Information We Collect
We collect only the minimum data required to operate our store safely and deliver your products. Below is a full breakdown of what we collect and why.
Personal Information
Provided by you when purchasing or contacting us:
Non-Personal Information
Collected automatically during site interaction:
Payment Data & Processors
We never store your payment credentials. All financial data is handled exclusively by certified third-party payment processors.
We do not store credit card numbers, bank account details, or any raw payment credentials in any form.
PayPal
International payments. Subject to PayPal's Privacy Policy.
iPaymu
Domestic Indonesia payments. Subject to iPaymu's Privacy Policy.
We receive only a transaction status (success/failed) and a transaction ID from payment processors — nothing more.
Download Logs & License Security
Because our products are digital, we log download activity to protect both our intellectual property and your legitimate ownership rights.
Download logs are recorded for license security and to protect both parties in the event of a dispute.
Data recorded at the time of each download:
These logs are used solely to: (1) verify product delivery if a claim arises, (2) detect license abuse, and (3) provide evidence in payment dispute proceedings. Logs are never sold or shared with third parties outside of formal dispute resolution.
How We Use Your Information
Every piece of data we hold serves a specific, lawful purpose. We do not use your data for anything beyond what is listed here.
Order Processing
Process and verify payments; generate and deliver your download link.
Customer Support
Respond to your questions, technical issues, and support requests.
Fraud Prevention
Detect and prevent fraudulent transactions and licence abuse.
Service Improvement
Analyse store performance and improve product quality anonymously.
Legal Compliance
Meet tax, accounting, and regulatory obligations under applicable law.
Dispute Resolution
Provide verifiable evidence when a payment dispute is formally opened.
We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
Cookies & Tracking Technologies
We use cookies and similar technologies for essential store functionality and anonymous performance analytics.
You may disable cookies via your browser settings. Note that some features — such as the shopping cart — may not function correctly without them. No consent is required for strictly essential cookies.
Third-Party Services
We work with a small number of trusted service providers. Each is bound by data protection obligations.
PayPal & iPaymu
Payment processing. Receive transaction status and ID only.
Google Analytics
Anonymous visitor analytics. No personally identifiable data shared.
Hosting Provider
Secure storage and delivery of digital files and order data.
All third parties are contractually required to protect your data and use it only for the agreed purpose. We do not authorise them to use your data for their own marketing.
Data Security
We implement industry-standard technical and organisational measures to keep your data safe.
SSL/TLS Encryption
All data in transit is encrypted using TLS 1.2 or higher.
Access Controls
Data access is restricted to authorised personnel on a need-to-know basis.
Activity Monitoring
Systems are monitored continuously for suspicious or anomalous activity.
Encrypted Log Storage
Download logs and transaction records are stored in encrypted form.
No online system can guarantee 100% security. In the event of a breach that materially affects your data, we will notify you in accordance with applicable data protection law.
Data Retention
We retain data only as long as necessary for its stated purpose or as required by law.
Transaction Data
Retained for 5 years to meet tax, accounting, and legal obligations under applicable commercial law.
Download Logs
Retained for 2 years for license verification and payment dispute evidence.
Contact & Email Data
Retained while your account is active or as long as needed to provide support. Deleted upon verified request.
Deletion Requests
Processed within 30 days of a verified request. Some data may be retained longer where a legal obligation to do so exists.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data. We honour all valid requests promptly.
Access
Request a copy of the personal data we hold about you.
Correction
Request that inaccurate or incomplete data be corrected.
Erasure
Request deletion of your data, subject to legal retention obligations.
Objection
Object to processing of your data for direct marketing purposes.
To exercise any of these rights, email us at admin@nazhak.com. We will respond within 30 days.
Children's Privacy
Our store is not directed at individuals under the age of 18.
We do not knowingly collect personal data from anyone under 18 years old. If you believe a minor has provided us with their data, please contact us immediately at admin@nazhak.com and we will delete it promptly.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law.
How We Notify You
Material changes will be communicated by email or via a prominent notice on our website prior to the change taking effect. Continued use of the store after the effective date constitutes acceptance of the updated policy.
Transparency. Trust. Digital Products.
This policy was last updated on July 28, 2026
Questions about this policy?
Contact us