1. Introduction
This Privacy Policy describes how data is handled in relation to "Simple Donation System". There are three different contexts for data processing:
| Context | Data | Responsible Party |
|---|---|---|
| Plugin installed on a site | Donor data | Site owner |
| PRO plugin purchase | Buyer data | Hector Luis Barrientos + Freemius |
| PRO license validation | Technical information | Hector Luis Barrientos + Freemius |
2. Donor Data (Installed Plugin)
2.1 What Data the Plugin Stores
When the plugin is installed on a website, it stores the following donor data in the site's database (NOT on the developer's servers):
Personal data:
- Name and surname
- Email address
- Phone number
- Tax ID (optional, for tax deduction certificates)
- Full postal address
Financial data (reference, not sensitive):
- IBAN (for SEPA direct debits)
- Account holder name
- Donation amount
- Payment method used
- Transaction identifier
2.2 Where Data is Stored
| Data | Location | Control |
|---|---|---|
| Donor data | Client's WordPress database | Site owner |
| Order data | WooCommerce (client's DB) | Site owner |
| Complete payment data | Processors (Stripe, PayPal, etc.) | Payment processor |
The plugin developer does NOT have access to this data.
2.3 Responsibility
The site owner where the plugin is installed is solely responsible for:
- Complying with GDPR, CCPA, and other applicable regulations
- Providing privacy policy to donors
- Managing data rights requests (access, rectification, deletion)
- Obtaining valid consent for processing
- Ensuring security of stored data
3. Plugin Buyer Data
3.1 Distribution Channels
- WordPress.org (free version): No personal data collected
- Freemius (PRO version): Manages sales and collects data
3.2 Data Collected (PRO Version via Freemius)
When purchasing the PRO version, Freemius collects:
- Full name
- Email address
- Billing address
- Payment information (processed by Freemius, not stored by developer)
- License information
3.3 Purpose of Processing
| Purpose | Legal Basis |
|---|---|
| Process purchase and deliver license | Contract performance |
| Validate active licenses | Contract performance |
| Provide technical support | Contract performance |
| Send security updates | Legitimate interest |
| Comply with tax obligations | Legal obligation |
3.4 Freemius Privacy Policy
Purchase data is also subject to:
- Freemius Privacy Policy: https://freemius.com/privacy/
- Freemius Terms of Service: https://freemius.com/terms/
4. Technical Information (Telemetry)
4.1 Free Version
The free version does NOT send any data to external servers.
4.2 PRO Version
The PRO version may send to Freemius servers (with user consent):
- Site URL (for license validation)
- WordPress version
- Plugin version
- PHP version
- License status
NOT sent: Donor data, site admin personal information, order data, financial information.
5. Your Rights (GDPR)
5.1 If You Are a Plugin Buyer
You have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion of your data |
| Portability | Receive your data in structured format |
| Object | Object to certain processing |
To exercise your rights: [email protected]
5.2 If You Are a Donor
You must contact the site owner where you made your donation. The plugin developer does not have access to your data.
6. Data Security
We implement security measures to protect data:
- Encryption in transit (HTTPS/TLS)
- Restricted access to personal information
- Service providers with security certifications (Freemius, Stripe)
7. International Transfers
Your data may be processed in:
- Freemius: Servers in the United States (Standard Contractual Clauses)
- Stripe: Compliance with international standards
8. Changes to This Policy
We may update this Privacy Policy. Changes will be published on this page with an updated date.
Contact
Data Controller (buyer data):
- Name: Hector Luis Barrientos
- Email: [email protected]
- Website: https://hblateral.com
- Location: A Coruña, Spain
For donor data: Contact the site owner where you made your donation.
9. Supervisory Authority
If you believe that the processing of your data is not adequate, you can file a complaint with:
- Spanish Data Protection Agency (AEPD): https://www.aepd.es