Privacy Policy

Effective date: October 6, 2025

This Privacy Policy describes how WPBase.eu (“we”, “our”, “us”) collects, uses, discloses, and protects personal data when you visit our website, purchase digital products (plugins and themes), use our services, or otherwise interact with us.

1. Data Controller

The controller of your personal data collected through this website is the individual entrepreneur:

Jan Vašek
ID No: 01256815
Registered in the Czech Trade Register

Business address:
Sekaninova 22
128 00 Prague
Czech Republic

If you have any questions about this privacy policy or our data protection practices, please feel free to contact us:

2. Information We Collect

We collect and process personal data necessary to provide our services, operate our store, and comply with legal obligations. This includes:

a) Information you provide directly

  • Account information (name, email address, billing/shipping address if applicable).
  • Order details and purchase history (products purchased, license keys, invoices).
  • Support requests and communications (messages you send via contact forms, email or support systems).
  • Payment information when you buy a product (see Section 4).

b) Automatically collected information

  • Technical data such as IP address, browser type, device details, and pages visited.
  • Usage data related to how you interact with our website and product pages.
  • Cookies and tracking technologies (see Section 7).

c) Data related to plugin usage

Some plugins offered by WPBase may collect usage data or connect to third-party services (for example, when you enable AI features that use external APIs). Any data exchanged with third-party services depends on the plugin’s settings and your configuration (for example, if you provide an API key). Please review each plugin’s documentation and settings to understand which data is transmitted.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes and legal bases:

  • To provide products and services: processing is necessary for contract performance (fulfilling orders, delivering downloads, issuing license keys, providing updates).
  • Payments and billing: necessary to process transactions and issue invoices.
  • Customer support: handling support requests and communications (consent/contract).
  • Marketing: with your consent, we may send promotional emails and newsletters. You may opt out any time.
  • Security and fraud prevention: legitimate interests to protect our business and customers.
  • Legal compliance: to comply with legal obligations (e.g., tax and accounting rules).

4. Payments and Financial Data

We use WooCommerce as our e-commerce platform and Stripe as our payment processor. WPBase does not store your full payment card details on our servers. Payment card information is handled directly by Stripe according to their privacy and security policies.

Stripe’s privacy practices and processing details are available on Stripe’s website.

5. Licenses, Downloads and Updates

When you purchase a plugin or theme from WPBase, you receive a license valid for one (1) year from the date of purchase, which typically includes plugin updates and access to downloads for the license period. To manage licenses and provide updates we store order information, license keys and the email address used at purchase.

License renewals, download history and update access are kept to support the service and may be retained for accounting, legal and support purposes (see Section 9 on retention).

6. Third Parties and Processors

We use trusted third-party service providers to support our operations. These may include:

  • WooCommerce / WordPress hosting and services — for order handling and product delivery.
  • Stripe — for payment processing.
  • License management and update delivery services — to handle license verification and plugin theme updates.
  • Optional analytics and email services — if enabled, to analyze site usage and send transactional or marketing emails.
  • Third-party APIs used by plugins — e.g., AI providers (OpenAI) if you enable AI features in a plugin; those API providers will process the data according to their own terms and policies.

We only share personal data with subprocessors where necessary and require them to process data in accordance with this policy and applicable law.

7. Cookies and Tracking

We use cookies and similar technologies to improve your experience, provide core site functionality and analyze usage. Types of cookies may include:

  • Essential cookies: required for the site and checkout to function (session, cart cookies).
  • Functional cookies: to remember preferences and logged-in state.
  • Analytics & performance cookies: to understand site usage (may involve services such as Google Analytics if enabled).
  • Marketing cookies: optional cookies used for advertising and tracking user interests (only when consented).

You can manage cookie settings through your browser and via any cookie consent controls shown on the site.

8. Security

We implement reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. These measures include secure hosting, encrypted connections (HTTPS), access controls, and regular software updates.

However, no internet transmission or storage is fully secure — if you suspect a security breach, please contact us immediately at info@wpbase.eu.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including legal, tax and support obligations. Typical retention periods include:

  • Order and billing records — retained for accounting and tax purposes in accordance with applicable law (commonly several years).
  • License and download data — retained for the duration of the license and reasonable period afterwards for support and fraud prevention.
  • Support communications — retained as long as necessary to resolve the issue and for a reasonable archival period.
  • Marketing consents — retained until you withdraw consent.

10. International Data Transfers

Some of our service providers (including Stripe and certain hosting or analytics providers) may process data outside the European Economic Area (EEA). When we transfer personal data internationally, we take appropriate steps to ensure that your data is protected, for example by using providers that implement EU standard contractual clauses, recognized transfer mechanisms, or other safeguards.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data (“right to be forgotten”) where we have no legal reason to retain it.
  • Request restriction of processing.
  • Request portability of your data in a commonly used format.
  • Withdraw consent to processing where consent was the legal basis.
  • Object to processing based on our legitimate interests.

To exercise any of these rights, please contact us at info@wpbase.eu. We will respond to legitimate requests in accordance with applicable law.

12. Children

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can take appropriate steps to delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Effective date” at the top of this page. Substantial changes may be communicated by email to registered users or by a prominent notice on our website.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact: