Privacy Policy

Last updated: June 2026

1. About This Policy

This Privacy Policy explains how WPforge ("we", "us", "our") collects, uses, shares, and protects your personal data when you use the WPforge website building and hosting platform ("the Platform").

We are the data controller for personal data processed through the Platform. This policy applies to visitors to our marketing site, registered account holders, and end-users of websites hosted on the Platform.

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and billing information.

Payment information: When you subscribe to a paid plan, payment details are collected and processed securely by our payment processors (Stripe, PayPal, Payoneer). We do not store full credit card numbers, CVC codes, or bank account details on our servers. Our payment processors are PCI-DSS Level 1 compliant.

Usage data: We collect information about how you use the Platform, including pages visited, features used, actions taken, and technical data such as browser type, device type, operating system, IP address, and referring URLs.

Content data: We store the content you create and upload to your websites hosted on the Platform, including text, images, product listings, and other files.

Communication data: When you contact us via email or support channels, we retain those communications and our responses.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform and its features
  • Process payments and manage subscriptions
  • Send service-related communications (billing confirmations, renewal reminders, security alerts, product updates)
  • Provide customer support and respond to inquiries
  • Analyze platform usage to improve our services and user experience
  • Detect, prevent, and address fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

4. Payment Processing

Payment information is processed securely by third-party payment processors. We currently use:

These processors are PCI-DSS compliant and adhere to strict data protection standards. We do not store full payment card details on our servers. For details on how these processors handle your payment data, please refer to their respective privacy policies.

5. Data Sharing

We do not sell your personal data to third parties. We never have and never will. We may share data with:

  • Service providers: Trusted third parties who help us operate the Platform (cloud hosting, payment processing, analytics, email delivery). These providers are contractually bound to use your data only as necessary to provide services to us.
  • Legal compliance: When required by law, court order, or government regulation. We will notify you of such requests when legally permitted.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction with appropriate safeguards.
  • With your consent: In any other circumstances, only with your explicit consent.

6. Cookies & Tracking

We use essential cookies for authentication, security, and session management. These cookies are necessary for the Platform to function and cannot be disabled. We may also use analytics cookies to help us understand usage patterns and improve the Platform. These are optional and can be controlled through your browser settings.

Our Platform uses Cloudflare Turnstile for bot protection on login and signup forms. Turnstile may set its own cookies as part of its security verification. See Cloudflare's Privacy Policy for details.

7. Data Security

We implement industry-standard security measures to protect your data, including:

  • SSL/TLS encryption for all data in transit
  • Encrypted databases for sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Role-based access controls and principle of least privilege
  • Automated intrusion detection and monitoring

However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your account data for as long as your account is active. After cancellation, your data is retained for 30 days to allow you to export or reactivate your account. After 30 days, your data will be permanently deleted. You may request earlier deletion by contacting us.

Certain data may be retained longer as required by law (e.g., billing records for tax purposes) or for legitimate business interests (e.g., fraud prevention).

9. Your Rights

Depending on your jurisdiction, you may have rights under data protection laws including the UK GDPR and Data Protection Act 2018 to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Export your data in a structured, machine-readable format (data portability)
  • Object to or restrict processing of your data
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office)

To exercise these rights, contact us at support@wpforge.net. We will respond within 30 days.

10. Third-Party Links

Websites created on the Platform may contain links to third-party services, including payment gateways, social media, analytics services, and external websites. We are not responsible for the privacy practices, content, or security of those third-party services. We encourage you to review their privacy policies.

11. International Data Transfers

Your data may be stored and processed in countries outside your own, including the United States and the European Economic Area. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws, including Standard Contractual Clauses where applicable.

12. Children's Privacy

The Platform is not intended for use by children under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email to the address associated with your account or via a notice on the Platform. We encourage you to review this policy periodically.

14. Contact

For privacy-related inquiries, to exercise your data rights, or to report a data protection concern, contact us at support@wpforge.net. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.