Privacy Policy

Privacy Policy

Effective date: September 2, 2026
Last updated: September 2, 2026

This Privacy Policy explains what personal information Decorator Ops collects, why we collect it, who we share it with, and what control you have over it.

Decorator Ops (“Decorator Ops”, “we”, “us”, “our”) is a sole proprietorship operated by Adam Hollett in the United States. We sell WooCommerce plugins for apparel decorators, print shops, embroidery businesses and team-store operators through our website at decoratorops.com (the “Site”).

For the purposes of the EU and UK General Data Protection Regulation, Decorator Ops is the data controller for the information described in this policy. Our contact details are in the Contact us section at the end.

The short version

• We collect what we need to sell you a plugin, deliver it, license it and support it — mainly your name, email address, billing details and order history.
• We never see or store your full payment card number. Card data goes directly to our payment processors.
• We use analytics and advertising tools that set cookies and share limited information with Google and Meta. You can opt out — see Cookies and tracking and Your advertising choices.
• We do not sell your personal information for money. Our use of advertising tools may count as “sharing” under California law, and you can opt out of it.
• You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email us and we will action it.

1. Information we collect

1.1 Information you give us

• Account information. If you create an account, we collect your name, email address, username and password. Passwords are stored in hashed form and are not readable by us.
• Order and billing information. When you buy a plugin we collect your name, email address, billing address, the products purchased, order totals, currency, applicable tax, and your order and license history. We also record the payment method type and a transaction reference supplied by the payment processor.
• Support and correspondence. When you contact us through our contact form, our support page or by email, we collect your name, email address and whatever you choose to tell us. For technical support this often includes your order number, plugin version, WordPress and WooCommerce versions, site URL, error messages and log excerpts.
• Newsletter. If you subscribe, we collect your email address and the date and source of your subscription.

Please do not send us passwords, API keys, payment card details or your own customers’ personal data by email. If you need to share a database export or log file to resolve a support issue, ask us first and we will arrange a secure method.

1.2 Information collected automatically

• Log data. Our web server records your IP address, browser type and version, operating system, referring page, pages viewed, and the date and time of each request. This is standard server logging used for security, abuse prevention and troubleshooting.
• Cookies and similar technologies. Described in section 3.
• Analytics data. Google Analytics collects information about how you use the Site — pages visited, time on page, approximate location derived from IP address, device and browser characteristics, and how you arrived at the Site.
• Advertising data. The Meta Pixel and Google Ads tags record which pages you viewed and which actions you took (such as adding a product to your cart or completing a purchase), and associate that activity with your browser or with your Meta or Google account.
• Security and fraud signals. Failed login attempts, suspected fraudulent orders, and similar events are logged and retained.

1.3 Information we receive from third parties

• Payment processors. PayPal and WooPayments confirm to us whether a payment succeeded and pass back limited details such as the last four digits of a card, the card brand, the billing name and address, and a transaction identifier. They do not pass us your full card number, expiry date or security code.
• Fraud and risk screening. Our payment processors may return a risk assessment for an order.

1.4 Information our plugins may send from your website

Our plugins are installed on websites you control. Where a plugin needs to activate or validate a license, or check whether a newer version is available, it contacts our servers and transmits the information needed to answer that request. That may include:

• the license key in use;
• the domain name and site URL where the plugin is installed;
• the IP address the request is made from;
• the plugin version, and the WordPress, WooCommerce and PHP versions in use.

We use this only to confirm that a license is valid and to serve the correct update, and to enforce our license terms. We do not use it to build a profile of you, and we do not sell it.

Our plugins do not transmit your store’s orders, customer records, product catalogue or uploaded files to us. Those stay on your server. If you send us that information yourself while requesting support, we handle it as described in section 1.1 and delete it once the issue is resolved.

If you install our plugins on a website that serves other people, you are the controller of your own visitors’ and customers’ data, and you are responsible for your own privacy notice and lawful basis for processing.

2. How we use your information

We use personal information for the following purposes. Where the EU or UK GDPR applies to you, the lawful basis for each purpose is shown in brackets.

• To process your order, take payment, deliver your download and issue your license key. [Performance of a contract]
• To create and maintain your account and give you access to your purchases. [Performance of a contract]
• To provide support, answer questions and resolve technical issues. [Performance of a contract; legitimate interests in supporting our products]
• To send you transactional emails — order confirmations, receipts, download links, license notices and important product or security updates. [Performance of a contract; legitimate interests]
• To send you marketing emails, if you have subscribed. [Consent, which you may withdraw at any time]
• To validate licenses, deliver updates and enforce our license terms. [Performance of a contract; legitimate interests in protecting our products]
• To measure and improve the Site, understand which pages and products are useful, and fix problems. [Consent where required for analytics cookies; otherwise legitimate interests]
• To advertise our products and measure whether that advertising works. [Consent where required; otherwise legitimate interests]
• To prevent fraud, abuse and unauthorised access, and to keep the Site secure. [Legitimate interests; legal obligation]
• To keep accounting and tax records and to comply with our legal obligations. [Legal obligation]
• To establish, exercise or defend legal claims. [Legitimate interests; legal obligation]

We do not use your personal information to make decisions about you by automated means that produce legal or similarly significant effects.

3. Cookies and tracking technologies

Cookies are small files stored on your device. We and our providers use them, together with similar technologies such as pixels and local storage, in the following categories.

