WP Knockout

    Privacy Policy

    Last updated: 6/12/2025

    This Privacy Policy explains how WPKnockout (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use this website, purchase digital products, or interact with our services.
    We are committed to safeguarding your privacy and complying with all applicable data protection laws, including the UK GDPR and EU GDPR where applicable.

    By using our website, you agree to the practices described in this policy.

    1. Who We Are

    WPKnockout is an independent UK-based digital goods provider offering plugins, templates, and tools for WordPress and WooCommerce websites.

    Data Controller:
    WPKnockout
    29 BARRAS PARK, STAFFORD, STAFFORDSHIRE, ST16 3XH, UK
    [email protected]

    2. Information We Collect

    We may collect the following categories of personal data:

    a) Information You Provide to Us

    • Name
    • Email address
    • Billing details
    • Account login details
    • Support enquiries and communication
    • Order history

    b) Payment Information (via Stripe)

    We do not store or process card details.
    All payments are handled securely by Stripe, who acts as a PCI-compliant payment processor. Stripe may collect:

    • Card type (e.g., Visa/ Mastercard)
    • Expiry date
    • Billing ZIP/postcode
    • Fraud prevention identifiers

    Stripe’s own privacy policy applies to payment data.

    c) Technical & Usage Data

    Collected automatically through your browser or device:

    • IP address
    • Browser type and version
    • Device information
    • Pages viewed
    • Time spent on the site
    • Cookies and similar technologies

    d) Analytics Data

    If enabled, third-party analytics tools (e.g., Google Analytics or privacy-focused alternatives) may collect anonymised usage patterns to improve our services.

    3. How We Use Your Information

    We use your personal data for the following lawful purposes:

    a) Contractual Obligations

    To provide digital products and services you purchase, including:

    • Processing payments
    • Providing downloads, updates, and support
    • Managing subscriptions and licences

    b) Legitimate Interests

    To improve our website and services, including:

    • Analysing website behaviour
    • Preventing fraud
    • Monitoring system performance
    • Enhancing user experience

    c) Legal Obligations

    To comply with UK accounting, tax, and regulatory laws.

    d) Consent

    Where required (e.g., marketing emails, cookie preferences), we will only process data when you provide consent.

    4. How We Store & Protect Your Data

    We implement appropriate technical and organisational measures to protect your data, including:

    • Encrypted communication (HTTPS)
    • Secure server configuration
    • Limited access controls
    • Firewall and malware protection
    • Stripe PCI-compliant payment processing

    Personal data is stored on secure UK/EU-based servers or approved international providers that meet GDPR transfer requirements.

    5. Sharing Your Information

    We do not sell or trade personal data.

    We may share limited personal information with:

    a) Service Providers

    • Stripe (payment processing)
    • Email delivery providers (e.g., transactional mail systems)
    • Web hosting or CDN services
    • Analytics providers (if enabled)

    These providers act under contractual agreements and comply with GDPR where required.

    b) Legal Compliance

    We may share data if required by law or to protect our legal rights (e.g., fraud investigations).

    6. International Data Transfers

    Some service providers (e.g., Stripe) may process data outside the UK/EU.
    In such cases, transfers occur under legally approved safeguards such as:

    • Standard Contractual Clauses (SCCs)
    • UK Addendum
    • Adequacy decisions

    7. Retention of Personal Data

    We retain personal data only as long as necessary for:

    • Fulfilling purchases
    • Maintaining licences and support access
    • Accounting and tax compliance
    • Security logging and fraud prevention

    Typical retention periods:

    • Order data: 6 years (legal requirement for UK tax records)
    • Support emails: up to 24 months
    • Account data: while the account remains active

    You may request deletion of your data at any time (see Section 10).

    8. Cookies

    We use essential, functional, and analytics cookies as described in our Cookies Policy.
    You may manage cookie preferences through your browser or consent banner (if applicable).

    9. Your Rights Under UK & EU GDPR

    You have the following rights:

    • Right to access – request a copy of your data
    • Right to rectification – correct inaccurate information
    • Right to erasure – request deletion of your data
    • Right to restrict processing – limit how your data is used
    • Right to data portability – receive a copy in a structured format
    • Right to object – opt out of certain processing
    • Right to withdraw consent – for consent-based processing

    To exercise any rights, contact:
    [Insert support email]

    We respond to requests within 30 days.

    10. Marketing Communications

    We only send marketing emails where:

    • You have explicitly opted in, or
    • You are an existing customer and communications relate to similar products (PECR rules apply)

    You may unsubscribe at any time.

    11. Children’s Privacy

    Our website and products are not intended for individuals under 16.
    We do not knowingly collect personal data from children.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time.
    The “Last updated” date will reflect any changes.
    Continued use of the website indicates acceptance of the updated policy.

    13. Contact Us

    If you have any questions about this Privacy Policy or how your data is handled, please contact:

    WPKnockout
    Email: [email protected]
    Address: 29 BARRAS PARK, STAFFORD, ST16 3XH, UK

    You may also lodge a complaint with the UK Information Commissioner’s Office (ICO).