Privacy policy

1. Who's responsible for your data

Baltic Digital is run by me, Dan Cotugno-Cregin, a sole trader trading as Baltic Design and Baltic Digital, based in Gateshead, United Kingdom. I'm the data controller for the personal information described here. My contact details are at the bottom of this page.

2. What I collect

When you buy a plugin: your name, email address, billing address, order history and licence keys. Card and bank details go straight to Stripe or GoCardless; I never see or store them.

When you create an account: your username, email address and password, which is stored encrypted.

When you contact me: your name, email address and whatever you include in your message.

When you visit the site: your IP address, browser type, the pages you visit and the site that referred you, through server logs, Google Analytics, and WooCommerce's order attribution (see section 6).

3. My plugins

My plugins don't collect personal data about you, your customers or your site's visitors, and don't send it to me. If that ever changes, for example to add optional usage statistics, I'll update this policy first and make it opt-in.

4. How I use your information, and why I'm allowed to

• To process your order, deliver licence keys and provide updates and support. This is necessary to fulfil my contract with you.
• To send order confirmations, renewal notices and important product or security emails. Also part of fulfilling that contract.
• To keep financial records. This is a legal obligation.
• To understand how the site is used and which pages lead to sales, so I can improve it. This is my legitimate interest, and where cookies are involved, based on your consent.

I don't sell, rent or share your information for anyone else's marketing, and I don't send marketing emails unless you've asked for them.

5. Who else processes your data

A few trusted services process data on my behalf, each under its own privacy policy and data protection obligations:

• Stripe and GoCardless for payments
• Google Analytics for site statistics
• my web hosting provider for hosting the site and its server logs
• my email provider for sending and receiving email

Some of these services may process data outside the UK. Where they do, they're required to protect it to UK standards, for example under the UK's international data transfer agreements.

6. Cookies

The site uses:

• Essential cookies to keep you logged in, remember your basket and make checkout work. The site can't work without them.
• Analytics cookies from Google Analytics, which tell me how many people visit and which pages they use.
• Order attribution cookies from WooCommerce, which record how you arrived at the site (for example from a search engine) so I can see which sources lead to sales.

I don't use advertising cookies or share cookie data with advertisers. You can block or delete cookies in your browser settings; essential cookies are needed for checkout to work.

7. How long I keep it

I keep your account and order details while your account is active and you have licences with me. Financial records are kept for 6 years, as HMRC requires. If you ask me to delete your data, I'll do so within 30 days, apart from anything I have to keep for tax or legal reasons.

8. Your rights

Under UK data protection law, you can ask me to:

• give you a copy of the personal data I hold about you
• correct anything that's wrong or incomplete
• delete your data, subject to the legal retention above
• restrict or stop certain uses of your data
• give you your data in a format you can take elsewhere
• withdraw consent where I rely on it, such as for analytics cookies

Email [email protected] and I'll respond within one month.

9. Keeping it secure

The whole site runs over an encrypted connection, passwords are stored encrypted, software is kept up to date, and access to personal data is limited to me. No system is completely secure, but I take it seriously; it's what I do for clients every day.

10. Children

This site and its plugins aren't aimed at anyone under 16, and I don't knowingly collect their data.

11. Changes to this policy

If I change how I handle your data, I'll update this page and the date at the top. Significant changes will be emailed to customers.

12. Contact and complaints

If you're unhappy with how I've handled your data, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner's Office (ICO).