Privacy Policy

This Privacy Policy explains how Doothemes, operated by EWS Networks, collects, uses, shares, and protects your personal information when you visit our website, create an account, purchase and download our WordPress themes, receive automatic updates, or use our support community.

Last updated: Oct 3, 2026

1. Introduction

This Privacy Policy ("Policy") describes how EWS Networks ("EWS Networks", "Doothemes", "we", "us", or "our") handles personal information in connection with the website located at doothemes.com and any related subdomains, services, products, and digital downloads (collectively, the "Services"). EWS Networks is the controller of the personal information described in this Policy.

Doothemes provides premium WordPress themes and related software, customer accounts, theme licensing, automatic updates, customer support, and an affiliate program. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Services.

This Policy applies to all users of the Services, regardless of how you access them. It does not apply to third-party websites, products, or services that we do not own or control, even when they are linked from our Services.

2. Information We Collect

We collect information in three ways: information you provide directly to us, information collected automatically when you use the Services, and information we receive from third parties such as payment processors and sign-in providers.

2.1 Information You Provide to Us

You may provide the following information when you register, make a purchase, request support, join our affiliate program, or otherwise interact with us:

Account information — your name, email address, and password. We store your password only as a one-way hash that no one, including us, can read.
Optional profile information — details you choose to add in your account settings, such as your display name, profile photo, phone number, date of birth, gender, social profiles (for example Discord, Instagram, Telegram, WhatsApp, GitHub, or X), and saved addresses.
Preferences — your interface language, the language you want us to write to you in, your time zone, your theme, and your notification and sign-in alert settings.
Billing and tax details — billing name, billing address, country, and, where applicable, business name and tax identification number.
Order and license information — the products you purchase, the license keys issued to you, and the domains on which you activate your products.
Support communications — the content of your support tickets, messages, and attachments, and any site details or temporary access you choose to share with our team.
Affiliate program information — if you join our affiliate program, your payout method and payout details (such as a PayPal email address, a cryptocurrency wallet address, or bank account details), together with the referrals, commissions, and payouts linked to your account.

2.2 Signing In with Google

If you choose "Continue with Google", Google shares with us your name, your email address, whether Google has verified that email address, and a unique identifier for your Google account. We use this information only to create your account or sign you in, and to link your Google account to your Doothemes account. We never receive your Google password.

You can unlink your Google account from your account settings at any time, after you have created a password for your Doothemes account. Your use of Google is also governed by Google's own privacy policy.

2.3 Payment Information

When you make a purchase, your payment is processed by third-party payment providers, such as PayPal and Mercado Pago. We do not collect or store your full credit or debit card numbers on our own servers. The payment provider collects and handles your card data in accordance with its own privacy policy and applicable security standards (such as PCI-DSS). We may receive limited transaction details, such as a confirmation of payment, the payment method, the last digits of the card, and the billing country.

If you pay with cryptocurrency, we show you a wallet address for your order and record the amount, the currency, and the transaction details needed to match your payment. Transactions on public blockchains are visible to anyone and cannot be deleted by us.

2.4 Information We Collect Automatically

When you use the Services, we and our service providers may automatically collect:

Device and connection data — IP address, browser type and version, operating system, device type, and language settings.
Usage data — pages visited, links clicked, referring URLs, search terms used on our site, dates and times of access, and other interaction data.
Approximate location — the country, region, and city associated with your IP address. When you open a support ticket, we record the IP address it was opened from and its approximate location (country, region, city, postal code, network provider, time zone, and approximate coordinates) to help us assist you and to detect fraud.
Account security data — your active sessions (device, browser, IP address, and last activity), a history of the IP addresses used to access your account, and sign-in events, so that you can review your sessions and we can alert you to unusual activity.
License and update data — when your WordPress installation checks for theme updates, we may receive your license key, the associated domain, the theme version installed, and basic environment information needed to deliver compatible updates.
Log data — server logs that record technical events, downloads, and requests for security, debugging, and performance monitoring.

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to operate the Services, remember your preferences, keep you signed in, and understand how the Services are used. The main categories are:

Strictly necessary cookies — enable core functions such as signing in, security, and checkout, and remember your cookie choice.
Functional cookies — remember your preferences, such as your theme and language.
Analytics — our own first-party analytics, plus Google Analytics and Cloudflare Web Analytics, which help us measure traffic and improve the Services.
Referral cookies — when you arrive through an affiliate link, a cookie records which affiliate referred you, for up to 60 days, so that the referral can be credited.
Live chat — our chat provider sets a cookie to keep your conversation with us across pages.

The Services may also display advertising served by Carbon Ads, which receives basic technical information (such as your IP address and browser) to deliver the ad.

You can manage or disable cookies through your browser settings or through the controls described on our Cookie Preferences page. Disabling certain cookies may affect the functionality of the Services. See Section 12 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account, authenticate your access, and let you sign in with Google if you choose to.
To process orders, deliver digital products, issue and verify license keys, and provide automatic theme updates.
To provide customer support, including through live chat and support tickets.
To send transactional messages such as order confirmations, license details, verification codes, security and sign-in alerts, and important service notices.
To send a limited number of reminders about an order you started but did not pay, each of which includes a link to stop them.
To operate our affiliate program, including crediting referrals and paying commissions.
To send marketing communications where you have opted in or where otherwise permitted by law, with an option to unsubscribe at any time.
To maintain the security and integrity of the Services, and to detect and prevent fraud, abuse, license violations, and unauthorized access.
To analyze and improve the Services, develop new features, and understand how our products are used.
To comply with legal obligations, enforce our terms, and protect our rights and the rights of our users.

