Privacy Policy

Effective Date: 1 June 2026
Last Updated: 1 June 2026

1. Introduction

Welcome to PluginsBuy (“we,” “us,” “our”), operated by APSARA TRADING – F.Z.E., a free zone establishment duly licensed and registered under the laws of the United Arab Emirates (“UAE”). Our website is located at https://pluginsbuy.com (the “Website”).

We are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Website, purchase our products, or interact with us in any way.

If you are located in the European Union (“EU”) or European Economic Area (“EEA”), this Privacy Policy also serves as our disclosure under the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Please read this Privacy Policy carefully. By accessing or using our Website or services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this Policy, please do not use our Website.

2. Data Controller

The data controller responsible for your personal data is:

APSARA TRADING – F.Z.E.
United Arab Emirates
Email: contact@pluginsbuy.com
Website: https://pluginsbuy.com

For any privacy-related inquiries, please contact us at contact@pluginsbuy.com.

3. Information We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

Account and Purchase Information: First name, last name, email address, billing address, and country of residence when you create an account or complete a purchase.
Payment Information: We do not store your credit or debit card details. All payment transactions are processed securely by our third-party payment processor, Stripe, Inc. Please refer to Stripe’s privacy policy at https://stripe.com/privacy for information on how Stripe handles your payment data.
Support Communications: Any information you provide when contacting us via email, including the content of your messages, your name, and email address.

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect:

Device and Browser Information: IP address, browser type and version, operating system, device identifiers.
Usage Data: Pages visited, time spent on pages, links clicked, referral URLs, and other interaction data.
Cookies and Tracking Technologies: We use cookies and similar technologies as described in our Cookie Policy (available on our Website).

3.3 Information from Third Parties

We may receive limited information from third-party service providers such as Stripe (e.g., confirmation of payment status) and analytics providers.

4. How We Use Your Information

We use your personal data for the following purposes:

Purpose	Legal Basis (GDPR)
Processing and fulfilling your orders (digital product delivery, license key issuance)	Performance of a contract (Art. 6(1)(b) GDPR)
Managing your account and customer relationship	Performance of a contract (Art. 6(1)(b) GDPR)
Processing payments via Stripe	Performance of a contract (Art. 6(1)(b) GDPR)
Providing technical support (bug fixes, error resolution)	Performance of a contract (Art. 6(1)(b) GDPR)
Sending transactional emails (order confirmations, license keys, support replies)	Performance of a contract (Art. 6(1)(b) GDPR)
Sending marketing communications (if you have opted in)	Consent (Art. 6(1)(a) GDPR)
Complying with legal and regulatory obligations	Legal obligation (Art. 6(1)(c) GDPR)
Analysing Website usage to improve our products and services	Legitimate interests (Art. 6(1)(f) GDPR)
Preventing fraud and ensuring the security of our Website	Legitimate interests (Art. 6(1)(f) GDPR)

5. Cookies

We use cookies and similar tracking technologies on our Website. A cookie is a small file stored on your device that helps us recognise you and remember your preferences.

We use the following types of cookies:

Strictly Necessary Cookies: Required for the Website to function (e.g., shopping cart, login sessions). These cannot be disabled.
Analytical/Performance Cookies: Help us understand how visitors interact with the Website (e.g., Google Analytics or similar tools).
Functional Cookies: Remember your preferences and settings.
Marketing/Targeting Cookies: Track your browsing habits to deliver relevant advertising (only with your consent).

You can manage your cookie preferences at any time via the cookie consent banner on our Website or through your browser settings. Please note that disabling certain cookies may affect Website functionality.

For full details, please refer to our separate Cookie Policy.

6. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We may share your data with:

Stripe, Inc.: For payment processing purposes. Stripe is a PCI-DSS compliant payment processor.
Hosting and Infrastructure Providers: Companies that provide web hosting, cloud infrastructure, and database services on our behalf. These providers act as data processors under contractual obligations to protect your data.
Analytics Providers: To help us analyse Website traffic and usage patterns.
Legal and Regulatory Authorities: Where required by applicable law, court order, or governmental regulation in the UAE or any other applicable jurisdiction.
Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party processors are contractually required to process your data only on our instructions and in compliance with applicable data protection laws.

7. International Data Transfers

APSARA TRADING – F.Z.E. is based in the United Arab Emirates. If you are located in the EU or EEA, please be aware that your personal data will be transferred to and processed in the UAE and potentially other countries outside the EEA.

For such transfers, we rely on one or more of the following safeguards:

Standard Contractual Clauses (SCCs) approved by the European Commission;
Adequacy decisions issued by the European Commission;
The recipient’s compliance with binding corporate rules or other appropriate safeguards under GDPR Chapter V.

Where we use Stripe for payment processing, Stripe maintains its own GDPR compliance mechanisms. Please review Stripe’s privacy policy for details.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required by law.

Purchase and transaction records: Retained for a minimum of 5 years for tax and accounting compliance under UAE law.
Account data: Retained for the duration of your account, plus 2 years after account closure.
Support communications: Retained for 2 years from the date of the last communication.
Marketing opt-ins: Until you withdraw your consent.
Technical logs: Typically 90 days, unless required for security or fraud investigations.

9. Your Rights Under GDPR (EU/EEA Residents)

If you are located in the EU or EEA, you have the following rights under the GDPR:

Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) (Art. 17): You may request deletion of your personal data, subject to certain legal exceptions.
Right to Restriction of Processing (Art. 18): You may request that we restrict how we process your data.
Right to Data Portability (Art. 20): You may request your data in a structured, machine-readable format.
Right to Object (Art. 21): You may object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent (Art. 7(3)): Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority (e.g., your national data protection authority).

To exercise any of these rights, please contact us at contact@pluginsbuy.com. We will respond to your request within 30 days of receipt.

10. Children’s Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete such data.

If you believe we have collected data from a minor, please contact us at contact@pluginsbuy.com.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

HTTPS/TLS encryption for all data in transit;
Secure, access-controlled servers;
Regular security assessments;
Limited staff access to personal data on a need-to-know basis.

However, no method of transmission over the Internet is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted on this page with a revised “Last Updated” date. We encourage you to review this Privacy Policy periodically.

Where changes are material, we will provide more prominent notice (e.g., email notification or a banner on the Website).

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

APSARA TRADING – F.Z.E.
Email: contact@pluginsbuy.com
Website: https://pluginsbuy.com

This Privacy Policy was drafted in accordance with the General Data Protection Regulation (EU) 2016/679 and applicable UAE data protection principles.