Privacy Policy

Overview

At ArrowTwist, your privacy matters to us. This Privacy Policy explains how ArrowTwist ("we," "us," or "our") collects, uses, stores, shares, and protects your personal information when you visit https://arrowtwist.com (the "Site"), create an account, or purchase any of our Magento 2 extensions or Shopify apps.

By using our Site or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Site or services.

We may update this policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. For significant changes, we will notify you via email or a prominent notice on the Site. We encourage you to review this page periodically.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

When you create an account, make a purchase, or contact our support team, we may collect:

Full name
Email address
Billing and/or shipping address
Phone number
Company name (if applicable)
Support ticket content and communication history

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain technical information, including:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on each page
Referring URL (the page you came from)
Date and time of your visit
Cookie identifiers (see Section 5)

1.3 Information Related to Software Usage

If you install and use ArrowTwist Software (Magento 2 extensions or Shopify apps), the Software may automatically connect to ArrowTwist servers to:

Validate your license key and confirm an active subscription
Deliver important product notifications to your Magento or Shopify admin panel
Check for available software updates

In this process, we may collect your store's domain name, the extension name and version installed, your license key, and your platform version (e.g., Magento 2 version or Shopify plan). This information is used solely for license validation and product improvement purposes.

1.4 Payment Information

We do not store your credit card details or full payment information on our servers. All payment transactions are processed securely by trusted third-party payment providers. We only retain non-sensitive billing details (such as the last four digits of your card, billing name, and billing address) for order record-keeping purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Process and Fulfil Orders We use your name, email, and billing details to process your purchases, generate license certificates, and deliver your digital products.

2.2 To Provide Customer Support We use your contact information and communication history to respond to support requests, resolve technical issues, and follow up on open tickets.

2.3 To Manage Your Account We use your account information to authenticate you, allow access to your purchase history and downloads, and manage your license subscriptions.

2.4 To Send Transactional Communications We send order confirmations, download links, license details, renewal reminders, and important product notices to the email address you registered with. These communications are essential to our service and cannot be opted out of while you hold an active account.

2.5 To Send Marketing Communications With your consent, we may send you newsletters, product updates, promotional offers, and information about new extensions or features. You can unsubscribe from marketing emails at any time using the unsubscribe link in any email we send, or by contacting us directly.

2.6 To Improve Our Products and Services We use aggregated, anonymized usage data to understand how our Site and Software are used, identify areas for improvement, and develop new features.

2.7 To Prevent Fraud and Ensure Security We use technical and account data to detect, investigate, and prevent fraudulent activity, unauthorized access, and abuse of our platform.

2.8 To Comply with Legal Obligations We may use or disclose your information when required by applicable law, court order, or regulatory authority.

3. How We Share Your Information

ArrowTwist does not sell, rent, or trade your personal information to any third party.

We may share your information only in the following limited circumstances:

3.1 Trusted Service Providers We work with carefully selected third-party providers who assist us in operating our Site and delivering our services. These include payment processors, email delivery services, analytics providers, and hosting infrastructure. These providers are authorized to access your data only to the extent necessary to perform their specific functions and are contractually bound to keep your data confidential.

3.2 Legal Requirements We may disclose your information if we are required to do so by law, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users or the public.

3.3 Business Transfers In the event of a merger, acquisition, sale of assets, or similar transaction, your information may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change through a prominent notice on our Site or by email.

4. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Specifically:

Account data is retained for the lifetime of your account and for a reasonable period after account closure, to comply with legal and financial record-keeping obligations.
Order and transaction records are retained for a minimum of 5 years for accounting and tax compliance purposes.
Support communications are retained for 2 years after your last interaction.
Marketing preferences are retained until you withdraw consent or request deletion.

If you wish to request deletion of your data, please see Section 7 (Your Rights).

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Site, remember your preferences, and gather usage analytics.

5.1 What Are Cookies?

A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to recognize your device and remember information about your visit, such as your login status and shopping cart contents.

5.2 Types of Cookies We Use

Essential Cookies These cookies are required for the Site to function correctly. They enable core features such as user authentication, session management, shopping cart functionality, and security protections (e.g., CSRF protection). You cannot opt out of essential cookies while using the Site.

