Privacy Policy

Effective date: 23 August 2026
Last updated: 9 September 2026

1. Who we are

Flexoraa ("Flexoraa", "we", "us") publishes the Flexoraa theme for HubSpot CMS and operates the website at www.flexoraatheme.com.
For anything in this policy, including requests about your personal data, contact us at support@flexoraatheme.com.

2. What this policy covers

This policy covers personal data we handle when you:

  • visit www.flexoraatheme.com or our documentation site
  • submit a form on our website
  • email us for support or pre-sales questions
  • buy a licence for the Flexoraa theme

It does not cover how HubSpot handles data on a website that you build with our theme. In that case you are the party responsible for your own visitors' data, and you will need your own privacy policy. It also does not cover third party websites we link to.

3. What we collect

Information you give us. When you submit a form on our website we collect the fields in that form, which typically means your name, email address, and anything you write in a message field. When you email support we receive your email address and the contents of your message.

Information collected automatically. Our website runs on HubSpot CMS. HubSpot sets cookies and collects standard analytics data on our behalf, which includes your IP address, browser and device type, referring page, and the pages you view.

Information stored in your browser. Our video player stores a small preference in your browser's local storage so that playback settings persist between visits. This stays on your device. It is not transmitted to us.

Purchase information. We sell through two routes and never see your card or bank details in either.

For purchases made through the HubSpot Marketplace, HubSpot processes the transaction. We receive only what HubSpot passes to us to identify the purchase and issue your licence.

For purchases made directly from us, payment is processed by PayPal. PayPal shows us the payer name, email address and a transaction reference. Your card, bank and PayPal login details are handled entirely by PayPal and are never sent to us.

4. Why we use it and our lawful basis
What we do Why Basis
Reply to your enquiry or support request To answer you Performance of a contract, or your consent
Deliver and support a theme licence To provide what you bought Performance of a contract
Send product updates, if you opted in To tell you about releases Consent, withdrawable at any time
Measure site traffic To understand what is useful Legitimate interests
Meet tax and accounting duties Because the law requires it Legal obligation

 

We do not sell personal data, and we do not use it for automated decision making that produces legal effects.

5. Cookies and similar technologies

Our website uses cookies set by HubSpot, our CMS and analytics provider. These cover essential site function, analytics, and, where you have opted in, marketing. HubSpot documents each cookie it sets, including its purpose and lifetime.
Our documentation site is hosted on Cloudflare Pages, which may set cookies needed for security and delivery.
You can refuse or delete cookies in your browser. Essential cookies are needed for the site to work, so blocking them may break parts of it.

6. Who we share it with

  • HubSpot, as our CMS, CRM, forms and analytics provider, which stores and processes the data described above on our behalf

  • Cloudflare, which serves our documentation site

  • PayPal, which processes payments for purchases made directly from us

  • HubSpot Marketplace, which processes purchases made there

  • Professional advisers and authorities, where we are legally required to disclose

We do not share your data with anyone else, and we do not sell it.

7. How long we keep it

We keep enquiry and support correspondence for as long as needed to deal with the matter and for a reasonable period afterwards. We keep purchase and tax records for as long as tax law requires. Analytics data is retained for the period set in HubSpot. If you ask us to delete your data and we have no legal reason to keep it, we will.

8. Your rights

If you are in the EEA or UK, under the GDPR or UK GDPR you may access, correct, erase, restrict or object to our processing, request portability, and withdraw consent at any time. You may also complain to your data protection authority.
If you are in California, under the CCPA and CPRA you may ask what we collect and why, ask for deletion or correction, and opt out of sale or sharing. We do not sell or share personal data as those terms are defined. You will not be treated differently for exercising these rights.
To exercise any of these, email support@flexoraatheme.com. We reply within the time the applicable law allows.

9. Children

Our website and products are meant for businesses and professionals. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

We may update this policy. When we do, we will change the "last updated" date above. If a change is significant, we will say so on the website.

11. Contact

Flexoraa
support@flexoraatheme.com
https://www.flexoraatheme.com