1. Who is responsible for your data
WP Secure Lite (“we”) is responsible for the personal data collected through this website, email support and the management of WP Secure Lite plugin licences. This notice explains what data is collected, what it is used for and how you can exercise your rights, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and any other applicable law.
For anything related to this notice, including a request for our address for legal notices, email us at support@wpsecurelite.com.
2. Data collected
On our side we only keep what you send us when you email support. Everything related to the purchase and the licence is collected and stored by Freemius:
- If you email support: your email address, your name if you include it, and whatever we ask for or you choose to tell us to solve the problem (for example your site URL, WordPress and PHP versions, a description of the problem or screenshots).
- If you buy a licence: payment is processed by Freemius, which collects and keeps your purchase, payment and billing details directly. We never see or store your card details. Freemius only gives us access to your purchase and licence details (name, email, plan, sites and licence status) so we can help you.
- If you activate the licence on your site: the plugin sends Freemius the site URL, the name and email of the WordPress user who activates it, the plugin and SDK versions, and whether the plugin is active, deactivated or uninstalled. Optionally, and you can switch this off on the activation screen, it can also send diagnostic information (WordPress and PHP versions, site language and title) and the list of installed plugins and themes.
- If you browse this site and accept analytics cookies: aggregated usage data from Google Analytics (pages visited, device and browser type, approximate country or region), with your IP address anonymised.
We do not collect sensitive personal data.
What the plugin does on your site. Security logs (for example the IP addresses of blocked requests) are stored in your own site’s database, deleted automatically after 90 days and never sent to us. To warn you about known security flaws, the plugin periodically queries a public vulnerability database, sending only the name and version of your plugins, themes and WordPress, never your site URL or personal data. This feature can be switched off. To verify WordPress files it queries the official WordPress servers, sending only your WordPress version and site language.
3. What your data is used for
We use your data for these purposes, which are needed to provide the service:
- Answering your questions and support requests.
- Managing your licence: activating it, linking it to your sites and checking that it is valid.
- Delivering plugin updates.
- Handling payments, renewals and refunds through Freemius.
- Sending you notices about your licence or the service.
- Meeting legal and tax obligations.
And for one additional purpose, only if you accept it: measuring visits to this site in aggregate to improve it. You can reject it in the cookie notice without affecting your purchase or support.
4. Cookies and similar technologies
This site only uses analytics cookies (Google Analytics), and they are not loaded until you accept them in the cookie notice. If you reject them, none are set.
Your browser also stores two preferences that do not identify you: whether you accepted or rejected cookies, and the language you prefer to see the site in.
When you open checkout, the Freemius payment window may use its own cookies, needed to complete the payment; they are governed by the Freemius privacy policy.
You can delete or block cookies at any time in your browser settings.
5. Who your data is shared with
We do not sell, rent or hand over your data. Only these are involved, as far as necessary:
- Freemius (United States): authorised reseller that processes payments, issues invoices and manages licences, updates and refunds. See its privacy policy.
- Google (Google Analytics): visit measurement, only if you accept it.
The providers that give us web hosting and email process data solely on our behalf and to provide that service. Some of these providers operate outside Mexico. We may also disclose data to the authorities when required by law or by an order from a competent authority.
6. Your rights and how to withdraw consent
You have the right to access, correct and delete your data, to object to its use and to withdraw your consent. If you are in the European Union, the EEA or the United Kingdom, you also have the rights granted by the GDPR, including data portability. Depending on where your data is:
- What you sent to support: email support@wpsecurelite.com from the same address, saying what you want to see, correct or delete. We will reply within the time limits set by applicable law.
- Your purchase, payment, billing and account data: managed by Freemius. You can see and change it in your Freemius customer account or ask Freemius under its privacy policy. If you prefer, email us and we will help you with it.
Please note that if you delete the data needed for the licence, we may no longer be able to provide updates or support.
7. How long data is kept
We keep your data only as long as needed for the purposes described and to meet our legal and tax obligations:
- Support emails, while they are useful to help you and for a reasonable time afterwards.
- Analytics data, according to the Google Analytics retention settings.
Purchase and licence data is kept by Freemius according to its own privacy policy.
8. Changes to this notice
We may update this notice to reflect changes in the law, the site or the service. The current version will always be on this page, with its last-updated date at the top. If the change is significant, we will also announce it on the site.
9. Contact
For any question about this notice or about how your data is handled, email us at support@wpsecurelite.com.