details. Billing name, email, country, and the products you purchased, shared back to us by PayPal.
- License activations. The site URL a license key is activated on, so we can enforce site limits and deliver updates.
- Support messages. Whatever you write in the support and contact forms, including any diagnostic information you choose to send us.
- Basic logs. IP address and browser data in standard server logs, kept briefly for security.
We do not collect or store card numbers. We never see them.
How we use it, and on what basis
To deliver purchases and license keys, provide updates and support, send order receipts, and keep the site secure. Under the GDPR, our legal bases are performance of a contract with you (orders, licenses, updates, support), our legitimate interests (site security, fraud prevention, enforcing license terms), consent (marketing emails and non-essential analytics), and legal obligation (tax and accounting records).
We email marketing only if you opt in, and every such email has an unsubscribe link. We do not sell or rent personal data to anyone.
Cookies
We use cookies for the things that break without them: your cart, your login session, and fraud prevention during checkout. Analytics cookies, when used, are aggregate and anonymized. Blocking cookies in your browser keeps the site readable but disables cart and account features.
Payments and third parties
Payments are processed by PayPal, which collects your billing and payment details directly at checkout and processes them under its own privacy policy at https://www.paypal.com/legalhub/privacy-full. PayPal determines how it uses that data for its own compliance, fraud prevention, and legal purposes. Card numbers never touch our servers. PayPal passes back to us the limited order information we need to issue and support your license.
Two other services see limited data:
- Cloudflare Turnstile. Verifies form submissions are human, and sees your IP address and browser signals.
- Email delivery. Our transactional email provider processes your address to deliver receipts, license keys, and support replies.
Where your data goes
Online Store Kit is operated from Indonesia, and our servers and support inbox are accessed from there. If you are in the EU, the UK, or another region with data transfer rules, buying from us means your data is handled outside that region. We rely on the transfer being necessary to perform our contract with you, and we apply the same rights and standards described in this policy to everyone regardless of location.
Data retention
- Order and tax records: kept as long as tax law requires.
- Account data: kept until you delete your account or ask us to delete it.
- License activation records: kept while the license is active and for 12 months afterwards, so renewals and reinstallations work.
- Support threads: kept while your license is active so we have context when you return.
- Server logs: rotated within 30 days.
Your rights
You can request a copy of your data, correct it, ask us to delete it, object to processing, or withdraw consent for marketing at any time. We will respond within 30 days. The one exception is records we are legally required to keep for tax purposes.
EU and EEA visitors have these rights under the GDPR, including the right to complain to a supervisory authority. We honor the same rights for everyone, wherever you live.
Changes to this policy
If this policy changes, the updated version appears on this page with a new date at the top. Material changes affecting how we use your data will be announced by email to registered customers.
Contact
Privacy questions and requests: [email protected], or via https://www.onlinestorekit.com/contact-us/