Privacy policy

Welcome to Ursus. We develop and sell Shopify themes and provide related documentation and support services to customers worldwide (the "Services").

The Services are owned and operated by Ursus Ecom, a company registered in Vietnam ("Ursus," "we," "us," or "our").

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website or documentation, contact us, request support, propose a partnership, or subscribe to our newsletter.

In this policy, "personal information" means information that identifies you or can reasonably be linked to you.

What's on this page

• What this policy does not cover
• Information you give us
• Cookies and analytics
• How we use your information
• Legal bases for processing
• Newsletter and unsubscribing
• How we share information
• International data transfers
• How long we keep information
• Security
• Your privacy rights
• Links to other sites
• Contact us

What this policy does not cover

Ursus sells Shopify themes. We are not a Shopify app, and we don't connect to your Shopify store or access your store's products, orders, customers, or admin data.

This policy also doesn't cover:

• Shopify stores built with an Ursus theme. If you're a shopper on such a store, that store's own privacy policy applies, not this policy.
• Your theme purchase records. Shopify processes theme purchases and holds the associated billing and licence records. Shopify's handling of that information is governed by Shopify's Privacy Policy.

Information you give us

We collect personal information when you choose to send it to us:

• Contact form: Your name, email address, and the content of your message.
• Partnership form: Your name, email address, company or business details, and information about the partnership you're proposing.
• Support tickets: Your name, email address, the store URL you're asking about, which theme you're using, and the content of your request, including any screenshots, recordings, or files you attach.
• Newsletter: Your email address, if you subscribe through our website.

You don't need an account to browse our website or documentation, and we don't ask you to create one.

A note about support attachments

Please avoid including personal information about your customers or other individuals in a support request unless it is necessary for us to assist you. Where possible, remove or obscure that information from screenshots, recordings, and files before sending them to us.

Cookies and analytics

When you visit our website or documentation, limited technical and usage information may be collected through cookies and similar technologies.

We use Google Analytics to understand how visitors use our sites and to help us maintain and improve them. Where required by law, we ask for your consent before using analytics cookies.

For more information about the cookies we use and how to manage your choices, see our Cookies Policy.

You can also learn more about how Google handles information in Google's Privacy Policy.

How we use your information

We use personal information:

• To answer your questions and resolve support requests
• To evaluate and respond to partnership enquiries
• To send our newsletter if you've subscribed
• To maintain, troubleshoot, secure, and improve our website, documentation, and themes
• To understand how visitors use our website and documentation
• To prevent fraud, misuse, and security incidents
• To comply with applicable legal, tax, and accounting requirements
• To establish, exercise, or defend legal claims and resolve disputes

We don't sell your personal information or use it to build advertising profiles.

Legal bases for processing

The legal basis we rely on depends on why we use your information and the law that applies. Where required, we may process personal information on the following bases:

• Consent: For example, when you subscribe to our newsletter or accept analytics cookies
• Contract or steps requested by you: Where processing is necessary to provide requested support or take steps in connection with our Services
• Legitimate interests: Where necessary to operate, secure, maintain, and improve our Services, provided those interests aren't overridden by your rights
• Legal obligations: Where we need to retain or disclose information to comply with applicable law
• Legal claims: Where processing is necessary to establish, exercise, or defend a legal claim

Newsletter and unsubscribing

If you subscribe to our newsletter, we'll use your email address to send updates about our themes and releases.

You can unsubscribe at any time using the link in any newsletter email or by emailing us at hello@ursus-e.com.

Unsubscribing stops marketing emails. It doesn't prevent us from replying to a support ticket or another message you've sent us.

How we share information

We share personal information only where reasonably necessary:

• With service providers that host our website and documentation, provide analytics, and operate our email, newsletter, and support tools
• With professional advisers where necessary for legal, accounting, or similar purposes
• With authorities or other parties where disclosure is required by law or necessary to establish, exercise, or defend a legal claim
• With another party when you ask us to or give us permission

Our service providers process information in connection with the services they provide to us and subject to their contractual and legal obligations.

We don't share personal information with advertising networks or data brokers.

International data transfers

Ursus operates from Vietnam, while some of our service providers may store or process personal information in other countries.

Where required by applicable law, we take appropriate steps to protect personal information transferred across borders.

You may contact us if you would like more information about how your personal information is protected.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected:

• Contact and support enquiries: For as long as needed to respond to and resolve the request, and for a reasonable period afterwards as a reference for related issues
• Partnership enquiries: For as long as the opportunity is under consideration and for a reasonable period afterwards
• Newsletter subscriptions: Until you unsubscribe or we discontinue the newsletter
• Analytics information: For as long as reasonably necessary for analytics and service-improvement purposes
• Legal, tax, and accounting records: For the period required by applicable law

When deciding how long to retain information, we consider why it was collected, whether we still need it, its nature and sensitivity, and any applicable legal requirements.

When we no longer need the information, we delete or anonymize it unless applicable law permits or requires us to keep it longer.

Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss.

However, no method of transmission over the internet or electronic storage is completely secure, so we can't guarantee absolute security.

If we become aware of a personal data breach, we will investigate and provide any notifications required by applicable law.

If you believe your information has been compromised through Ursus, contact us at hello@ursus-e.com.

Your privacy rights

Depending on where you live and subject to applicable law, you may have the right to:

• Ask whether we hold personal information about you
• Request access to or a copy of your information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information
• Ask us to restrict certain uses of your information
• Object to certain processing
• Withdraw your consent where we rely on it
• Ask for your information in a portable format
• Appeal a decision about your privacy request, where applicable

Withdrawing your consent doesn't affect processing that took place before you withdrew it.

We won't discriminate against you for exercising a privacy right provided by applicable law.

How to make a request

To exercise your rights, email hello@ursus-e.com. We may need to verify your identity before acting on your request.

If an authorized representative submits a request on your behalf, we may ask for evidence that they are authorized to act for you.

If you're not satisfied with our response, you may contact us again so we can review the matter. You may also have the right to complain to the relevant data-protection or privacy authority where you live or work.

Links to other sites

Our website and documentation may link to third-party sites, including Shopify and Google.

Those sites operate under their own privacy policies, and we're not responsible for their privacy practices. We encourage you to read their policies before submitting information to them.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices, Services, or legal obligations.

The "Last modified" date at the top shows when this policy was most recently revised. If we make a significant change, we'll make that clear on this page or provide another appropriate notice.

Contact us

If you have a question, privacy request, or complaint about how we handle personal information, contact:

Ursus Ecom

Email: hello@ursus-e.com

Viet Nam