Last updated: 22 October 2026
This policy explains what personal data we collect when you visit ilmtech.in, buy from us or use our modules, why we collect it, and what you can do about it.
In short
- We collect only what we need to sell, license and support our modules.
- We do not sell your data and we do not pass it on for other companies' marketing.
- Our website uses no advertising or tracking cookies.
- Payments are handled by Razorpay (India) and PayPal (international). We never see your full card number.
- You can see, correct, download or delete your data. See section 9.
1. Who is responsible for your data
Your data is looked after by ILM Tech, India. For any privacy question or request, write to sales@ilmtech.in. Complaints go to our Grievance Officer at the same e-mail address.
2. What this policy covers
This policy covers our shop at ilmtech.in including your account, our licence service (which our modules contact), our built-in AI service, and the e-mails we send you.
It does not cover the personal data of your own shop's customers. See section 10.
3. The data we collect
| Kind of data | What exactly | Where it comes from |
|---|---|---|
| Account | Name, e-mail address, password (we store only a scrambled form of it, never the password itself); if you choose to give them: title, date of birth, company name, tax number | You |
| Billing | Address, country, phone number | You |
| Orders | Products, amounts, currency, invoices, order history, your Order ID | Created when you buy |
| Payment | Payment ID, payment method type (for example card, UPI, net banking or wallet through Razorpay, or PayPal balance or card through PayPal), status, refunds, and for auto-renewal the subscription ID. Never your full card number, CVV or UPI PIN | Razorpay or PayPal |
| Messages | What you write in the contact form, in e-mails and support requests, attachments, and any shop access you give us for support | You |
| Reviews | The name you choose to show and your review text | You |
| Newsletter | Your e-mail address, only if you subscribe | You |
| Licence | Order ID, your shop's domain, module name and version, PrestaShop version, the IP address of your shop's server, the technical identifier your shop's server sends with the request (user agent), dates of activation and of later checks | Sent by the module installed in your shop |
| AI service | The text you type into the AI builder, and a picture if you add one: these are passed to the AI provider to produce the answer. On a paid AI plan we do not keep them. On the free AI requests we keep the text of the request, the AI's answer and whether the answer was used, without your shop's name, domain, order or IP address, so that we can improve the AI; a picture is never kept. Apart from that we keep usage records: date and time, your shop's domain, the IP address of your shop's server, the size of the request, the AI model used | Sent by the module when you use the built-in AI |
| Technical | IP address, browser and device type, pages you open, the page you came from, the content of your cart | Collected automatically when you visit |
| PrestaShop Addons purchases | If you bought our module on the PrestaShop Addons marketplace, we receive from PrestaShop the order number, module, date, amount, your name and your e-mail address | PrestaShop |
4. Why we use your data
| Why | Which data | Legal ground |
|---|---|---|
| To take, deliver and invoice your order | Account, billing, orders, payment | Contract with you |
| To license your module and prevent one licence being used on many shops | Licence data | Contract with you; our legitimate interest in protecting our software |
| To give support and answer you | Messages, account, licence | Contract with you |
| To run the AI add-on and count your monthly requests | AI service data | Contract with you |
| To take renewal payments you authorised and to refund | Payment, orders | Contract with you |
| To keep accounts and tax records | Orders, invoices, billing | Legal duty |
| To keep the shop secure and stop fraud and abuse | Technical, licence, payment | Our legitimate interest in a safe service |
| To send our newsletter | E-mail address | Your consent, which you can withdraw at any time |
We do not use your data for automated decisions that have legal effects on you, and we do not build advertising profiles.
5. Cookies and similar storage
We use only what the shop needs to work:
- a session cookie that remembers your cart, your language and currency and that you are logged in;
- security cookies set by Cloudflare, which protects our website;
- cookies set by Razorpay inside its payment window when you pay, and by PayPal inside its payment window when you pay;
- small entries in your browser's storage, for example to remember that a pop-up was already shown.
We use no advertising cookies and no analytics cookies. If that ever changes, we update this policy first and ask your consent where the law requires it.
You can block cookies in your browser. The cart, login and checkout then do not work.
