Effective from: 1 September 2026

## 1. Data controller

Your personal data is controlled by Przemysław Szczęch, trading as wpAsist.eu, ul. Juliusza Słowackiego 17j, 36-040 Boguchwała, Poland, running a non-registered business activity (the “Controller”).
Contact for data protection matters: help@wpasist.eu, phone +48 667 548 210.

## 2. What data we collect and why

| Purpose | Data | Legal basis (GDPR) | How long |
| Processing your order and delivering the licence | name, e-mail, address, company name, receipt or invoice details | Art. 6(1)(b) (contract) | for the licence term, then until claims expire |
| Licence and update functionality | licence key, address (domain) of the site where the plugin is activated, WordPress / WooCommerce versions | Art. 6(1)(b) (contract) | for the licence term + 12 months |
| Free trial (3 days) | e-mail, site address | Art. 6(1)(b) (steps before entering a contract) | 12 months |
| Accounting and tax obligations | data on receipts and invoices | Art. 6(1)(c) (legal obligation) | 5 years from the end of the year in which the tax obligation arose |
| Support, complaints, refunds, quotes | message content, e-mail, data entered in the form | Art. 6(1)(b) and (f) (contract, legitimate interest in handling enquiries) | until the matter is closed, then until claims expire |
| Partner program | account data, referral statistics, commissions, bank account number; for private individuals also the data needed for tax settlement | Art. 6(1)(b) and (c) (contract, legal obligation) | while you take part in the program, then 5 years for tax documents |
| Newsletter and automated e-mails (if you subscribe) | e-mail, first name, e-mail opens and link clicks | Art. 6(1)(a) (consent) | until you withdraw consent |
| Statistics and advertising (cookies) | data about visits and device | Art. 6(1)(a) (consent in the cookie banner) | according to cookie settings, up to 14 months |

Providing data is voluntary, but we cannot process an order without the data needed for it.

## 3. Who we share data with

Your data may be received only by companies that help us run the store:

– the hosting company whose servers run the website: SEOHOST.pl (website hosting and licence server),
– payment providers, depending on the method you choose: HotPay and Stripe,
– the e-mail provider: SEOHOST.pl (mailboxes help@wpasist.eu and przemek@wpasist.eu),
– MailerLite (MailerLite Limited, Ireland): sending the newsletter and automated e-mails,
– Google (Google Analytics, Google Ads, YouTube), Meta (Facebook, Instagram) and TikTok (TikTok Technology Limited, Ireland) – only if you accept statistics or marketing cookies; the data is used to measure traffic and to show our ads on these platforms and measure their results,
– an accountant or tax adviser, if we use one,
– public authorities, where required by law (e.g. the tax office).

We never sell your data.

## 4. Transfers outside the European Economic Area

Some providers (e.g. Stripe, MailerLite, Google, Meta, TikTok) may process data in the USA or other countries outside the EEA. This is based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

## 5. Cookies

1. Essential cookies (cart, login, security) are always active, because the store cannot work without them.
2. Statistics and marketing cookies are set only after you consent in the cookie banner. You can change your choice at any time via the “Cookie settings” link in the website footer.
3. YouTube videos embedded on the website load in privacy-enhanced mode. YouTube cookies are set only once you play a video.
4. The partner program stores in your browser, for 30 days, which referral link brought you to the store. This is used only to credit the commission to the right partner.

## 6. Your rights

You have the right to:

– access your data and receive a copy,
– correct your data,
– have your data erased (unless we must keep it by law),
– restrict processing,
– data portability,
– object to processing based on legitimate interest,
– withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise your rights, write to help@wpasist.eu. We will reply within one month.

You also have the right to lodge a complaint with the Polish supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the data protection authority in your country.

## 7. Security

The website uses an encrypted connection (SSL). Only authorised persons have access to the data. We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects.

## 8. Changes to this policy

We may change this policy, e.g. when laws or providers change. The current version is always available on this page.