1. Who We Are and the Scope of This Policy

TakeTheme is a SaaS platform for building online stores.

This policy applies to:

• Direct users of the Platform.
• Data of the Merchant's customers on stores built through the Platform (in which case the Merchant is the data controller and TakeTheme is a processor acting on their behalf).

2. Data We Collect

• Identity and contact: name, email address, phone, address.
• Account data: login details, settings, permissions.
• Payment and billing: processed through certified payment providers; we keep a transaction reference, not full card details.
• Usage and technical: IP address, browser/device type, log files, in-product events, cookie/SDK identifiers.
• Support and communications: support messages, reports, call/ticket records.

3. How We Collect Data

• Directly from you through forms and the dashboard.
• Automatically from your device/browser through cookies and similar technologies.
• From third parties when you use integrations (payments/support/analytics), subject to their terms.

4. Why We Process Data

• Operating, providing, and maintaining the Services.
• Managing subscriptions and billing, preventing fraud, and managing risk.
• Security, system protection, and improving performance and user experience.
• Operational communication (updates/maintenance) and permitted marketing communication, with the option to unsubscribe at any time.
• Compliance with legal obligations and requests from competent authorities.

5. Data Sharing (Categories of Recipients)

• Hosting and cloud infrastructure providers.
• Licensed payment gateway providers.
• Support, messaging, and ticketing service providers.
• Analytics, performance, and security tools.
• Official authorities where a legal obligation exists.

Sharing happens under appropriate contracts and suitable security and confidentiality standards. We do not sell your personal data.

6. Cross-Border Transfers

We may store or process your data outside your country for hosting or operational purposes.

We comply with local requirements in the countries where we operate, including Egypt and the Middle East, and apply appropriate safeguards for secure transfers.

7. Data Retention

We retain data for as long as necessary to fulfill the stated purposes, or as required for legal, tax, and dispute-resolution reasons, then delete or anonymize it according to our internal policies.

8. Security

We apply appropriate technical and organizational controls (encryption where needed, access control, audit logs, backups).

That said, no method of transfer or storage is 100% secure.

9. Your Rights

• Access and obtain a copy of your data.
• Correct and update your data.
• Object within the limits of applicable law.
• Request erasure/destruction when the data is no longer needed or a violation exists.

To exercise your rights, email Main@taketheme.com with identity verification details and the type of request, and we will respond within a reasonable timeframe.

10. Children

We do not target anyone under 18. If we learn of unintentional collection, we take steps to delete the data.

11. Changes to This Policy

We may update this policy and indicate the new effective date, with clear notice of material changes.