Privacy Notice

1. Data controller

IconSetPro (iconsetpro.com) is operated by MD ABDUL KARIM, an individual designer based in Bangladesh, who is the data controller for the personal data collected on this website.

2. Data we collect

• Account data — email address and login credentials (used for sign-in via one-time code).
• Order data — what you purchased, transaction references, optional payment proof, and custom order details you submit (name, email, project description).
• Support messages — messages you send us.
• Usage and device data — pages visited, approximate location (country), browser and device identifiers, IP address.

We do not collect payment card numbers. Direct orders store your transaction reference and any optional payment proof you submit.

3. Why we use it (purposes and legal basis)

• Creating and managing your account and delivering your purchases — performance of a contract.
• Providing downloads, license records and customer support — performance of a contract.
• Security, fraud prevention and protecting our content (watermarks, download limits) — legitimate interests.
• Improving the website and understanding visitor numbers — legitimate interests.
• Meeting legal and tax obligations — legal obligation.

4. Who we share data with

• Service providers / subprocessors — hosting, database and analytics providers that run this website.
• Professional advisers — legal or accounting advisers where needed.
• Authorities — where required by law.

5. International transfers

Our service providers may process data outside your country (including outside the UK/EEA). Where required, transfers are protected by safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above (for example, order and license records for as long as your license is valid and as tax law requires), then delete or anonymise it.

7. Your rights

Depending on your country, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. UK/EEA users also have the right to complain to their data protection authority; we respond to requests within one month. To exercise any right, contact us via the Support page.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and signed, time-limited download links.

9. Cookies

We use essential cookies/storage for sign-in and security, and analytics storage to count visitors. You can block cookies in your browser settings; essential features may stop working if you do.