4. Legal Bases for Processing

Where the law requires a legal basis for processing personal information (for example, in the European Economic Area, the United Kingdom, or Peru), we rely on one or more of the following:

Performance of a contract — to deliver the products and services you have requested, including downloads, updates, and support.
Legitimate interests — to secure, maintain, and improve the Services, prevent fraud, and communicate with you about your account, provided these interests are not overridden by your rights.
Consent — for optional activities such as marketing communications, signing in with Google, and certain cookies, which you may withdraw at any time.
Legal obligation — to comply with applicable laws, tax requirements, and lawful requests from authorities.

We do not sell your personal information. We share it only in the following circumstances:

Service providers — with the vendors listed in Section 6, who perform services on our behalf. They may access personal information only to perform their tasks and are required to protect it.
Legal and safety reasons — when required by law, regulation, legal process, or governmental request, or when necessary to protect the rights, property, or safety of EWS Networks, our users, or others.
Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction, subject to this Policy.
With your direction — when you ask us to share information, or otherwise authorize us to disclose it.

6. Service Providers and Third Parties

The Services rely on the following categories of providers. Each processes data under its own privacy policy and security practices.

Hosting, content delivery, and security — cloud hosting providers and Cloudflare, which also tells us the country a visit comes from.
Payments — PayPal and Mercado Pago.
Sign-in — Google, if you choose to sign in with your Google account.
Email delivery — the provider we use to send transactional and account emails.
Analytics — Google Analytics and Cloudflare Web Analytics.
Live chat — Tawk.to, which receives the messages you send through the chat and the details you provide there.
Advertising — Carbon Ads, which serves the ads shown on some pages.
IP geolocation — IPinfo, which returns the approximate location of an IP address.
Internal notifications — Telegram, which our team uses to receive alerts about account activity (such as new sign-ups and sign-ins), including the email address and IP address involved.
AI-assisted support tools — our team may use AI tools, such as Anthropic's Claude, to help read and answer support requests and to review account and order information. These tools act on our instructions and under their providers' terms.

We encourage you to review the privacy policies of the third-party services you interact with through us.

7. Theme Updates and License Verification

To deliver automatic updates and verify entitlement, our update system may periodically communicate with your WordPress installation. During these checks, we may receive your license key, the registered domain or site URL, the installed theme and version, and basic technical details required to provide a compatible update. This information is used solely to validate your license, deliver updates, prevent unauthorized use, and provide support. It is retained only as long as necessary for these purposes.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services, and as required to comply with our legal obligations, resolve disputes, enforce our agreements, maintain security, and keep accurate financial and transaction records. In particular:

Account deletion — when you request the deletion of your account, it is scheduled for deletion after a grace period of 90 days. Signing in during that period cancels the request. After it ends, your personal information is deleted or anonymized and your licenses are revoked, except for the records we must keep by law, such as invoices and payment records.
Analytics — our individual visit records are kept for up to two years. Aggregated statistics, which do not identify you, may be kept indefinitely.
Financial records — orders, payments, and affiliate payouts are kept for as long as tax and accounting laws require.

When information is no longer required, we delete it or anonymize it using reasonable measures.

9. Data Security

We implement technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, encryption of sensitive settings at rest, hashed passwords, one-time verification codes for sensitive account changes, access controls, and secure infrastructure. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials, and any Google account you use to sign in, confidential, and for notifying us of any suspected unauthorized use of your account.

10. International Data Transfers

EWS Networks operates internationally, and your information may be processed and stored in countries other than the one in which you reside, including the United States and other countries where our service providers operate, which may have different data-protection laws. When we transfer personal information across borders, we take steps to ensure that an appropriate level of protection is maintained in accordance with applicable law.

11. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Rectification — request correction of inaccurate or incomplete information.
Erasure — request deletion of your personal information, subject to legal exceptions.
Restriction — request that we limit the processing of your information in certain circumstances.
Portability — request a copy of certain information in a structured, machine-readable format.
Objection — object to processing based on our legitimate interests, including direct marketing.
Withdraw consent — withdraw consent at any time where processing is based on consent.

Many of these you can exercise yourself from your account settings: you can review and edit your information, download a copy of your account data, review and close your active sessions, link or unlink Google, and request the deletion of your account.

Peru. If you are in Peru, you have the rights of access, rectification, cancellation, and opposition (ARCO rights) under Law No. 29733, the Personal Data Protection Law, and its regulations. If you believe your rights have not been respected, you may also file a claim with the National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales).

California. If you are a California resident, you may also have the right to know what personal information we collect, to request its deletion, and to opt out of any sale of personal information. We do not sell personal information. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, please contact us using the details in Section 16. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law.

12. Managing Cookies

You can control cookies through your browser settings, where you can usually delete existing cookies, block new ones, or be alerted when cookies are set. You may also use the options described on our Cookie Preferences page. Please note that blocking strictly necessary cookies may prevent parts of the Services, such as signing in and checkout, from working properly.

13. Third-Party Links

The Services may contain links to third-party websites, plugins, or services that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of every website you visit.

14. Children's Privacy

The Services are intended for users who are at least 18 years old, or the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take appropriate steps to delete it.

15. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect constitutes your acceptance of the revised Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Company: EWS Networks
Website: doothemes.com
Email: info@doothemes.com
Support: open a ticket from your account

We will do our best to address your inquiry promptly and in accordance with applicable law.