PRIVACY
POLICY

When you use SupplyPlug, we may collect the following types of information:

• Name and email address when you place an order or create an account
• Billing and payment details processed securely through Stripe
• Device and browser information for security and analytics purposes
• IP address and approximate location for fraud prevention
• Order history and product access records
• Communications you send to our support team

We use the information we collect to:

• Process your orders and deliver purchased digital products
• Send order confirmation and delivery emails
• Manage customer accounts when available
• Provide customer support and respond to enquiries
• Improve our website, products and user experience
• Detect and prevent fraud or unauthorised access
• Comply with applicable legal obligations

Payment transactions on SupplyPlug are processed by third-party providers such as Stripe. We do not store your full card details on our servers.

Stripe processes your payment information in accordance with their own privacy policy and security standards. We encourage you to review Stripe's Privacy Policy for details on how they handle your payment data.

If customer accounts are enabled on SupplyPlug, account data including your email address, name and order history will be stored securely. Account authentication will be handled via Supabase Auth. You may request deletion of your account data at any time by contacting us.

SupplyPlug may use cookies and similar technologies to improve your browsing experience, remember preferences, and analyse site traffic.

Essential cookies are required for the website to function correctly. Analytics and preference cookies are optional. You can control cookies through your browser settings, though disabling certain cookies may affect site functionality.

We may use analytics tools to understand how visitors use our website and to improve our products and services. Any analytics integrations will only collect aggregated, anonymised data where possible. We do not sell your personal data to advertisers.

Your data is stored securely on servers provided by our hosting and database providers. We use industry-standard security measures including encryption at rest and in transit. Data is retained only as long as necessary to fulfil the purposes described in this policy or as required by law.

We do not sell your personal data. We may share data only with:

• Payment processors (e.g. Stripe) to complete transactions
• Email delivery providers to send order confirmations and product access
• Analytics providers under data processing agreements
• Legal authorities where required by applicable law

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Restriction — request that we limit how we use your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain types of data processing

To exercise any of these rights, contact us through the Contact page.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or how we handle your data, please contact us through the Contact page .