Privacy Policy

Last updated: November 2, 2026

Who we are

ThemeVisto provides digital products and website design and development services. This policy explains how information is handled when you use our website, create an account, place an order, submit an enquiry, subscribe to updates, or leave a comment or review.

For privacy questions or requests about your information, contact info@themevisto.com.

Information we collect

Accounts and orders

When you register or use checkout, we collect the information entered in the form, which can include your name, email address, billing address, telephone number, and account details. WooCommerce stores order items, prices, discounts, tax information, order status, and any notes you provide. For downloadable purchases, it also maintains download permissions and records download activity. Account passwords are stored as hashes rather than readable text.

Project enquiries

The Hire Us form collects your name, email address, optional website address, preferred service or package, estimated budget, project description, and consent to be contacted. These details are stored as private quote requests in WordPress for our team to review and respond to. Do not include passwords, payment-card numbers, or other sensitive information in your enquiry.

Newsletter subscriptions

The newsletter form collects and stores your email address in WordPress as a subscription record. You can ask us to remove your subscription by emailing info@themevisto.com from the subscribed address. Newsletter registration does not automatically create a customer account.

Comments and product reviews

When you leave a comment or review, WordPress records the submitted information, content, date, IP address, and browser user-agent information. Your chosen display name, review or comment, rating where applicable, and publication date may appear publicly after moderation. Your email address is not displayed as part of the public comment or review.

Technical and security records

Website operation and security tools can process IP addresses, request URLs, browser details, timestamps, login activity, and error or security events. We use Wordfence to help identify suspicious requests and protect accounts and the website.

How we use information

Maintain customer accounts and shopping-cart sessions.
Process orders, provide downloads, and respond to purchase questions.
Review project enquiries and discuss the services you request.
Manage newsletter subscriptions and requested communications.
Publish and moderate comments and product reviews.
Deliver service emails, investigate delivery problems, and maintain operational records.
Detect abuse, troubleshoot faults, and protect the website.
Maintain records needed to resolve disputes or meet applicable obligations.

Payments

No online payment gateway is currently enabled on this website. We do not ask you to send payment-card information through project enquiries, comments, or email. If a payment provider is introduced, this policy will be updated to identify the provider and explain the payment-related information shared with it.

Cookies and browser storage

WordPress and WooCommerce use cookies and browser storage for account access, shopping-cart functionality, and related website features. WooCommerce uses woocommerce_items_in_cart and woocommerce_cart_hash to track cart changes, and a wp_woocommerce_session_ cookie to associate a visitor with cart data stored on the website.

WordPress uses login and preference cookies for signed-in users. If you choose to remember your details when commenting, cookies can save your name, email address, and website address for a later comment. Comment cookies are optional.

You can delete or block cookies through your browser settings. Blocking essential cookies can prevent login, cart, or checkout features from working correctly. Closing a browser window does not necessarily delete all cookies or account records.

Website administrators and authorized team members can access information needed to manage orders, respond to enquiries, maintain subscriptions, moderate comments, and operate the site. Access is controlled through WordPress permissions.

The website uses WordPress and WooCommerce to manage content, accounts, and orders. FluentSMTP is installed for email delivery, and WP Mail Log records website-generated emails for delivery troubleshooting and auditing. Email records can include recipient addresses, message subjects, and message contents. Email delivery services receive the information needed to transmit a message.

Wordfence security features can process visitor and request information and communicate with Wordfence services for protection and security checks. See Wordfence?s privacy policy for its practices.

Where a comment or review avatar is displayed through Gravatar, a hash derived from the submitted email address is used to request that avatar. Loading an avatar also connects your browser to the avatar provider. Gravatar is provided by Automattic; see the Automattic privacy policy.

Website data may be included in backups or migration copies used to maintain or restore the site. Information may also be disclosed when required by applicable law or necessary to address fraud, security incidents, or legal claims.

External links and sharing

Product demonstrations, external links, and social sharing buttons can take you to websites operated by other organizations. Those websites apply their own privacy policies. Selecting a sharing link sends the article URL and related information to the service you choose. The copy-link button copies the article URL on your device.

If a page contains externally embedded content, loading that content can transmit technical information to its provider. Review the provider?s privacy information before interacting with external content.

How long information is kept

Account, order, enquiry, subscription, comment, and operational records remain stored until they are deleted or anonymized through site administration or a relevant retention setting. Automatic deletion periods for inactive accounts and completed orders are not currently configured. The custom project-enquiry and newsletter features do not automatically delete records.

When handling a deletion request, we consider the information needed for ongoing services, order records, fraud prevention, disputes, and applicable recordkeeping obligations. Some records may need to be retained for those purposes. Copies in backups may remain until the relevant backup is replaced or deleted.

Your choices and privacy requests

You can update available account details through My Account. To request access, a correction, an export, deletion, or removal from the newsletter list, email info@themevisto.com. Explain the request and identify the email address or account involved. Do not send your password.

We may need to verify your identity before disclosing or changing personal information. We will consider your request in accordance with applicable requirements and explain if some information must be retained. WordPress provides export and erasure tools for supported records; custom enquiry, subscription, and email-log records may also need to be reviewed separately.

If you believe we have not addressed a concern, you may have the right to contact the privacy regulator or supervisory authority relevant to your location.

Protecting information

We use account permissions and website security tools to limit unauthorized access and protect the site. No website, storage system, or method of electronic communication can be guaranteed completely secure. Keep your account password private and contact us if you suspect unauthorized use of your account.

Changes and contact

We will update this page when our website features or data-handling practices change. The date below identifies the latest revision. Privacy questions can be sent to info@themevisto.com.