Privacy Policy

1. Who controls your data

The controller of personal data collected through iWP.es is InformatiQ, tax ID Y1324210E, registered at Calle Palma 107 bajos, Vilafranca de Bonany, 07250, Balearic Islands, Spain. You can reach us on (+34) 643 732 407 or at hola@iwp.es.

2. Data we process

Depending on how you use the shop and services, we may process:

• Account and contact details: first and last name, email address, telephone number, username and credentials protected by WordPress.
• Orders and billing: postal and billing address, country, tax/VAT number where relevant, products or subscriptions purchased, amount, currency, tax, order status and the details required to issue invoices and handle refunds.
• Payments: the confirmation, identifiers and outcome returned by Redsys. Full card details are entered in the gateway’s secure environment and are not stored by iWP.es.
• Licensing and service delivery: licence key, plan, permitted number of sites, status, issue, renewal and cancellation dates, the website or URL where a product is activated, and activation and last-check dates. Download and update requests also contain the licence, site URL, and plugin identifier and version needed to answer the request.
• Technical and security data: IP address, user agent, access records, incident details and technical-cookie data where needed to operate, secure and troubleshoot the site.
• Correspondence: information you choose to provide when you email or call us about a purchase, support request or data-protection right.

iWP.es does not currently operate a contact form, and the visual form in the footer does not subscribe visitors to a mailing list. We will update this notice before processing data through either feature.

3. Why we use it and our legal basis

• To create and manage an account and provide the cart, order, payment, digital delivery, subscription, licensing, updates and support: performance of a contract and pre-contract steps.
• To issue invoices, retain accounting and tax records, meet consumer obligations and answer lawful official requests: compliance with legal obligations.
• To answer an enquiry you make voluntarily: pre-contract steps or consent, depending on its nature.
• To prevent fraud, licence abuse and unauthorised access and to protect the service: our legitimate interest in running a secure platform, balanced against your rights.

We do not send email advertising without a valid legal basis. We do not make decisions with legal effects solely by automated means or build marketing profiles from this data.

4. How long we keep it

Account data is kept while the account remains active. Order, invoice and transaction records are restricted and retained for the applicable tax, accounting, commercial and liability periods, generally up to six years. Licence and activation records remain in use for the subscription term and afterwards for as long as reasonably needed to deal with incidents or claims. Technical logs are deleted or aggregated when no longer needed for security and troubleshooting.

5. Recipients and processors

We do not sell personal data. We disclose it only where the law requires this or delivery of the service makes it necessary. Recipients may include:

• Redsys Servicios de Procesamiento, S.L. and participating financial institutions, to authorise and administer card payments.
• Technical suppliers maintaining web hosting, backups and email infrastructure, under confidentiality and data-protection duties.
• Professional advisers, auditors, banks, tax authorities, courts and other public bodies where necessary or legally required.

The site requests fonts from Google Fonts. This connection may disclose technical data such as your IP address to Google. Where that entails an international transfer, GDPR safeguards such as Standard Contractual Clauses and any necessary supplementary measures apply. We do not intentionally arrange other international transfers unless a necessary supplier provides a valid safeguard.

6. Your rights

You may ask for access, correction, erasure, restriction, objection or data portability, and may withdraw consent without affecting earlier lawful processing. Email hola@iwp.es, describe your request and provide the information reasonably required to verify your identity. We will normally respond within one month.

If you believe your data has been handled unlawfully, you may complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or to your local supervisory authority.

7. Security, children and data protection contact

We use reasonable technical and organisational measures to guard against loss, alteration, unauthorised access or disclosure. The services are not directed at children under 14 and we do not knowingly collect their data. InformatiQ is not required to appoint a data protection officer for this activity; privacy enquiries can be sent to hola@iwp.es.

8. Changes to this policy

We will revise this notice when the law, our suppliers or service features change. Last updated: 3 August 2026.