Cookie Name	Purpose	Duration
`PHPSESSID`	User session identifier	Session
`persistent_shopping_cart`	Saves your shopping cart contents	365 days
`store`	Remembers your selected store view or language	365 days
`form_key`	CSRF security token for form submissions	30 days
`mage-cache-storage`	Local storage for visitor-specific content	1 day
`private_content_version`	Prevents caching of customer-specific pages	1 day
`mage-messages`	Stores site notifications shown to users	Session

Analytics Cookies These cookies help us understand how visitors interact with our Site. The data collected is aggregated and anonymous — no individual visitors are personally identified.

Cookie Name	Purpose	Duration
`_ga`	Google Analytics — distinguishes unique users	700 days
`_gid`	Google Analytics — stores session information	1 day
`_gat`	Google Analytics — throttles request rate	1 minute

Marketing & Functional Cookies These cookies track browsing behaviour to help us deliver a more relevant experience and measure the effectiveness of our communications.

Cookie Name	Purpose	Duration
`recently_viewed_product`	Saves recently viewed product IDs for quick navigation	1 day
`recently_compared_product`	Saves recently compared product IDs	1 day

5.3 Managing Your Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when cookies are being placed. Please note that disabling certain cookies may affect the functionality of our Site.

You can also opt out of Google Analytics tracking by using the Google Analytics Opt-Out Browser Add-on.

6. Third-Party Links & Integrations

Our Site may contain links to third-party websites, resources, or platforms (such as Magento's Marketplace or the Shopify App Store). This Privacy Policy applies only to our Site and services. We have no control over and are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any external site you visit.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information. ArrowTwist is committed to honoring these rights globally, regardless of where you are located.

7.1 Right to Access You have the right to request a copy of the personal information we hold about you.

7.2 Right to Rectification You have the right to request correction of any inaccurate or incomplete personal information we hold about you. You can update most of your information directly by logging into your account under My Account.

7.3 Right to Erasure ("Right to be Forgotten") You have the right to request deletion of your personal information, subject to our legal obligations to retain certain records (e.g., financial transaction records).

7.4 Right to Restrict Processing You have the right to request that we limit how we use your personal data in certain circumstances.

7.5 Right to Data Portability You have the right to request a machine-readable copy of the personal data you have provided to us.

7.6 Right to Object You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can exercise this right by clicking the "unsubscribe" link in any of our marketing emails or by contacting us.

7.7 Right to Withdraw Consent Where we process your data based on your consent (e.g., for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected]. We will respond to all valid requests within 30 days.

8. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

SSL/TLS encryption for all data transmitted to and from our Site (HTTPS)
Encrypted storage of sensitive data
Restricted access to personal data by authorized personnel only
Regular security assessments and monitoring
Secure, PCI-compliant payment processing via trusted third-party providers

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to responding promptly to any breach in accordance with applicable laws.

9. Children's Privacy

Our Site and services are intended for use by adults and business entities. We do not knowingly collect personal information from individuals under the age of 16. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected] and we will take prompt steps to delete such information.

10. International Data Transfers

ArrowTwist serves customers globally. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, or processed in a country whose data protection laws may differ from those in your home country. By using our Site, you consent to the transfer of your information to our servers and those of our service providers in accordance with this Privacy Policy.

We take appropriate steps to ensure that any international transfers of personal data are carried out in compliance with applicable data protection laws, including by using standard contractual clauses where required.

11. GDPR Notice for European Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional information applies to you under the General Data Protection Regulation (GDPR) and equivalent laws.

Legal Basis for Processing We process your personal data on the following legal bases:

Contract performance — to fulfil orders and provide our services to you.
Legitimate interests — to improve our products, prevent fraud, and maintain the security of our platform.
Legal obligation — to comply with applicable laws and regulations.
Consent — for marketing communications and optional analytics cookies.

Data Controller ArrowTwist acts as the Data Controller for personal data collected through the Site.

Right to Lodge a Complaint If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, disclose, and sell.
The right to request deletion of your personal information.
The right to opt out of the sale of your personal information. ArrowTwist does not sell personal information.
The right to non-discrimination for exercising your privacy rights.

To exercise your CCPA rights, please contact us at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice on the Site.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ArrowTwist Website: https://arrowtwist.com Privacy Enquiries: [email protected] General Support: [email protected] Support Portal: https://arrowtwist.com/support

We aim to respond to all privacy-related enquiries within 30 days of receipt.