Privacy Policy

Last updated: April 18, 2026

This Privacy Policy explains how AEIOUY di Davide Furlotti (hereinafter “WPAgencyKit”, “we”, “us”) processes personal data of users and customers of the website https://wpagencykit.org (the “Site”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree no. 196/2003 as amended (“Italian Data Protection Code”).

1. Data Controller

The Data Controller is:

AEIOUY di Davide Furlotti
Registered office: Via Pizzolese 43, 43122 Parma (PR), Italy
Italian VAT (P.IVA): IT03141100341
Email: support@wpagencykit.org
Certified email (PEC): davide.furlotti@pec.fiscozen.it

A Data Protection Officer (DPO) has not been appointed because the Controller does not meet the mandatory appointment criteria set out in Article 37 GDPR. For any data-protection request, please use the contact details above.

2. Categories of Personal Data We Process

We process the following categories of personal data:

Identification and contact data: first name, last name, email address, billing address, country.
Tax/Billing data: business name, VAT number, tax identification code (when provided by the customer for invoicing).
Payment data: payment method, transaction ID, last four digits of the card. Full card numbers are never stored on our servers and are processed directly by our payment provider Stripe.
Account and license data: username, hashed password, license keys, activated domains, plugin version installed, update history.
Support data: content of your support requests, attachments, and related correspondence.
Technical and usage data: IP address, browser type, operating system, referring URL, pages visited, date/time of access, device information, pseudonymous identifiers set by cookies.
Marketing data: email preferences, open and click events on our newsletter, consent records.

3. Purposes and Legal Bases

We process personal data for the following purposes and on the following legal bases (Art. 6 GDPR):

a) Conclusion and performance of the purchase contract (Art. 6(1)(b) GDPR): processing your order, delivering the software and license keys, providing updates and product support, managing your customer account.
b) Compliance with legal obligations (Art. 6(1)(c) GDPR): issuance and retention of tax invoices under Italian fiscal law, anti-fraud checks, response to requests from competent authorities.
c) Legitimate interests (Art. 6(1)(f) GDPR): ensuring the security of the Site, preventing fraud and abuse, aggregated statistical analysis of Site usage, defending our legal rights.
d) Consent (Art. 6(1)(a) GDPR): use of non-essential cookies and similar technologies (analytics and marketing), sending of commercial newsletters, remarketing and advertising measurement through third-party pixels. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Provision of Data

Providing identification, contact, billing and payment data is necessary to conclude the purchase; failure to provide such data prevents completion of the transaction. Providing marketing data is optional and based on consent: withdrawing consent does not affect the delivery of the purchased service.

5. Recipients and Data Processors

Personal data may be shared with the following categories of recipients, which act as independent controllers or as data processors appointed under Art. 28 GDPR:

Hosting and infrastructure providers serving the Site and our backend.
Stripe Payments Europe, Ltd. (Ireland) — payment processor. Privacy information: stripe.com/privacy.
Intuit Mailchimp (operated by The Rocket Science Group LLC, USA) — email marketing and transactional emails. Privacy information: intuit.com/privacy/statement.
Google Ireland Ltd. — Google Analytics and Google Tag Manager for audience measurement and container management. Privacy information: policies.google.com/privacy.
Meta Platforms Ireland Ltd. — Meta Pixel for conversion tracking and advertising measurement. Privacy information: facebook.com/privacy/policy.
Professional advisors (accountants, tax and legal consultants) bound by professional secrecy and contractual confidentiality.
Competent public authorities when disclosure is required by applicable law.

We do not sell personal data to third parties. A full list of active processors is available on request.

6. Transfers Outside the European Economic Area

Some of the processors mentioned above are established outside the European Economic Area (EEA), in particular in the United States. Transfers to the United States are made pursuant to:

the EU–US Data Privacy Framework (adequacy decision of 10 July 2023), where the recipient is certified; and/or
Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), supplemented where appropriate by additional technical and organisational safeguards.

A copy of the applicable safeguards can be requested at support@wpagencykit.org.

7. Retention Periods

Order and billing data: retained for 10 years from the last tax-relevant event, in compliance with Article 2220 of the Italian Civil Code and tax regulations.
Customer account and license data: retained for the duration of the account and for 10 years after its closure for the purpose of defending legal rights and supporting lifetime licenses.
Support correspondence: retained for up to 5 years from the closure of the ticket.
Marketing data (newsletter): retained until consent is withdrawn or 24 months of inactivity, whichever occurs first.
Analytics and cookie data: retained in line with the retention periods declared in our Cookie Policy (generally up to 14 months for Google Analytics).
Server logs: retained for up to 12 months for security and fraud-prevention purposes.

8. Your Rights

Under Articles 15–22 GDPR, you have the right to:

obtain access to your personal data and information about the processing;
request rectification of inaccurate or incomplete data;
request erasure of your data (“right to be forgotten”), where applicable;
request restriction of processing;
receive your data in a structured, commonly used and machine-readable format (data portability);
object to processing based on legitimate interests or direct marketing;
withdraw consent at any time for consent-based processing;
not be subject to automated decisions producing legal effects. We do not carry out automated decision-making or profiling producing legal effects on users.

To exercise your rights, write to support@wpagencykit.org. We will respond within 30 days of receipt, extendable up to 90 days in case of complex or numerous requests.

You also have the right to lodge a complaint with the Italian Data Protection Authority (“Garante per la protezione dei dati personali”) — Piazza Venezia 11, 00187 Rome, Italy — garanteprivacy.it, or with the supervisory authority of your EU country of habitual residence.

9. Cookies and Similar Technologies

The Site uses technical cookies necessary for its operation and, subject to your consent, analytics and marketing cookies (including Google Analytics, Google Tag Manager and Meta Pixel). You can freely grant, refuse or modify your consent at any time through the cookie banner and the “Cookie settings” link in the footer. For full information about cookies and their retention, please refer to our Cookie Policy, available through the cookie settings panel.

10. Security Measures

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or disclosure, including HTTPS/TLS encryption in transit, encrypted database connections, strict access controls, regular backups and periodic review of processing activities.

11. Minors

The Site is intended for professional use and is not directed to children under the age of 16. We do not knowingly collect personal data of minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or in applicable law. The updated version will be published on this page with a new “Last updated” date. Material changes will be notified through the Site or by email where appropriate.

13. Contact

For any question regarding this Privacy Policy, please contact us at support@wpagencykit.org or by certified email at davide.furlotti@pec.fiscozen.it.