Who we are
In this section you should state the URL of your website, as well as the name of the company, organization, or individual behind it, along with accurate contact information.
The amount of information required to be displayed may vary depending on local or national business regulations. For example, you may be required to display a physical address, registered address, or your company registration number.
What personal data we collect and why we collect it
In this section you should specify what personal data you collect from users and site visitors. This may include personal data such as name, email address, personal account preferences; transactional data such as purchase information; and technical data such as cookie information.
You should also note any collection and storage of sensitive personal data, such as health-related information.
In addition to listing the personal data you collect, you should explain why you collect it. These explanations should include both the legal basis for collecting and retaining the data and any consent given by the user.
Personal data is not only created by user interaction with your website. Personal data is also generated through technical processes such as contact forms, comments, cookies, analytics, and third-party embeds.
By default, WordPress does not collect any personal data about visitors and only collects the data shown on the User Profile screen for registered users. However, some of your plugins may collect personal data. You should add relevant information below.
Comments
In this subsection you should state what information is collected via comments. We have highlighted the data that WordPress collects by default.
Media
In this subsection you should state what information may be disclosed by users who upload media files. All uploaded files are usually publicly accessible.
Contact forms
By default, WordPress does not include a contact form. If you use a contact form plugin, use this subsection to note what personal data is captured when someone submits a contact form and how long you retain it. For example, you may state that you retain contact form submissions for a certain period for customer service purposes but do not use the information for marketing purposes.
Cookies
In this subsection you should list the cookies your website uses, including those set by your plugins, social media, and analytics. We have provided the cookies that WordPress installs by default.
Analytics
In this subsection you should state which analytics package you use, how users can opt out of analytics tracking, and provide a link to the analytics service provider’s privacy policy, if available.
By default, WordPress does not collect analytics data. However, many hosting providers collect some anonymous analytics data. You may also install a WordPress plugin that provides analytics services. In that case, add information from that plugin here.
Who we share your data with
In this section you should list all third parties with whom you share site data, including partners, cloud services, payment processors, and third-party service providers, and specify what data you share with them and why. Where possible, provide links to their privacy policies.
By default, WordPress does not share any personal data with anyone.
How long we retain your data
In this section you should explain how long you retain personal data collected or processed by the website. While it is your responsibility to define the retention period for each dataset and the reasons for keeping it, that information must be listed here. For example, you may state that you retain contact form entries for six months, analytics records for one year, and customer purchase records for ten years.
What rights you have over your data
In this section you should explain what rights users have regarding their data and how they can exercise those rights.
Where your data is sent
In this section you should list any transfers of your site’s data outside the EU and describe the safeguards used to protect that data in accordance with European data protection standards. This may include web hosting, cloud storage, and other third-party services.
EU data protection law requires data about European residents that is transferred outside of the European Union to be protected to the same standards as within Europe. Therefore, in addition to listing where data is stored, you should explain how you ensure that these standards are met by both yourself and your third-party providers, whether through agreements such as the Privacy Shield, contractual clauses, or binding corporate rules.
Contact information
In this section you should provide a way to contact you regarding privacy-related concerns. If you are required to have a data protection officer or representative, include their name and full contact details.
Additional information
If you use your website for commercial purposes and engage in more complex collection or processing of personal data, you should disclose that information in your privacy policy in addition to what we have already discussed.
How we protect your data
In this section you should explain what measures you have taken to protect your users’ data. This may include technical measures such as encryption; security measures such as two-factor authentication; and organizational measures such as staff training on data protection. If you have conducted a Privacy Impact Assessment, you may also mention it here.
What data breach procedures we have in place
In this section you should explain the procedures you have in place to deal with data breaches, both potential and actual, such as internal reporting systems, contact mechanisms, and error detection.
What third parties we receive data from
If your website receives data about users from third parties, including advertisers, this information must be included within the section of your privacy policy dealing with third-party data.
What automated decision making and/or profiling we do with user data
If your website provides a service that includes automated decision-making — for example, allowing customers to apply for credit or aggregating their data into an advertising profile — you must disclose this and include information about how that data is used, what decisions are made based on it, and what rights users have regarding decisions made without human intervention.
Industry regulatory disclosure requirements
If you are a member of a regulated industry or subject to additional privacy laws, you may need to disclose that information here.
- lorem ipsum
- lorem ipsum
- lorem ipsum
- lorem ipsum
- lorem ipsum
- lorem ipsum
- lorem ipsum
- lorem ipsum