Who we are
Buklot is a website template product operated by Mindscrollers LLC ('we', 'us'). This policy covers the marketing and sales site at this domain, the live demo we link to, and the customer portal where licence holders manage their account and support tickets. For privacy questions, email hello@buklot.com.
What we collect
- Information you give us: name, email, business name, phone, and message when you submit the Custom Design inquiry form, and the same when you contact support. Payment is handled by Stripe; we never see or store full card numbers.
- Licence and support data: if you purchase, we store your licence key, account email, plan, purchase reference, login timestamps, download history, and the contents of any support tickets you open.
- Usage data: standard server logs (IP address, user agent, pages requested) and, only if you accept analytics and marketing cookies, the Meta Pixel and Google Analytics 4 (GA4). These load from providers in the United States, so accepting them transfers usage data to the US. Without consent, those scripts do not load.
How we use it
To respond to inquiries, fulfil purchases (issue licences, send download links), provide support, send transactional emails, prevent abuse, and, with your consent, measure marketing performance. We do not sell your personal data. Our legal bases under Article 6 GDPR are: consent for analytics and marketing (which you can withdraw at any time); performance of a contract for account, licence and billing data; and our legitimate interest in security, fraud prevention and, where you have consented, measuring how the site performs.
Who we share it with
Service providers acting on our behalf: Stripe (payments), our SMTP and email provider (transactional email), Hostinger (hosting, in an EU region) and, only if you accept analytics and marketing cookies, Google (Google Analytics 4) and Meta (advertising measurement). We may disclose data if required by law.
Cookies
We use a small number of strictly necessary cookies (session, security, language, and your cookie choice itself). Analytics and marketing cookies (the Meta Pixel and Google Analytics 4) load only after you choose 'Accept all' in the banner. You can change or withdraw your choice at any time using the 'Cookie settings' link in the footer.
Retention
Inquiry submissions and support tickets are kept for as long as needed to provide support and for our records. Licence records are kept for the life of the licence plus a reasonable period for accounting and dispute resolution. Server logs are kept short-term for security and debugging.
Your rights
Depending on where you live (including the EU and UK), you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email hello@buklot.com. You can also lodge a complaint with your local data protection authority.
International transfers and security
Some of our providers are based outside your country; where required we rely on appropriate safeguards. We protect data with HTTPS, hashed credentials, signed session tokens, and access controls, but no system is perfectly secure.
Changes
We'll update this page when our practices change and revise the 'last updated' date.