Privacy policy

Data controller: Devious Machines Limited.

Website visitors

We use cookies on our website.  We use them to:

• Identify you if you log into the site and to track what is in your shopping basket
• Generate tracking information for our website analytics so we can improve the website functionality

Website logs

Information about your actions on the site recorded in the logs which we use to identify errors, provide support and to spot and fix security problems (such as when hackers try to abuse our site).  Again, we do this because it is in our legitimate interests to do so.

Marketing e-mails

You can optionally sign up to our e-mails.  We don’t send them very often.  You can withdraw your consent to receive these at any time, by clicking the unsubscribe link on the e-mail.

Shopping

If you shop with us we will ask you for contact information, information about your order and so forth.  We will use this to fulfil your order, to identify you if you have queries about your order, and to contact you if necessary about it. If you purchase products from other manufacturers from our store we will share your details with them so that they can (a) generate you a license (b) identify you if you need support or updates. If they would like to send you marketing information they will request your permission to do so separately.

Plugin licenses

License information: whether you buy from us or our partners, we keep information necessary to manage your software licenses:

• Your name
• Your e-mail address
• What products you have a license for
• Any license expiry, date and status information

This is in our legitimate interests, we need this information to operate the licensing system that protects our product, and we believe the risk to you of us holding this limited set of information is very low.

We get this information directly from you, from our channel partners (including Plugin Boutique) or from other retailers. Our plugin licensing system is also used by other manufacturers who may have sent us your details.

We do not use information provided to our licensing system for any purpose other than managing your license.  You will need to sign up separately to receive marketing information from us.

Plugin error notifications and support

Many of our plugins send error information, analytics or crash reports, which may include your e-mail address, to our analytics server.  We use this to improve the quality of our product and to be able to better help you if you have a support issue.

Additionally, we keep any correspondence with you regarding our products.  Again, we keep this for the lifetime of the product as we may review it when considering updates, bug fixes and new features.

Data security

We use reputable cloud service providers for the storage of much of your data.

Who we share your data with

Your data will be stored on our systems which are primarily located in the UK.  We use https where sensitive information is transmitted, such as password details.  Our office e-mail is handed by fastmail.fm who are an Australian company with data centres in the US.  Additionally our support tickets are currently handed by ZenDesk who will handle e-mails sent to our support e-mail address directly or via our retailers.  They have a detailed privacy statement here: https://www.zendesk.co.uk/company/customers-partners/eu-data-protection/

Social Media Platforms — We may your email address available to companies in order to advertise and market our services to you through other platforms on the internet (e.g. Instagram, TikTok, Facebook). See the ‘Marketing’ section of this Privacy Policy above. This will just mean you might, if we organise a campaign, occasionally see Devious Machines adverts and information on these platforms.

Data retention

All product related information is kept for the lifetime of the product it relates to.  We do this so we can ensure that bug-fixes and new features take into account customer feedback.

For licenses, as customers may continue to use them after we stop selling the product, we keep license information for 10 years after the product ceases to be sold.

Security information, such as website logs, are deleted after no more than 12 months.

Your rights

You have some rights to your personal data.  You can find out about them here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you’d like to exercise any of your rights please e-mail support@deviousmachines.com

If you don’t agree with how we handle your request, you can ask the ICO to investigate:

https://ico.org.uk/for-organisations/guide-to-pecr/complaints/