Legal

Privacy Policy

Contact support if anything here is unclear.

Last updated: 3 August 2026

Immora Shop respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, how long we keep it, and the rights you have over it. It is written to align with the EU General Data Protection Regulation (GDPR).

1. Who is the controller

Immora Shop is the data controller for the personal data processed through this website. The controller can be reached at [email protected].

2. What we collect

We only collect what we need to run the shop and support the people who buy from it:

  • Contact details — the email address you supply at checkout or when writing to support, plus the content of your messages to us.
  • Order data — the product, quantity, price, payment reference, order status and delivery notes for each order you place.
  • Delivery data — whatever additional information a specific product requires in order to be fulfilled (for example, the identifier a licence key needs to be bound to). This is requested at the point of purchase and only for products that need it.
  • Technical data — standard server access logs (IP address, user agent, timestamp) generated automatically by the hosting infrastructure and used only for security, abuse-prevention and diagnostic purposes.

We do not collect payment card numbers, CVV codes or bank details. Card and crypto payments are handled by the payment providers listed below; they see the sensitive details, we do not.

3. Why we process it

The legal bases we rely on under GDPR Article 6 are:

  • Contract — to accept and fulfil your order, deliver the product, and provide support (Art. 6(1)(b)).
  • Legal obligation — to keep records required by tax, accounting and consumer-protection law (Art. 6(1)(c)).
  • Legitimate interest — to keep the site secure, prevent fraud and abuse, and defend against chargebacks (Art. 6(1)(f)).
  • Consent — where consent is explicitly requested (for example, for non-essential cookies), it can be withdrawn at any time (Art. 6(1)(a)).

4. Payment providers

Payments are processed by third-party providers. When you check out, the data required to complete the transaction is shared directly with them and is governed by their own privacy notices:

Additional providers may be added from time to time; this list is updated whenever that happens.

5. Cookies and local storage

The site uses first-party local storage to remember the contents of your cart between visits and to record your acknowledgement of the cookie banner. It does not use third-party advertising trackers, analytics beacons or profiling cookies.

6. Sharing your data

Your personal data is only shared with the processors necessary to run the shop — hosting, payment, email delivery — and with authorities where we are legally required to do so. We do not sell, rent or trade personal data to any third party.

7. International transfers

Some of the processors listed above may transfer data outside the European Economic Area. Where they do, they rely on the safeguards required by GDPR (Standard Contractual Clauses or an adequacy decision).

8. How long we keep it

Order and payment records are kept for as long as required by tax and accounting law in the operator's jurisdiction (typically up to ten years). Support correspondence is kept for as long as reasonably needed to resolve the matter and defend any subsequent dispute, and no longer than three years thereafter. Technical logs are rotated on a rolling basis measured in weeks.

9. Your rights

Under GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with your national supervisory authority. To exercise any of these, email [email protected] from the address the data is held under. We respond to verified requests within one month.

10. Changes to this policy

We may revise this policy from time to time. The current version is always the one published on this page, and the date at the top reflects the most recent revision.

11. Contact

For privacy questions, write to [email protected].