Last updated: 1 August 2026
This page is the practical companion to our privacy notice. It sets out each right you have under the UK General Data Protection Regulation and exactly how to use it. The data controller is Terabold Ltd, trading as ThemeStack, registered in England and Wales under number 16687390.
Making a request
Email hey@terabold.com with the subject line "Data request" and tell us which right you are exercising. Send it from the address on your account if you can, because that is the fastest way for us to confirm it is you.
We respond within one month. If a request is genuinely complex we may extend by two further months, and we will tell you why within the first month. Requests are free unless they are manifestly unfounded or repetitive.
Right of access
You can ask for a copy of the personal data we hold about you.
We will send a machine-readable export containing your account record, every order, every licence key and its activations, and your download history. Server logs are included where they can be linked to your account.
Right to rectification
You can ask us to correct data that is wrong or incomplete.
Your name and email can be changed from your account page immediately. For anything else, write to us and we will correct it and confirm what changed.
Right to erasure
You can ask us to delete your personal data, with one significant exception.
We must keep purchase records for seven years to comply with tax law in the United Kingdom, so those cannot be erased on request. Everything else goes: account record, sign-in sessions, download history, marketing preferences.
Deleting your account also ends your ability to download the themes you bought, because the licence is tied to the account. We will say this again when you ask, so nobody deletes an account by accident.
Right to restriction
You can ask us to pause processing while a dispute is resolved.
In practice this means we keep your data but stop using it, other than for storage, until the disagreement about accuracy or lawfulness is settled.
Right to data portability
You can ask for the data you gave us in a structured, commonly used, machine-readable format.
We provide JSON. If you want it sent directly to another provider, name them and we will do it where it is technically feasible.
Right to object
You can object to processing based on legitimate interests, and you can object to direct marketing at any time.
Marketing objections are absolute: we stop immediately and permanently. For legitimate-interest processing, such as fraud and licence-abuse detection, we will weigh your objection and explain the outcome in writing.
Automated decision-making
We do not make automated decisions with legal or similarly significant effects, and we do not profile customers.
Complaints
If you are not satisfied with our answer, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. Please give us a chance to fix it first; we are small enough to answer properly.
ThemeStack is an independent theme studio and is not affiliated with Shopify Inc.