Privacy Policy

Last updated: 17th May 2026

PlugUpp (“we”, “our”, “us”) is a trading name of Web Upp Limited, registered in England & Wales (Company No. 13581536).

This Privacy Policy explains how we collect, use and protect your personal data when you use the PlugUpp website, WordPress plugins and related services (the “Services”). We act as a Data Controller under the UK GDPR and the Data Protection Act 2018.

1. Data We Collect

Category	Examples	Purpose
Plugin & Licence Data	Website URL, licence status, plugin activation data	Manage plugin licensing, updates and related services
Usage & Technical Data	IP address, browser type, WordPress version, PHP version, server environment	Maintain compatibility, performance and security
Support Data	Support requests, diagnostic information, uploaded screenshots	Investigate and resolve technical issues
Payment Data	Transaction ID, billing email, payment amount	Process payments via third-party providers (no card data stored)
Analytics Data	Website usage statistics and interaction data	Improve website usability, documentation and plugin experience

2. How We Use Your Data

Provide, operate and improve the Services;
Create and manage user accounts and plugin licences;
Deliver plugin updates, licensing validation and related functionality;
Provide technical support and troubleshooting;
Improve compatibility, reliability and performance;
Send service, billing or account-related communications;
Detect and prevent misuse, fraud or security incidents;
Comply with legal obligations.

We do not sell or rent personal data to any third party.

3. Legal Basis for Processing

Contractual necessity – to provide the Services you request;
Legitimate interest – to maintain security, improve compatibility and analyse service usage;
Consent – where required (e.g. cookies, marketing);
Legal obligation – to comply with law or court orders.

4. Data Retention

Account data → retained while your account remains active and for a reasonable period afterwards where required for support, legal or accounting purposes.
Licence and transaction records → retained as required for billing, tax and compliance obligations.
Technical and diagnostic logs → retained for a limited period to maintain security, stability and troubleshooting.
Support requests and communications → retained to provide ongoing customer support and service continuity.

5. Data Sharing & Third Parties

We share data only where necessary to operate and support the Services:

Hosting & Infrastructure: UK or EEA-based hosting and infrastructure providers used to operate the website and related services.
Payments & Licensing: Freemius and Stripe, for secure licensing, subscription management and payment processing. We do not store card details.
Email Delivery & Support: Providers used for account notifications, support communications and transactional emails.
Analytics & Security: Privacy-conscious analytics, monitoring and security services used to protect and improve the Services.

Third-party providers are selected carefully and may process limited technical or personal data where necessary to operate the Services securely and reliably.

6. International Transfers

Where personal data is processed outside the UK or EEA, we use appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs) where required.

7. Cookies & Tracking

We use essential cookies and optional analytics technologies to support website functionality, licensing systems, preferences and performance analysis. You can manage cookie preferences through your browser settings or our cookie tools where available. See our Cookie Policy for more information. See our Cookie Policy.

8. Your Rights (UK & GDPR)

You have the right to:

Access your data;
Request correction or erasure;
Restrict or object to processing;
Request data portability;
Withdraw consent;
Lodge a complaint with the ICO.

9. Data Security

HTTPS/TLS encryption
Secure authentication and password protection
Access controls and restricted administrative access
Regular updates, monitoring and backups
Security measures designed to protect plugin and account data

While no system is 100% secure, we maintain industry-standard protections.

10. Children’s Privacy

Our Services are not intended for children under 16. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy. The “Last updated” date shows the latest version. Significant changes may be announced through the website or by email where appropriate.

12. Contact Us

Data Protection Officer
Web Upp Limited (t/a PlugUpp)
71-75 Shelton Street, Covent Garden, London WC2H 9JQ
Company No. 13581536
VAT No. GB429219781
Email: privacy@plugupp.com