Privacy Policy
Introduction
WonderWP ("we", "us", or "our") operates a WordPress fleet management platform and related services. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in connection with your use of our platform, website, and customer services. It applies to all users worldwide, including visitors, registered account holders, and paying subscribers. By accessing or using our services, you acknowledge that you have read and understood this policy.
Information we collect
We collect information you provide directly when you register an account, subscribe to a plan, submit a support request, or contact us. This includes your name, email address, business name, billing address, and payment details processed through our payment providers. We also collect information generated by your use of the platform, such as the features you access, configuration settings, actions you take on managed sites, and support correspondence. Additionally, we automatically collect certain technical data including IP addresses, browser type and version, device identifiers, operating system, referring URLs, and session activity logs required to operate and secure the service.
How we use your information
We use personal information to create and maintain your account, deliver the subscription services you have purchased, process payments and manage billing, provide customer support and respond to your requests, detect and prevent unauthorized access, fraud, and abuse, enforce our terms of service, comply with applicable legal and tax obligations, send transactional and service notifications about your account or service status, and improve platform functionality and user experience. We send optional marketing communications only where you have consented or where applicable law permits, and you may opt out at any time using the unsubscribe link in any such communication.
Legal basis for processing
Where the General Data Protection Regulation (GDPR) or equivalent legislation applies to your location, we rely on the following legal bases to process your personal data: performance of a contract, where processing is necessary to deliver the services you have subscribed to or to fulfill pre-contractual obligations; legitimate interests, where we have a legitimate operational purpose such as security monitoring, fraud prevention, or product improvement that is proportionate and not overridden by your fundamental rights; legal obligation, where we are required by applicable law to retain, process, or disclose data; and consent, for optional marketing communications or any other processing for which we have explicitly requested your agreement.
Data sharing and disclosure
We do not sell, rent, or trade personal information to or with third parties for their independent marketing purposes. We share personal data only in the following circumstances: with carefully selected service providers and subprocessors who assist us in operating the platform, such as payment processors, cloud infrastructure providers, email delivery services, and customer support tools, all of whom are bound by contractual data protection obligations; with professional advisers including lawyers, accountants, and auditors under duties of confidentiality; with regulatory, tax, or law enforcement authorities when disclosure is required by applicable law, regulation, court order, or to protect the rights, property, or safety of WonderWP or others; and in connection with a merger, acquisition, or sale of business assets, where customer data may be transferred subject to equivalent privacy protections and prior notification.
Cookies and tracking technologies
Our platform uses cookies and similar technologies including local storage and session identifiers. Essential cookies are strictly necessary for the platform to function, authenticate sessions, and maintain security, and cannot be disabled. Optional analytics cookies help us understand how users interact with the platform so we can improve it; these are only activated where you have given consent through our cookie preference panel. You can review, update, or withdraw your cookie consent at any time via the cookie settings link in the page footer. Certain third-party service integrations such as payment providers may set their own cookies governed by their own privacy policies.
Data retention
We retain personal data for as long as your account is active and for a reasonable period afterward sufficient to satisfy tax, audit, contractual, and dispute resolution obligations. Billing and transaction records are retained for the period required by applicable financial and tax regulations, which is typically seven years. Support correspondence is retained for the duration of the service relationship and for a defined period following account closure. We delete or anonymize personal data that is no longer necessary for the original purpose of collection, subject to any legal hold, regulatory requirement, or ongoing dispute that may require longer retention.
Data security
We implement appropriate technical and organizational measures designed to protect personal data from unauthorized access, alteration, disclosure, and destruction. These measures include access controls and role-based permissions, encryption of data in transit using industry-standard TLS, secure credential storage, regular review of security practices, and restricted access to production systems. While we take security seriously, no system is completely secure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities within the timeframes required by applicable law.
International data transfers
WonderWP operates globally. To deliver our services, personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where data transfers occur from the European Economic Area, the United Kingdom, Switzerland, or other regions with specific transfer restrictions, we rely on appropriate safeguards such as standard contractual clauses approved by relevant authorities, adequacy decisions, or other mechanisms permitted by applicable law. You may request information about the specific transfer safeguards applicable to your data by contacting us.
Your rights and choices
Depending on your location and applicable law, you may have the following rights regarding your personal data: the right to access a copy of the personal data we hold about you; the right to request correction of inaccurate or incomplete data; the right to request deletion of your personal data in certain circumstances; the right to restrict processing while a dispute about accuracy or lawfulness is resolved; the right to object to processing based on legitimate interests or for direct marketing purposes; and the right to data portability in a structured, machine-readable format where processing is based on consent or contract. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, used, and disclosed, and the right to opt out of any sale of personal information — we do not sell personal information. Residents of Brazil, South Korea, Japan, Australia, and other jurisdictions with dedicated privacy legislation may have additional rights under their applicable local law. To exercise any of these rights, please contact us using the details in the section below. We will respond within the timeframe required by applicable law and may ask you to verify your identity before processing your request.
Children's privacy
The WonderWP platform is intended for use by businesses and professionals and is not directed at individuals under the age of 18. We do not knowingly collect, store, or process personal information from children under 18. If you believe that a minor has provided personal data to us without appropriate parental or guardian consent, please contact us immediately and we will take prompt steps to remove such information from our systems.
Third-party services and links
Our platform may integrate with or contain links to third-party services, tools, and websites such as Google Analytics, Google Search Console, payment processors, and CDN providers. These third parties have their own privacy policies and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you access through or in connection with our platform.
Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable law, or privacy practices. When we make material changes, we will update the date at the top of this page and, where required by law or where we consider it appropriate, notify you by email to the address associated with your account. We encourage you to review this policy periodically. Your continued use of the platform after any update constitutes your acknowledgment of the revised terms.
Contact us about privacy
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to submit a data access, deletion, correction, or portability request, please reach out through our Contact.