Privacy Policy — 24h.limited

Last updated: November 6, 2025

This Privacy Policy explains how 24h.limited (“we”, “us”) collects, uses, and shares information when you visit our website, create an account, purchase our digital products (e.g., WordPress themes/templates, plugins, online courses, and related digital services), or otherwise interact with us.

1) Controller

Legal entity: Neng Liang Co., Limited
Company number (Hong Kong): 77268710
Registered/Business address: Unit 04-05, 16/F The Broadway, 54–62 Lockhart Road, Wan Chai, Hong Kong
Business Registration Certificate No.: 77268710-000-11-24-0
Date of incorporation: 1 November 2024
Contact email: support@24h.limited

For EEA/UK residents: If required by law, we may appoint an EU/UK representative; their details will be added to this page when applicable.

2) Data we collect

Identity & contact: name, email address, billing address(es).
Account: username, hashed password, settings, purchase history.
Transaction: purchased items, amounts/currencies, delivery/licensing status. Note: we do not store full payment card data; payment processing is handled by our payment partners.
Technical/usage: IP address, device/browser/OS, language, referrer, on-site activity, cookies and similar technologies.
Marketing preferences & communications: consents/opt-outs, support messages, survey responses.

3) Sources

Directly from you (registration, checkout, support).
Automatically via cookies, SDKs, and server logs.
From third parties (e.g., payment processors, analytics, anti-fraud tools, ad platforms, marketplaces/Merchant-of-Record partners).

4) Purposes & legal bases (GDPR where applicable)

Contract performance (Art. 6(1)(b)): order processing, licensing/invoicing, delivering digital content, support.
Legitimate interests (Art. 6(1)(f)): service security and fraud prevention, product improvement, internal analytics.
Consent (Art. 6(1)(a)): analytics & marketing cookies, newsletters, personalized offers (withdraw anytime in “Cookie Settings” or via the unsubscribe link).
Legal obligations (Art. 6(1)(c)): accounting, taxation, regulatory requests.

Service providers (processors): hosting/CDN, account/subscription systems, email delivery, licensing/update servers, analytics, anti-fraud, advertising platforms (where consented), customer support.
Payment processors / Merchant-of-Record (MoR): We may use providers such as Lemon Squeezy and comparable PSP/MoR services. In some jurisdictions an MoR acts as seller of record and an independent controller for tax/compliance and payment processing. Please review their privacy notices.
Authorities/advisors: where required by law or to protect our rights.

6) International transfers

Your data may be processed outside your country (e.g., in Hong Kong, the United States, or other locations where our providers operate). For EEA/UK transfers, we rely on Standard Contractual Clauses and related safeguards, alongside transfer risk assessments.

7) Data retention

Accounts & purchase history: for the life of the account and a reasonable period thereafter.
Transaction & tax records: up to 10 years (subject to tax laws).
Security logs & technical records: typically 12–24 months.
Marketing data: until consent is withdrawn or you object.
Cookies: per our Cookie Policy (often up to 13 months for analytics/marketing cookies).

8) Your rights

Where applicable (e.g., under GDPR/UK GDPR), you may have rights to access, rectify, erase, restrict, data portability, and object (including to processing based on legitimate interests and to profiling for marketing), and to withdraw consent at any time. You may also lodge a complaint with a supervisory authority.

To exercise rights or make a request, contact support@24h.limited.

9) Marketing communications

We send newsletters and promotional emails only with your consent or where permitted by law. You can unsubscribe at any time or adjust preferences in Cookie Settings.

10) Cookies & similar technologies

We use cookies for essential functionality, analytics, marketing, and secure checkout. See our Cookie Policy for details and category lists. You can manage choices any time in Cookie Settings.

11) Security

We implement technical and organizational measures (e.g., TLS encryption in transit, access controls, least-privilege, pseudonymization where appropriate) to protect your data. However, no system is entirely secure.

12) Children

Our services are not directed to individuals under 16. We do not knowingly collect children’s data. If you believe a child provided data to us, please contact us for deletion.

13) Automated decision-making

We do not conduct automated decision-making that produces legal or similarly significant effects concerning you.

14) Changes to this Policy

We may update this Policy from time to time. The updated version will be posted here with a new “Last updated” date. If changes materially affect your rights, we will notify you via the site or email.

15) Contact

24h.limited
Controller: Neng Liang Co., Limited, Company No. 77268710
Address: Unit 04-05, 16/F The Broadway, 54–62 Lockhart Road, Wan Chai, Hong Kong
Email: support@24h.limited
See also our Terms of Service and Cookie Policy.