Privacy Policy

01Overview

CHADA Store is operated by CHADA. We act as the data controller for personal data processed through our website, store, and licensing system. This policy applies to that data and explains your rights under applicable laws, including the GDPR and UK GDPR.

It does not cover third-party sites we link to, which have their own privacy practices.

02Information we collect

Information you provide

• Account & billing: name, email, and (for purchases) billing address, company, and VAT ID;
• Payment details: processed securely by our payment providers — we do not store full card numbers;
• Support messages: the content of tickets and emails you send us, including any site details you share.

Information collected automatically

• License check-ins: when our plugin is active on a site, it contacts our server to validate the licence and deliver updates — this includes the site URL, plugin version, and WordPress version;
• Usage & analytics: basic, privacy-respecting analytics about how the website is used (pages visited, approximate region);
• Device & log data: IP address, browser type, and timestamps, used for security and troubleshooting.

03How we use your information

We use the information above to:

• Process orders, issue licence keys, and manage renewals;
• Deliver plugin updates and validate active licences;
• Provide support and respond to your enquiries;
• Send essential service emails (receipts, renewal reminders, security notices);
• Send product news only if you opt in — and you can unsubscribe anytime;
• Detect, prevent, and investigate fraud, abuse, and security issues;
• Comply with our legal and tax obligations.

04Legal bases for processing

Where the GDPR applies, we rely on:

• Contract — to provide the products and licences you purchase;
• Legitimate interests — to secure our services, prevent fraud, and improve our products;
• Consent — for optional marketing emails and non-essential cookies;
• Legal obligation — to meet tax, accounting, and other legal requirements.

05Sharing & service providers

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under contract, including:

• Payment processors (e.g. Stripe, PayPal) to take payment;
• Email & support tools to send service messages and manage tickets;
• Hosting & infrastructure providers that run our website and licensing servers;
• Analytics providers, configured to minimise personal data.

We may also disclose data where required by law, or to protect our rights, users, or the public.

06Cookies & tracking

We use a small number of cookies to make the site work and to understand usage:

• Essential cookies — for login, your cart, and checkout. These can’t be switched off;
• Analytics cookies — to measure and improve the site, set only with your consent;
• Preference cookies — to remember choices like your region.

You can manage non-essential cookies through our cookie banner or your browser settings.

07Data retention

We keep personal data only as long as needed for the purposes above. Account and licence records are kept while your account is active; order and tax records are retained for the period required by law (typically several years). Support messages are kept for a reasonable period to maintain continuity, then deleted or anonymised.

08Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data or complete incomplete data;
• Request deletion of your data (“right to be forgotten”);
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, and unsubscribe from marketing.

To exercise any of these, email privacy@chada.store. You also have the right to complain to your local data-protection authority.

09Security

We protect your data with industry-standard measures: encryption in transit (TLS), restricted access on a need-to-know basis, and secure, monitored infrastructure. No system is perfectly secure, but we work continuously to safeguard your information and will notify you and the relevant authorities of any breach as required by law.

10International transfers

We and some of our providers may process data in countries outside your own. Where we transfer personal data internationally, we use appropriate safeguards — such as Standard Contractual Clauses — to ensure it remains protected to the standard required by applicable law.

11Children's privacy

Our products and store are intended for businesses and professionals and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12Changes & contact

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and notify you where appropriate. Questions or requests about your privacy:

• Email: privacy@chada.store
• Support: chada.store/support