1. Data controller
The data controller for the personal data collected through wptemplatekit.com is:
This policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. What data we collect
2.1. Data you provide directly
- Account registration: username, email address and password (stored only as a secure hash).
- Purchases: name, email and billing address requested at checkout, required by the payment processor and for invoicing and fraud prevention.
- Contact form: name, email, subject and message content.
- Memberships: plan purchased, subscription status and download activity associated with your account.
2.2. Data collected automatically
- Technical browsing data (IP address, browser type, pages visited) necessary for security and service operation.
- Anonymous usage statistics through Google Analytics (see our Cookie Policy).
Payment card details are never stored on our servers: they are processed directly by Stripe under its PCI-DSS certification.
3. Purposes and legal bases
- Managing your account and purchases (contract performance, Art. 6.1.b GDPR).
- Processing payments and preventing fraud (contract performance and legitimate interest, Art. 6.1.b and 6.1.f GDPR).
- Answering your enquiries through the contact form (legitimate interest / pre-contractual measures, Art. 6.1.f and 6.1.b GDPR).
- Sending purchase receipts and service communications (contract performance).
- Usage statistics to improve the site (consent where required, Art. 6.1.a GDPR).
- Tax and accounting obligations (legal obligation, Art. 6.1.c GDPR).
4. How long we keep your data
Account and purchase data is kept while your account remains active and, afterwards, for the periods required by tax and accounting regulations. Contact form messages are kept for a maximum of 12 months. You can request deletion at any time (see section 7).
5. Who we share your data with
We only work with the processors strictly necessary to operate the service:
- Stripe, Inc. (USA) — payment processing. Stripe Privacy Policy.
- Google LLC (USA) — reCAPTCHA anti-spam protection on forms and Google Analytics statistics. Google Privacy Policy.
- Hosting provider — stores the site and its database under a data processing agreement.
Data is never sold or shared with third parties for marketing purposes.
6. International transfers
Stripe and Google process data in the United States under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission, which guarantee an adequate level of protection.
7. Your rights
You may exercise, free of charge, your rights of access, rectification, erasure, restriction, portability and objection, as well as withdraw any consent given, by writing to hello@wptemplatekit.com from the email address associated with your account. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
The site uses SSL/TLS encryption for all connections, secure password hashing, anti-spam protection (reCAPTCHA v3) and PCI-compliant payment processing. Access to personal data is restricted to what is strictly necessary.
9. Minors
This site is not directed at persons under 18 years of age, who must refrain from registering or making purchases.
10. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be available at https://wptemplatekit.com/. Significant changes will be notified on the site.
