Last Updated: 04 April 2023

1. Introduction

Welcome to Wonder World DM Shop (“we,” “us,” “our,” or “the Company”), operated by Wonder World DM, located at Kota, Rajasthan 324005, India.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit or make a purchase from our website shop.wonderworlddm.com (the “Website” or “Store”).

We sell digital products including software, CRM tools, subscriptions, entertainment plans, AI tool subscriptions, and other digital goods. Because we operate internationally and serve customers across India, the United States, the European Union, and other regions, we are committed to complying with applicable global privacy laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and India’s Digital Personal Data Protection Act (DPDP) 2023.

By using our Website or purchasing from our Store, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Website.

2. Information We Collect

We collect the following categories of personal information when you interact with our Website:

2.1 Information You Provide Directly

• Full name
• Email address
• Phone number (if provided)
• Billing address
• Payment information (processed securely by third-party payment gateways; we do not store your full card details)
• Account login credentials (username and encrypted password)
• Messages or communications you send to our support team
• Any other information you voluntarily submit through forms, checkout, or contact pages

2.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies, log files, and tracking technologies:

• IP address
• Browser type and version
• Operating system
• Referring URL (the website that brought you to ours)
• Pages visited on our Website
• Time and date of your visit
• Time spent on each page
• Device type (mobile, desktop, tablet)
• Clickstream data

2.3 Information from Third Parties

We may receive information about you from third-party services such as:

• Payment processors (Razorpay, PayPal, Stripe, or similar)
• Google Analytics and Google Ads
• Meta (Facebook/Instagram) Ads platforms
• Social media platforms (if you use social login or interact with our brand pages)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To process and fulfill your orders — delivering digital products, subscriptions, and license keys to your registered email address
• To manage your account — creating and maintaining your customer account on our platform
• To communicate with you — sending order confirmations, receipts, delivery notifications, and support responses
• To send marketing communications — promotional emails, offer announcements, and product updates (only with your consent, and you may opt out at any time)
• To improve our Website — analyzing traffic patterns, user behavior, and product performance to enhance the shopping experience
• To prevent fraud and ensure security — monitoring transactions and activity to detect and prevent fraudulent, unauthorized, or illegal activity
• To comply with legal obligations — maintaining records as required by applicable laws and regulations
• To personalize your experience — showing you relevant products and offers based on your browsing and purchase history

Legal Basis for Processing (GDPR): If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases:

• Consent — for marketing communications and non-essential cookies
• Contract Performance — to process your order and deliver your products
• Legitimate Interests — for fraud prevention, security, and analytics
• Legal Obligation — to comply with applicable laws and regulations

4. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience and collect usage data.

Types of Cookies We Use:

• Essential Cookies — Necessary for the Website to function. These cannot be disabled (e.g., session cookies, cart cookies, login authentication).
• Analytics Cookies — Used to understand how visitors use our Website (e.g., Google Analytics). These track pages visited, time on site, and traffic sources.
• Marketing & Advertising Cookies — Used to deliver targeted advertisements through Google Ads, Meta Ads, and remarketing platforms. These track your browsing behavior across websites.
• Preference Cookies — Remember your settings and preferences for a better experience (e.g., language settings, region preferences).

Google Analytics & Google Ads Disclosure: We use Google Analytics to analyze website traffic. Google may use this data to personalize ads across its network. You can opt out of Google Analytics tracking by visiting: https://tools.google.com/dlpage/gaoptout

We may also use Google Remarketing to display ads to users who have previously visited our Website.

Your Cookie Choices: You can control and manage cookies through your browser settings. Disabling certain cookies may affect your ability to use some features of our Website. You may also use the cookie consent banner displayed on your first visit to manage your preferences.

5. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes.

We may share your information with the following parties:

5.1 Service Providers (Processors) We share data with trusted third-party service providers who assist us in operating the Website and fulfilling orders:

• Payment Processors (e.g., Razorpay, PayPal, Stripe) — to securely process transactions
• Email Service Providers — to send order confirmations and communications
• Analytics Providers (e.g., Google Analytics) — to understand website usage
• Advertising Platforms (e.g., Google Ads, Meta Ads) — to run targeted advertising campaigns
• Hosting & Cloud Infrastructure Providers — to host and operate our Website

All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

5.2 Legal Compliance We may disclose your personal information if required to do so by law, court order, or government authority, or if we believe such disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our users or the public.

5.3 Business Transfers In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you by email and/or a prominent notice on our Website before your data is transferred and becomes subject to a different privacy policy.

6. GDPR — Your Rights as a European Union or UK User

If you are located in the European Union, European Economic Area, or the United Kingdom, you have the following rights under GDPR:

Right to Access — You have the right to request a copy of the personal data we hold about you.

Right to Rectification — You have the right to request that we correct any inaccurate or incomplete personal information.

Right to Erasure (“Right to Be Forgotten”) — You have the right to request that we delete your personal data, subject to certain legal exceptions.

Right to Restriction of Processing — You have the right to request that we restrict the processing of your data in certain circumstances.

Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.

Right to Object — You have the right to object to our processing of your personal data for marketing purposes or where we rely on legitimate interests.

Right to Withdraw Consent — Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint — You have the right to lodge a complaint with your national data protection authority if you believe we have violated your rights.

To exercise any of these rights, please contact us at: 📧 contact@wonderworlddm.com 📞 +91 9680414901

We will respond to your request within 30 days of receipt.

