|Privacy Policy
The short version
- The WordPress plugin keeps your tasks, notes and settings in your own WordPress site's database. We don't receive them.
- If you buy Pro, we hold your email address, name (if you gave one), subscription details and licence key. Stripe takes your card payment, and we never see your card number.
- We don't sell your data, show adverts or use advertising or analytics cookies.
- You can ask us to access, correct or delete your data at any time at info@gotthatsorted.com.
This summary is for convenience only. The full policy below applies.
- Who we are
- What this policy covers
- What we collect
- Why we use it
- Who we share it with
- International transfers
- How long we keep it
- Your rights
- Cookies
- Security
- Children
- Changes
- Contact
1. Who we are
GotThatSorted is run by TWMA Ltd ("we", "us", "our"), registered in England and Wales, company number 06754471. Registered office: St Vincent House, 30 Orange Street, London, WC2H 7HF. We are the controller of the personal data described in this policy. For questions or to use your rights, contact info@gotthatsorted.com.
2. What this policy covers
This policy covers three things:
- this website (www.gotthatsorted.com);
- the GotThatSorted WordPress plugin, including Pro licences, purchases and plugin updates; and
- the GotThatSorted web app at www.gotthatsorted.com/app/. The web app also has its own Terms & Privacy page with detail specific to the app, which applies alongside this policy for web app users.
3. What we collect
| Situation | What we collect |
|---|---|
| Visiting this website | Technical data such as your IP address, browser type and the pages requested, created by our hosting provider (Cloudflare) when you connect. We do not run advertising or analytics trackers. |
| Using the WordPress plugin (free or Pro) | Nothing is sent to us about your tasks, notes, projects or settings. They stay in your own WordPress site's database. Your site also contacts us to check for plugin updates, which exposes your site's IP address in the normal way for any web request. |
| Activating a Pro licence key | About once a day your site sends us your licence key and your site's web address so we can confirm the subscription behind the key is still active. We record which site is using the key. |
| Buying Pro | Your email address, your name (if you give it), the Stripe customer and subscription references, the subscription status, and the licence key we generate for you. Your card details are handled only by Stripe and never reach us. |
| Using the web app | Account and usage data described in the web app privacy policy. |
| Contacting us | Your email address and whatever you tell us in your message. |
4. Why we use it
- To provide the service and perform our contract with you: issuing and checking licence keys, emailing your key, delivering plugin updates, running your account and answering support requests.
- Our legitimate interests: keeping the service secure, preventing abuse and key sharing, and understanding whether the service works. We keep this to the minimum.
- Legal obligations: keeping financial and tax records and responding to lawful requests.
- Consent: where we need it. You can withdraw it at any time.
We do not use your data for advertising or automated decision-making, and we do not sell it.
5. Who we share it with
We use trusted service providers (processors) who handle data only to provide their service to us:
- Stripe, for payments and subscription billing. Stripe is an independent controller for some of the data it handles and has its own privacy policy.
- Google (Firebase), for sign-in to the web app and for storing licence and account records.
- Cloudflare, for hosting and delivering this website and our update and licence services, including security protection.
- Resend, for sending emails such as your licence key.
- Google Workspace, for our support and business email.
We may also disclose data if the law or a court requires it, to protect our rights, users or the public, or in connection with a sale or reorganisation of the business, with the same protections for your data.
6. International transfers
Our providers operate globally, so your data may be processed in the UK, the European Economic Area, the United States and other countries. Where data leaves the UK or EEA, we rely on safeguards such as adequacy decisions, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses.
7. How long we keep it
- Licence and purchase records: while your subscription is active, then for as long as we need them for support, disputes and our legal and tax obligations (typically up to 7 years for financial records).
- Support emails: as long as needed to deal with your request and any follow-up.
- Server and security logs: for a short period set by our providers.
- Web app data: see the web app privacy policy.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a portable copy, withdraw consent, and complain to a regulator. To use any right, email info@gotthatsorted.com. We may need to check who you are first, and we will reply within one month.
In the UK you can complain to the Information Commissioner's Office (ico.org.uk). In the EU or EEA you can complain to your local data protection authority. We do not sell or share personal information for cross-context behavioural advertising.
The plugin also works with WordPress's own Export and Erase Personal Data tools for the data stored in your site.
9. Cookies
This website does not use advertising, tracking or analytics cookies, so we do not show a cookie banner. The web app uses only strictly necessary browser storage to keep you signed in. Details are in the web app cookie policy.
10. Security
We use industry-standard protections, including encrypted connections, access controls and the security measures of our providers. No system is completely secure. If a breach affects your personal data in a way that is likely to cause you harm, we will tell you and the relevant regulator as the law requires.
11. Children
GotThatSorted is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
We may update this policy, for example to reflect changes to the service or the law. We will change the "last updated" date above and, for material changes, tell you by email or on this site.
13. Contact
TWMA Ltd, St Vincent House, 30 Orange Street, London, WC2H 7HF. Email: info@gotthatsorted.com