6. Who receives your data
We share data only with the companies that help us run the service, and only what each of them needs.
| Who | What for | What they receive |
|---|---|---|
| Razorpay | Payments, refunds, auto-renewal (India) | Your name, e-mail, phone, amount, and the payment details you enter in its window |
| PayPal | Payments, refunds, auto-renewal (international) | Your name, e-mail, amount, currency, and the payment details you enter in its window |
| Hostinger | Hosting of our website and licence service, sending our e-mails | The data kept on our servers and the e-mails we send; it stores them for us and does not use them for itself |
| Cloudflare | Protects and speeds up our website | Technical data of your visit (such as IP address) |
| AI provider (currently DeepSeek) | Produces the answers of the built-in AI | Only the text or picture of the AI request; no account, order or payment data |
| Google Fonts and cdnjs | Deliver font and icon files to your browser | Your IP address and browser type, as with any file download |
| PrestaShop SA | Maker of our shop software and operator of the Addons marketplace | Technical and statistical data from our shop software's connected services; order data of Addons purchases is sent by PrestaShop to us, not the other way round |
Razorpay and PayPal process payment data under their own privacy policies. We never see your full card number.
In other cases we share data only:
- with authorities or courts when the law requires it;
- with our accountants or legal advisers, under confidentiality;
- with a payment gateway, when we answer a chargeback or dispute and provide order, download and activation records;
- with a buyer of our business, who must keep to this policy.
We do not sell your personal data and we do not give it to anyone for their own marketing.
7. Data sent to other countries
We are based in India. The companies in section 6 may process data in other countries, for example in the European Union, the United States, Singapore, or (for the current AI provider) China.
Where the law requires protection for such transfers, we rely on the safeguards it accepts, such as contract terms with the provider.
Reminder: the AI provider only receives the content of AI requests, so do not put personal data into them.
8. How long we keep your data
| Data | How long |
|---|---|
| Your account | Until you ask us to delete it |
| Orders and invoices | As long as tax and accounting law requires; at present at least 8 years |
| Licence records | As long as the licence exists, and afterwards as long as we may need them to settle a dispute or prevent misuse |
| Support messages | Up to 3 years after the matter is closed |
| Newsletter address | Until you unsubscribe |
| AI request content, paid AI plan | Not kept by us |
| AI request content, free AI requests | Kept without anything that identifies your shop, in a log limited to 20 MB; the oldest entries are deleted first |
| Technical logs | Only as long as needed for security and fault-finding |
When the time is over we delete the data or make it anonymous.
9. Your rights
You can ask us to: tell you what data we hold about you and give you a copy; correct it; delete it; limit how we use it; hand it to you in a common file format; stop using it where we rely on our legitimate interest; and you can withdraw a consent you gave.
Most details can be changed in your account. The page “GDPR — Personal Data” in your account lets you download your data. For everything else, write to sales@ilmtech.in.
We answer within 30 days, free of charge. We may ask you to prove who you are, so that nobody else gets your data.
There are two limits, and we prefer to say so: invoices must be kept even if you delete your account (section 8), and a licence record must stay as long as you want your module to remain licensed.
These rights come from laws such as India's Digital Personal Data Protection Act 2023 and, if you live in the EU or UK, the GDPR. Which of them apply depends on where you live.
If you think we got it wrong, please tell us first. You can also complain to the data protection authority of your country (in India: the Data Protection Board of India).
10. Your shop's customers
When you use our module in your shop, the size charts and settings are stored in your shop's own database.
What your shoppers do with a size chart, including the “Find my size” helper, happens in their browser and in your shop. It is not sent to us.
So for your shoppers' data you are the responsible party, and your own privacy notice applies.
Do not put your customers' personal data into AI requests. Free AI requests are kept as described in section 3, and the stored text is whatever you typed.
If you connect your own AI provider key in the module, your requests go straight from your shop to that provider under its terms; they do not pass through us.
11. How we protect your data
- Our website and licence service use encrypted connections (HTTPS).
- Passwords are stored only in scrambled form.
- Messages between our shop and our licence service are signed, so they cannot be forged.
- Only people who need it for their work have access; administrator access to the licence service needs two-step sign-in.
- Card data is handled by Razorpay and PayPal under the card industry's security standard (PCI DSS), not by us. We never see full card numbers.
- No system is perfectly safe. If a breach affects your data, we tell you and the authorities as the law requires.
12. Children
Our shop is for businesses and adults. We do not knowingly collect data of anyone under 18. If you believe a child gave us data, write to us and we delete it.
13. E-mails from us
Service e-mails (order, download, licence, renewal, refund, answers to your questions) are part of the service and are always sent.
Newsletters are sent only if you subscribed. Every newsletter has an unsubscribe link, and you can also write to us.
14. Changes to this policy
We may update this policy; the date at the top shows the latest version. If a change matters to you, we tell you by e-mail or by a notice on the website before it takes effect. Continued use of the site after the update date means you accept the new version, to the extent the law allows. The version published on the site applies.
15. Contact
ILM Tech
India
E-mail: sales@ilmtech.in
Contact form
Complaints go to our Grievance Officer at the address above. We acknowledge a complaint within 48 hours and resolve it within one month.