3.1 Strictly necessary

Required for the Site to function. These remember the contents of your cart, keep you logged in, secure form submissions, and record your cookie preferences. The Site cannot work properly without them, and they are not used for advertising.

3.2 Analytics

We use Google Analytics to understand how visitors use the Site. These cookies record pages viewed, session length, approximate location, and how you found us. Google processes this data on our behalf.

3.3 Advertising

We use the Meta Pixel and Google Ads conversion and remarketing tags. These record your activity on the Site and allow us to show you our ads on Meta and Google properties and on sites in their advertising networks, and to measure whether those ads lead to purchases. Meta and Google may combine this with information they already hold about you.

3.4 How to control cookies

• Where we display a cookie banner, you can accept or reject non-essential categories, and change your choice at any time using the cookie settings link.
• Your browser can block or delete cookies. Blocking strictly necessary cookies will break the cart and checkout.
• We honour the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of sale and sharing for the browser that sends it.
• See Your advertising choices for opt-outs specific to Google and Meta.

4. Who we share your information with

We do not sell your personal information for money. We share it only as described below.

4.1 Service providers

Service providers are permitted to use your information only to perform services for us, and are required to protect it.

4.2 Other disclosures

• Legal. Where we are required to by law, subpoena, court order or other legal process, or where disclosure is necessary to protect our rights, safety or property, or that of others.
• Business transfer. If Decorator Ops is sold, merged or its assets transferred, your information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
• With your direction. Where you ask us to share something.

5. How long we keep your information

• Order, invoice and tax records: at least seven years, to meet US tax and accounting requirements.
• Account records: for as long as your account is open, and then as needed to maintain your license and purchase history.
• License and update records: for the life of the license, plus a reasonable period afterwards.
• Support correspondence: up to three years after the issue is resolved, so we can recognise recurring problems.
• Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
• Server logs: typically 30 to 90 days.
• Analytics and advertising data: according to the retention settings of the relevant provider.

When information is no longer needed we delete it or anonymise it.

6. Security

We protect the Site with HTTPS encryption, restricted administrative access, strong authentication, and regular software updates. Digital product files are stored in an access-protected location and are served only to buyers through authenticated download links.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.

7. International transfers

We operate in the United States, and our providers may process data in the United States and elsewhere. If you are in the European Economic Area, the United Kingdom or Switzerland, your information will be transferred outside your country. Where required, our providers rely on transfer mechanisms approved under applicable law, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

8. Your privacy rights

8.1 Everyone

Whatever your location, you may ask us to:

• confirm what personal information we hold about you, and give you a copy;
• correct information that is wrong or out of date;
• delete information we no longer have a legal reason to keep;
• stop sending you marketing email — every marketing email also has an unsubscribe link;
• close your account.

Email us at the address in the Contact us section. We respond within 30 days, and will tell you if we need longer. We may need to verify your identity before acting, usually by confirming you control the email address on the account. We will not charge you or treat you differently for exercising these rights.

8.2 California residents (CCPA/CPRA)

In the 12 months before the date of this policy, we have collected the following categories of personal information:

We collect these from you directly, automatically as you use the Site, and from our payment processors and advertising and analytics providers. We use them for the purposes in section 2 and disclose them to the recipients in section 4.

We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. However, our use of the Meta Pixel and Google Ads tags may constitute “sharing” for cross-context behavioural advertising under California law.

As a California resident you have the right to know, delete, correct, opt out of sale and sharing, limit the use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA), and not be discriminated against for exercising any of these rights. You may use an authorised agent, who must provide written proof of your permission.

To opt out of sharing for advertising, use the cookie settings link on the Site, send a Global Privacy Control signal, or email us.

8.3 Other US state privacy laws

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky or Rhode Island, you have comparable rights to access, correct, delete and obtain a portable copy of your personal information, and to opt out of targeted advertising. You may also appeal a refused request by replying to our decision; if we deny your appeal you may contact your state attorney general.

8.4 EEA, UK and Switzerland (GDPR)

In addition to the rights in section 8.1, you have the right to restrict or object to processing, the right to data portability, and the right to withdraw consent at any time without affecting processing already carried out. Where we rely on legitimate interests, you may object and we will stop unless we have compelling grounds to continue.

You also have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to address your concern first.

9. Your advertising choices

• Google Analytics: install the Google Analytics Opt-out Browser Add-on.
• Google Ads: adjust your Google My Ad Center settings.
• Meta: adjust your ad preferences in your Facebook or Instagram account settings.
• Industry opt-outs: YourAdChoices (DAA) and NAI opt-out.
• Browser signals: enable Global Privacy Control in a supporting browser or extension.

Opting out stops personalised advertising. It does not stop you seeing ads.

10. Children’s privacy

The Site is a business-to-business store and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

11. Links to other websites

The Site links to third-party websites, including our payment processors, documentation resources and social profiles. We are not responsible for their content or privacy practices. Read their privacy policies before giving them your information.

12. Changes to this policy

We may update this policy as our products, providers or legal obligations change. The date at the top shows when it was last revised. If we make a material change we will give prominent notice on the Site and, where required, contact you directly. Continuing to use the Site after a change means you accept the updated policy.

13. Contact us

For any question about this policy, or to exercise any of your rights:

Decorator Ops
Adam Hollett, sole proprietor
United States
Email: [email protected]
Web: decoratorops.com/contact/

Please put “Privacy request” in the subject line so we can route it quickly.