Privacy Policy

This Privacy Policy explains what personal data Onimator collects, why we collect it, and the rights you have over it. It should be read alongside our Terms & Conditions.

Who controls your data

The data controller is INSTAMAX LTD, a company registered in England & Wales (company number 10708488), registered office Suite 18 Equity Chambers, 249 High Street North, Poole, BH15 1DX, United Kingdom. We process your data under the UK GDPR and the Data Protection Act 2018.

What we collect

• Your email address — used to deliver your licence key, to sign you in to the customer portal, and to contact you about your purchase.
• Payment records — the provider used, a transaction reference, the amount, the plan, and the payment status. Your card or wallet details are handled by our payment providers and never reach our servers.
• A hardware fingerprint — a one-way SHA-256 hash derived from the device your licence runs on. It locks a licence to its device and prevents key sharing. It is not reversible into the device's underlying details.
• Licence activity — the days on which a licence checks in from a device. We use this to run the loyalty reward and to detect abuse. The count is stamped by our server clock, not the device's.
• Your IP address and request metadata — recorded when you use the Service, to rate-limit requests, prevent fraud, and keep the Service secure.

Why we use it, and our legal basis

• To provide the Service — creating, delivering, and validating your licence, and running your subscription. Legal basis: performance of our contract with you.
• To take payment — processing your purchase and renewals through our providers. Legal basis: performance of our contract with you.
• To keep the Service secure — rate-limiting, machine-locking, and fraud prevention. Legal basis: our legitimate interest in protecting the Service and other customers.
• To meet our legal duties — keeping transaction records for tax and accounting. Legal basis: compliance with a legal obligation.

Who we share it with

We do not sell your data. We share it only with the providers we need to run the Service:

• Payment providers — PayPal, Chargebee, and NOWPayments process payments and subscriptions. Your card and wallet details are entered with them, not us.
• Email delivery — our email is sent through a business email provider (Private Email) so we can deliver your licence key and account messages.
• Infrastructure — Cloudflare sits in front of the Service as a proxy and content network, and processes request data (including your IP) to route and protect traffic.

We may also disclose data where the law requires it.

How long we keep it

We keep your account and licence data for as long as your licence is active and for as long as we need it to run the Service. Payment and transaction records are kept for as long as tax and accounting law requires (generally six years in the UK). When data is no longer needed, we delete or anonymise it.

Where your data is processed

Our providers may process data outside the UK. Where they do, we rely on the safeguards those providers offer for international transfers, such as the UK's approved transfer mechanisms.

Cookies

The checkout and customer portal use only the cookies that are strictly necessary to work: a session cookie that keeps you signed in and a token that protects forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies on this Service.

Your rights

Under UK data-protection law you have the right to access the data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive a copy in a portable form. To exercise any of these, contact us using the details below.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you think we have handled your data wrongly. We would prefer the chance to put things right first, so please contact us before you do.

Contact

To ask about this policy or to exercise your rights, reach our support team through your account portal or our official support channel. Data-protection enquiries are handled by INSTAMAX LTD at the registered address above.

Changes to this policy

We may update this policy from time to time. When we do, we post the revised version here with a new "last updated" date.