Privacy Policy

How we collect, use, and protect your data

This Privacy Policy explains how Omnia Theme ("Omnia", "we", "us", or "our") collects, uses, stores, and protects personal information when you visit omniatheme.com, make a purchase, or use the Omnia admin panel. We are committed to protecting your privacy in full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Law Providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of Such Data of 2018 (Law 125(I)/2018) as applicable in Cyprus, and all other applicable data protection legislation.

1. Data controller

STAR & MOUNTAINS SERVICES LTD is the data controller responsible for your personal data. We are a limited liability company registered in Cyprus. For all privacy-related enquiries, please contact us at: support@omniatheme.com

2. Information we collect

Information you provide directly

• Full name and email address — collected at checkout and used to deliver your purchase, activate your licence, and provide ongoing support
• Payment information — processed by Stripe; Omnia does not store card or payment details on its own servers
• Shopify store domain — provided during admin panel onboarding to associate your licence with your store
• AI Store Builder questionnaire answers — the five answers you submit are processed in real time to generate your section recommendation.
• Support communications — any emails, messages, or other communications you send to our support or affiliate teams

Information collected automatically

• Website analytics — we use Plausible Analytics, a privacy-first analytics platform that operates without cookies and does not collect personally identifiable information
• IP address — collected by our hosting infrastructure for security, fraud prevention, and abuse monitoring purposes
• Device and browser information — collected in aggregate by Plausible for statistical reporting only; not used for individual profiling

3. How we use your information

• To process and fulfil your purchase and deliver your theme download link and licence key
• To create and manage your account within the Omnia admin panel
• To send transactional emails including purchase confirmation, licence key, download link, and update notifications
• To provide customer and technical support
• To send marketing communications where you have opted in — you may unsubscribe at any time via the link in any marketing email
• To operate the AI Store Builder — your questionnaire answers are transmitted to the Google Gemini API to generate a personalised recommendation. This processing is governed by Google's Privacy Policy in addition to our own
• To operate the affiliate programme and track commission-eligible referrals via Rewardful
• To comply with applicable legal and regulatory obligations including VAT, tax reporting, and data protection law
• To prevent fraud, abuse, and unauthorised access to our systems

4. Legal basis for processing (GDPR)

We process your personal data on the following legal bases as defined under Article 6 of the GDPR: performance of a contract — processing necessary to fulfil your purchase and deliver the Service; legitimate interests — fraud prevention, system security, and service improvement, where such interests are not overridden by your rights; consent — marketing communications, which you may withdraw at any time; and legal obligation — tax, accounting, and regulatory compliance requirements.

5. Data sharing and third-party processors

Omnia does not sell your personal data to any third party under any circumstances. We share personal data only with the following categories of authorised processors who assist us in operating the Service, each of whom is bound by appropriate data processing agreements:

• Stripe — payment processing and VAT compliance. Your payment data is governed by their respective privacy policies
• Google LLC (Gemini API) — processes AI Store Builder questionnaire answers to generate section recommendations. Governed by Google's Privacy Policy and Data Processing Terms
• Our hosting and infrastructure providers — for server operation, storage, and security

6. International data transfers

Some of our third-party processors are located outside the European Economic Area (EEA). Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. A list of our third-party processors and their locations is available on request.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfaction of any legal, tax, accounting, or regulatory requirements. Purchase and transaction records are retained for a minimum of seven (7) years in accordance with Cyprus and EU tax legislation. Where you request deletion of your account and there is no overriding legal basis for continued retention, we will delete or anonymise your personal data within thirty (30) days of receiving your request.

8. Your rights under the GDPR

As a data subject under the GDPR, you have the following rights which you may exercise at any time by contacting us at support@omniatheme.com:

• Right of access — to receive a copy of the personal data we hold about you
• Right to rectification — to have inaccurate or incomplete personal data corrected
• Right to erasure — to request deletion of your personal data where no overriding legal basis exists for its continued retention
• Right to restriction of processing — to limit how we process your personal data in certain circumstances
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing

We will respond to all valid requests within one (1) calendar month.

9. Cookies

Omnia Theme Ltd uses cookies in accordance with applicable data protection legislation and the operational requirements of the Shopify platform. As Omnia products are built on and integrated with Shopify, certain cookies are set and managed by Shopify as part of their standard platform infrastructure. These include cookies strictly necessary for storefront functionality, checkout processing, session management, and fraud prevention. The use of these cookies is governed by Shopify's own Privacy Policy and Cookie Policy in addition to this document.

In addition to Shopify platform cookies, the Omnia admin panel uses strictly necessary session cookies for authentication and secure account access. These cookies are essential for the operation of the Service and cannot be disabled without preventing access to your account.

By using the Service, including any Shopify store built using the Omnia theme, you consent to the use of cookies as described in this section. You may manage cookie preferences through your browser settings, however disabling certain cookies may affect the functionality of the Service and the Shopify storefront. For further information on Shopify's use of cookies, please refer to Shopify's Cookie Policy available at shopify.com/legal/cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we provide. Material changes will be communicated to you via email at least fourteen (14) days before taking effect. The date at the top of this document reflects the most recent revision. We encourage you to review this policy periodically.

11. Contact

For all privacy-related questions, data subject requests, or complaints, please contact us at support@omniatheme.com