Privacy policy

This policy explains how we collect and use personal data when you visit https://wordmakepress.com, buy from WordMakePress, create an account or contact us. It also explains your rights and how to use them.

1. Who is responsible for your data

The controller of your personal data is Fin Boutique LLC (“Фин Бутик” ЕООД), Mladost 3, block 328, entrance 6, floor 1, apartment 167, 1712 Sofia, Bulgaria ("WordMakePress", "we", "us" or "our"). For any privacy question or request, email privacy@wordmakepress.com.

2. The data we collect

When you buy:

• your email address, which every order needs;
• your name, if you choose to give it;
• your billing country, which you choose at checkout and which we use to calculate tax;
• where tax rules or an invoice need them, your region, postal code and billing address, which you enter on our payment provider's payment page;
• your VAT ID, if you enter one;
• your order history: what you bought and when, the price, tax and license, and whether you've downloaded your files.

When you create an account:

• your sign-in details. We store passwords only in hashed form, never as plain text.

When you contact us:

• the messages you send us, by email or through our contact form, and our replies.

When you use the site:

• technical data that our servers record in their logs, such as your IP address, browser and device;
• your cookie preferences;
• if you opt in to analytics cookies, information about how you use the site, which is turned into aggregate statistics.

If you sign up for marketing email:

• a record of your consent.

We don't collect or store your full card details. Section 5 explains how payments work.

3. Where your data comes from

Most of the data we hold comes directly from you, when you check out, create an account or contact us. Technical data is collected automatically by our servers. If you opt in to analytics, our analytics service collects information about how you use the site. Our payment provider tells us whether your payment succeeded and gives us a payment reference.

4. Why we use your data, and our legal bases

We use personal data only where data protection law gives us a legal basis to do so.

Where we rely on legitimate interests, we've weighed them against your rights, and you can object at any time (section 10). If we ever want to use your data for a new purpose that doesn't fit with the ones above, we'll tell you first and, where the law requires it, ask for your consent.

What you need to give us. To buy, you need to give us your email address and the billing details we ask for at checkout. Without them, we can't complete your order or meet our tax obligations. Everything else is optional.

5. Payments

When online payments are enabled, Stripe processes card payments. Your full card number and security code are encrypted in transit and sent directly to Stripe, not to us. Stripe processes payment and fraud-prevention data under its privacy policy and for its own legal and regulatory obligations. We receive only what we need to confirm and record your order, such as the payer's contact and billing details, whether the payment succeeded, the card brand and last four digits, and a payment reference. We never receive or store the full card number or security code.

6. Who we share data with

We share personal data only when we need to, and only as much as is needed.

Service providers. Other companies help us run the shop. They process data on our behalf, only on our instructions, and under contracts that require them to protect it. They include providers of:

• website hosting, databases, and file storage and delivery;
• email delivery, for order confirmations, download links, support replies and marketing email if you've opted in;
• customer support and communication tools;
• tax calculation and invoicing;
• analytics, only if you opt in. Before we turn analytics on, we'll name the provider in our cookie policy and in Cookie settings.

Stripe, our payment provider, which processes payment and fraud-prevention data under its own privacy policy (section 5).

Professional advisers, such as accountants, auditors and lawyers, when they need the data to advise us.

Authorities, such as tax authorities, courts or law enforcement, when the law requires it.

A new owner, if all or part of our business is sold or reorganized. The new owner would have to keep protecting your data in line with this policy.

We don't sell personal data. If you'd like the names of the service providers we use, ask us at privacy@wordmakepress.com.

7. International transfers

Some of our service providers may store or process data in other countries. If personal data is transferred to a country whose data protection laws haven't been recognized as adequate, we only do so with appropriate safeguards in place, such as the standard contractual clauses approved by the European Commission. You can ask us about these safeguards at privacy@wordmakepress.com.

8. How long we keep your data

The exact period for order and invoice records depends on the tax rules that apply to each sale. When a retention period ends, we delete the data or anonymize it so it no longer identifies you. If your account is deleted, we still keep order and invoice records for as long as tax law requires.

9. How we protect your data

We use encrypted connections (HTTPS) across the site, send payment-card data directly to Stripe, store passwords only in hashed form, and never handle full card numbers or security codes. Access to personal data is limited to the people and service providers who need it. No system is completely secure, but if a breach puts your data at risk, we'll tell you and the relevant authority as the law requires. If you think someone else has accessed your account, tell us straight away at support@wordmakepress.com.

10. Your rights

You have the right to:

• access: get a copy of your personal data and information about how we use it;
• rectification: have inaccurate or incomplete data corrected;
• erasure: have your data deleted, unless we have to keep it, for example for tax records;
• restriction: have us limit how we use your data, for example while we check whether it's accurate;
• portability: receive the data you gave us in a structured, machine-readable format, or have it sent to another company where that's technically possible;
• objection: object to our use of your data based on legitimate interests. If you object to marketing, we always stop;
• withdraw consent at any time, for example by changing your Cookie settings or unsubscribing from marketing email. This doesn't affect anything we did before you withdrew it;
• complain to a data protection authority: the Commission for Personal Data Protection (CPDP), Bulgaria, or the authority in the country where you live or work.

Some of these rights apply only in certain situations. For example, portability covers only data you gave us that we use under a contract or with your consent. If a right doesn't apply to your request, we'll explain why.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

11. How to use your rights

Use the form on our GDPR and data requests page, or email privacy@wordmakepress.com. We answer within one month. If a request is complex, or we receive several from you, we may need up to two more months; if so, we'll tell you within the first month. We may ask you to confirm your identity before we act, and requests are free in most cases. The data requests page explains the process in full.

12. Emails we send

We send service emails about your orders and account, such as order confirmations, download links and important account notices. These are part of the service, so they don't need your consent.

We send marketing email, such as news about products, only if you've opted in. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing privacy@wordmakepress.com.

13. Cookies

We use a few strictly necessary cookies and similar browser storage to run the site, and analytics cookies only if you opt in. We don't use marketing cookies. Our cookie policy lists them, and you can change your choice at any time through "Cookie settings" in the footer.

14. Children

The shop is meant for adults and businesses. We don't knowingly collect personal data from children under 16. If you think a child has given us personal data, email privacy@wordmakepress.com and we'll delete it.

15. Changes to this policy

We may update this policy when our practices or the law change. We'll update the date at the top of the page and, if the changes are significant, tell you by email (if you have an account) or with a notice on the site. This version takes effect on 15 October 2026.

16. Contact

• Email: privacy@wordmakepress.com
• Post: Fin Boutique LLC (“Фин Бутик” ЕООД), Mladost 3, block 328, entrance 6, floor 1, apartment 167, 1712 Sofia, Bulgaria