Privacy Policy

Who we are

This website, wp-fse.com, and the WordPress plugins Blocks Starter Templates and Starter Templates PRO are run by WP FSE (“we”, “us”). We are the controller of the personal data described here. Questions and requests: info [at] wp-fse.com or our contact form.

Summary

• We do not use analytics, advertising or tracking cookies, and we do not sell personal data.
• Visitors who only browse the site get no cookies. The fonts are served from our own server.
• Payments are handled by FastSpring, our reseller; we never see your card details.
• We keep only what we need for your licence, downloads, support and the law.

Data we process

Visiting the website

Like every web server, ours records technical data of each request (IP address, date and time, requested address, browser and referring page) in server logs, for security and to fix errors. The logs are kept by our hosting provider and deleted automatically after a short time. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Cookies

We use only cookies that are needed for functions you ask for: WordPress login cookies when you sign in to your account, and WooCommerce cart and session cookies when you add a licence to the cart. No consent is needed for these, and they are not used to track you.

Your account and orders

When you buy a licence we store your name, email address, user name, order details (product, price, date) and the licence key. When you activate the key, we store the website addresses (domains) it is activated on, so we can deliver updates, the template library and support. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations for accounting (Art. 6(1)(c) GDPR).

Payments (FastSpring)

The purchase itself is made with FastSpring (Bright Market, LLC d/b/a FastSpring, Santa Barbara, USA), which is the seller of record. FastSpring processes your payment, billing address and VAT details under its own privacy policy and sends us only what we need to deliver the licence (name, email, order). FastSpring may transfer data to the USA under the safeguards described in its policy.

Contact form and email

When you write to us, we receive your name, email address, subject, website address (optional) and message. The message is stored on our website and sent to our mailbox, so we can answer. Legal basis: your request and our legitimate interest in answering it; for customers also the contract. A hidden spam trap field is part of the form; it does not collect personal data.

Our plugins on your website

Blocks Starter Templates and Starter Templates PRO connect to wp-fse.com to load the list of the template library, previews, template files and the pictures of templates you import (they are copied into your Media Library). These requests contain the plugin version and your website address (as WordPress does for updates) and, like any request, the IP address of your server. Starter Templates PRO also sends your licence key and website address to check the licence and to deliver updates and premium templates. We use this data only to provide these services and to protect them from abuse. Legal basis: the contract with PRO customers and our legitimate interest in running the free library.

Processors and recipients

• Hosting and email: This website, its database and our mailbox are hosted in the EU.
• FastSpring (USA): sale and payment of the licences, as described above.
• WordPress.org: the free plugin and its support forum are hosted there under the WordPress.org privacy policy.

We do not share your data with anyone else, unless the law requires it.

How long we keep data

• Account, orders and licences: while your account exists, and order records for as long as accounting and tax law requires.
• Licence activations: while the licence is active, and up to one year after it expires.
• Messages from the contact form: up to two years after the last contact, unless they belong to an ongoing order or support case.
• Server logs: a few weeks, as set by our hosting provider.

Your rights

Under the GDPR you can ask us for access to your data, its correction or deletion, the restriction of processing and a copy of your data in a portable format, and you can object to processing based on our legitimate interest. Write to info [at] wp-fse.com; we answer within one month. You can also lodge a complaint with a data protection authority, for example in the country where you live.

Security

The website is served over HTTPS only, passwords are stored as hashes, and access to the administration is limited to us.

Changes

We update this policy when our services change. The date at the top shows the current version.