7. CCPA / CPRA — Your Rights as a California Resident (USA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know — You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the purposes for collection and the third parties with whom we share it.

Right to Delete — You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Correct — You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing — We do not sell your personal information to third parties. However, our use of advertising cookies and platforms (Google Ads, Meta Ads) may constitute “sharing” under CCPA. You may opt out by clicking the “Do Not Sell or Share My Personal Information” link on our website footer, or by submitting a request to us at contact@wonderworlddm.com.

Right to Limit Use of Sensitive Personal Information — You have the right to request that we limit our use of sensitive personal information to only what is necessary to perform services.

Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level of service, or suggest that you will receive a different level of quality for exercising your privacy rights.

Submitting a CCPA Request: To submit a verifiable consumer request, contact us at: 📧 contact@wonderworlddm.com 📞 +91 9680414901

We will respond within 45 days of receiving your verified request. We may extend the response period by an additional 45 days when reasonably necessary.

8. “Do Not Sell or Share My Personal Information” (CCPA)

As stated above, Wonder World DM Shop does not sell your personal information for money.

However, in order to deliver relevant advertisements and retargeting campaigns, we share certain data (such as browsing behavior via cookies) with advertising platforms including Google and Meta. Under California law, this may be classified as “sharing” personal information for cross-context behavioral advertising.

To opt out of this data sharing:

• Click the “Do Not Sell or Share My Personal Information” link in our website footer
• Email us at contact@wonderworlddm.com with the subject line: “CCPA Opt-Out Request”
• Adjust your cookie preferences using the Cookie Settings banner on our Website
• Enable Global Privacy Control (GPC) in your browser, which we will honor automatically

9. India — Data Protection Rights (DPDP Act 2023)

If you are a resident of India, your personal data is protected under India’s Digital Personal Data Protection Act (DPDP) 2023.

You have the following rights:

• Right to Information — Know what personal data we collect and how it is processed
• Right to Correction and Erasure — Request correction or deletion of your personal data
• Right to Grievance Redressal — Lodge a complaint with our Grievance Officer
• Right to Nominate — Nominate another individual to exercise your rights in case of death or incapacity

Our Grievance Officer (India): As required under India’s IT Act and DPDP Act, we have appointed a Grievance Officer:

Name: Yogesh Nigam Designation: Founder, Wonder World DM Email: contact@wonderworlddm.com Phone: +91 9680414901 Address: Wonder World DM, Kota, Rajasthan 324005, India Response Time: Within 30 days of receiving your complaint

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable laws.

When your data is no longer required, we securely delete or anonymize it.

11. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• SSL/TLS encryption for all data transmitted between your browser and our Website (HTTPS)
• Secure payment processing through PCI-DSS compliant third-party gateways (we do not store full card numbers)
• Password hashing and encrypted storage of account credentials
• Regular security audits and vulnerability monitoring
• Access controls limiting data access to authorized personnel only
• Firewall and malware protection on our hosting infrastructure

Data Breach Notification: In the event of a data breach that is likely to affect your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law — within 72 hours for GDPR obligations and as required under Indian law.

No method of transmission over the internet or electronic storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.

12. International Data Transfers

Wonder World DM Shop is based in India. If you are accessing our Website from the European Union, United States, or any other region with laws governing data collection and use that differ from Indian law, please note that your data may be transferred to — and processed in — India or other countries.

For users in the European Union or United Kingdom, we ensure that any international transfers comply with GDPR requirements, including through Standard Contractual Clauses (SCCs) or equivalent safeguards where required.

By using our Website, you consent to the transfer of your information to India and other countries as described in this Privacy Policy.

13. Children’s Privacy

Our Website and digital products are not intended for, marketed to, or directed at children under the age of 13 (or under 16 in the European Union).

We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at contact@wonderworlddm.com and we will take steps to delete that information.

14. Third-Party Links

Our Website may contain links to third-party websites, subscription services, or software platforms. Once you leave our Website, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party websites you visit.

We are not responsible for the privacy practices, content, or data handling of any third-party websites or services.

15. Email Marketing and Communications

If you have subscribed to our newsletter or marketing emails, we will send you promotional communications about our products, offers, and updates.

You can unsubscribe at any time by:

• Clicking the “Unsubscribe” link at the bottom of any marketing email
• Emailing us at contact@wonderworlddm.com with the subject line: “Unsubscribe”

We will process your unsubscribe request within 10 business days. Please note that even after unsubscribing from marketing emails, we may still send you transactional emails related to your orders or account.

16. Do Not Track Signals

Some browsers have a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. Our Website currently does not respond to DNT browser signals. However, California residents may opt out of behavioral advertising tracking using the methods described in Section 8 of this Policy.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Display a notice on our Website homepage or shop page
• Send an email notification to registered customers (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of our Website after any changes constitutes your acceptance of the updated policy.

18. Contact Us — Privacy Inquiries

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Wonder World DM Shop

📧 Email: contact@wonderworlddm.com

📞 Phone / WhatsApp: +91 9680414901

🌐 Website: shop.wonderworlddm.com

📍 Address: Wonder World DM, Kota, Rajasthan 324005, India

For GDPR-specific inquiries, please use the subject line: “GDPR Data Request” For CCPA-specific inquiries, please use the subject line: “CCPA Privacy Request” For India DPDP inquiries, please contact our Grievance Officer as listed in Section 9.

We are committed to resolving all privacy-related concerns in a timely and transparent manner.