Privacy Policy

01Overview

CHADA Store is operated by CHADA. We act as the data controller for personal data processed through our website, store, and licensing system. This policy applies to that data and explains your rights under applicable laws, including the GDPR and UK GDPR.

It does not cover third-party sites we link to, which have their own privacy practices.

02Information we collect

Information you provide

• Account & billing: name, email, and (for purchases) billing address, company, and VAT ID;
• Payment details: processed securely by our payment providers — we do not store full card numbers;
• Support messages: the content of tickets and emails you send us, including any site details you share.

Information collected automatically

• License check-ins: when our plugin is active on a site, it contacts our server to validate the licence and deliver updates — this includes the site URL, plugin version, and WordPress version;
• Usage & analytics: basic, privacy-respecting analytics about how the website is used (pages visited, approximate region);
• Device & log data: IP address, browser type, and timestamps, used for security and troubleshooting.

03How we use your information

We use the information above to:

• Process orders, issue licence keys, and manage renewals;
• Deliver plugin updates and validate active licences;
• Provide support and respond to your enquiries;
• Send essential service emails (receipts, renewal reminders, security notices);
• Send product news only if you opt in — and you can unsubscribe anytime;
• Detect, prevent, and investigate fraud, abuse, and security issues;
• Comply with our legal and tax obligations.

04Legal bases for processing

Where the GDPR applies, we rely on:

• Contract — to provide the products and licences you purchase;
• Legitimate interests — to secure our services, prevent fraud, and improve our products;
• Consent — for optional marketing emails and non-essential cookies;
• Legal obligation — to meet tax, accounting, and other legal requirements.

05Sharing & service providers

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under contract, including:

• Payment processors (e.g. Stripe, PayPal) to take payment;
• Email & support tools to send service messages and manage tickets;
• Hosting & infrastructure providers that run our website and licensing servers;
• Analytics providers, configured to minimise personal data.

We may also disclose data where required by law, or to protect our rights, users, or the public.

06Cookies & tracking

We use a small number of cookies to make the site work and to understand usage:

• Essential cookies — for login, your cart, and checkout. These can’t be switched off;
• Analytics cookies — to measure and improve the site, set only with your consent;
• Preference cookies — to remember choices like your region.

You can manage non-essential cookies through our cookie banner or your browser settings.

07Cart reminder emails

If you add a plugin to your cart on this store and leave without completing the order, we may email you a reminder with a link back to your cart. As a guest, we only do this after you have entered your email address at checkout and ticked the box agreeing to receive a reminder. If you are signed in to a customer account, we rely on our existing relationship with you as a customer (our legitimate interest in completing a purchase you started) to send it.

What we store

Your email address, the contents and value of the cart, the currency and language you were browsing in, when the cart was last updated, and which reminders we sent. This is stored on our own website and is not shared with or sold to anyone for their own purposes.

Open tracking

Our reminder emails include a small invisible image loaded from our website when the email is opened. We use it only to record the time the reminder was first opened, so we can tell whether reminders are useful. We do not record your device, location or IP address from it. Some email services, such as Apple Mail Privacy Protection, load images automatically, in which case an “open” may be recorded even if you did not read the message. When you follow the link in a reminder we record that it was used, and if you complete the order we record that the order came from the reminder.

Unsubscribe

Every reminder contains an unsubscribe link and supports one-click unsubscribe where your email provider offers it. If you unsubscribe, your address is added to a suppression list so we never email you a reminder again — which necessarily means the list keeps your address. Hard bounces and spam complaints reported by email providers are added to the same list for the same reason.

Retention

Reminder data for carts that were not completed is deleted automatically after 60 days. Where the cart was completed, the order is kept as part of our normal order records. You can ask for a copy of the reminder data we hold for your email address, or ask us to delete it, using the contact details below.

08Data retention

We keep personal data only as long as needed for the purposes above. Account and licence records are kept while your account is active; order and tax records are retained for the period required by law (typically several years). Support messages are kept for a reasonable period to maintain continuity, then deleted or anonymised.

09Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data or complete incomplete data;
• Request deletion of your data (“right to be forgotten”);
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, and unsubscribe from marketing.

To exercise any of these, email privacy@chada.store. You also have the right to complain to your local data-protection authority.

10Security

We protect your data with industry-standard measures: encryption in transit (TLS), restricted access on a need-to-know basis, and secure, monitored infrastructure. No system is perfectly secure, but we work continuously to safeguard your information and will notify you and the relevant authorities of any breach as required by law.

11International transfers

We and some of our providers may process data in countries outside your own. Where we transfer personal data internationally, we use appropriate safeguards — such as Standard Contractual Clauses — to ensure it remains protected to the standard required by applicable law.

12Children's privacy

Our products and store are intended for businesses and professionals and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

13Changes & contact

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and notify you where appropriate. Questions or requests about your privacy:

• Email: privacy@chada.store
• Support: chada.store/support