Effective date: 2 September 2026
Last updated: 2 September 2026
This policy explains what personal data WooManagers (“we”, “us”) collects when you use woomanagers.com, contact us about a project, or install one of our WooCommerce extensions — and what we do with it.
We have kept it specific rather than generic. Where we say we do not collect something, that is a description of how the site and the plugins are actually built, not a promise we have not checked.
1. Who we are
WooManagers is an independent WooCommerce extension and development studio operating from Pakistan and serving customers worldwide. For the purposes of the EU and UK General Data Protection Regulation, WooManagers is the data controller for the personal data described in this policy.
- Website: woomanagers.com
- Privacy contact: info@woomanagers.com
You can reach us at that address for any question or request in this policy. We aim to reply within a few business days and, for formal data rights requests, within one month.
2. What we collect, and why
2.1 When you send us an enquiry
Our contact form asks for your name, email address, an optional phone or WhatsApp number, a project budget range, the service you need, and a description of your project. You must also tick a consent box before the form will send.
- Why: to read your enquiry, reply to it, quote for the work and — if we go ahead — deliver it.
- Legal basis (GDPR): your consent, and the taking of steps at your request before entering into a contract (Art. 6(1)(a) and 6(1)(b)).
- How long: up to 24 months after our last exchange, unless the enquiry becomes a paid engagement, in which case we keep the correspondence for as long as we have a business relationship plus any period required for tax and accounting records.
Please do not send us passwords, card details, or client data through the contact form. If we need access to your site to quote or work on it, we will agree a secure way to share credentials separately.
2.2 When you email us
Our support and enquiry mailbox, info@woomanagers.com, is hosted by our web hosting provider on the same infrastructure as this site. Anything you send us — your email address, the content of your message and any attachments — is stored in that mailbox. We do not route our support email through a third-party mail or helpdesk platform.
- Why: to provide support and keep a record of what was agreed.
- Legal basis: performance of a contract, or our legitimate interest in answering people who write to us (Art. 6(1)(b) and 6(1)(f)).
- How long: support threads are kept while they remain useful for reference, and reviewed periodically.
2.3 When you have an account on this site
Accounts on woomanagers.com hold a username, an email address, a securely hashed password (we never see or store your password in readable form), and any name or billing details you choose to add. Public self-registration is not currently open; accounts exist for clients and, in future, for customers of our premium extensions.
- Legal basis: performance of a contract (Art. 6(1)(b)).
- How long: for as long as the account is open. Ask us and we will close and delete it, subject to any records we must keep for tax purposes.
2.4 Server logs
Like almost every website, our hosting provider records standard web server logs: your IP address, the pages requested, timestamps, the referring page, and your browser and operating system string. These are generated automatically and are not linked to any profile of you.
- Why: to keep the site online, diagnose errors, and detect abuse such as brute-force login attempts and spam.
- Legal basis: our legitimate interest in the security and reliability of the site (Art. 6(1)(f)).
- How long: a short rolling window set by our host, typically a few weeks, after which logs are overwritten.
2.5 Analytics
We load Google Analytics through Google Tag Manager. It tells us which pages people read, roughly where in the world visitors come from (derived from IP address), which browsers and devices they use, and how they arrived at the site. We use it to decide what to write and what to build. We do not use it to build advertising audiences, and we do not run advertising or remarketing tags on this site.
- Legal basis: consent where required by law, otherwise our legitimate interest in understanding how the site is used (Art. 6(1)(f)).
- Processor: Google LLC / Google Ireland Limited, which processes this data in the United States and other countries.
- Opt out: block the cookies listed in section 4, use your browser’s tracking protection, or install Google’s Analytics opt-out browser add-on.
3. Our extensions
3.1 Free extensions
Our free extensions — the WMGRs range published on WordPress.org — run entirely inside your own WordPress installation. They contain no telemetry, no analytics, no “phone home” check and no outbound network calls of any kind. We do not receive your site URL, your admin email, your product catalogue, your customer records or usage statistics from them. Nothing about your store reaches us because you installed a plugin of ours.
Any data those plugins handle — customer roles, prices, quotes, registration requests, order rules — stays in your database, under your control, and you are the controller of it. When a plugin adds a form to your storefront, such as a quote request or a B2B registration form, the submitted data is stored in your WordPress site and emailed by your site, not ours.
If you download a plugin from WordPress.org rather than from us, that download happens on WordPress.org’s servers and is covered by the WordPress.org privacy policy, which we do not control.
3.2 Premium extensions
We are not currently selling premium extensions. When we do, licensed copies will check their licence with our server, and this section describes exactly what that check sends so there are no surprises:
- the licence key you entered;
- the site address the plugin is installed on (your site’s home URL);
- the plugin’s slug and version number.
That request runs when you activate or deactivate a licence and roughly twice a day thereafter, so the plugin knows whether the licence is still valid and whether an update is available. It carries no order data, customer data, product data, admin email address or usage statistics. Our licence records store the site addresses a key has been activated on, the plugin slug, and the dates of activation and last contact — used solely to enforce site limits, run trials and deliver updates.
We will update this policy before any premium extension goes on sale, including details of the payment processor we use at that point.
4. Cookies
Cookies are small files stored by your browser. This site sets the following kinds:
| Type | Set by | Purpose | Typical lifetime |
|---|---|---|---|
| Session and login | WordPress / WooCommerce | Keeps you signed in, remembers cart and session state, protects forms against cross-site request forgery. | Session to 14 days |
| Analytics | Google Analytics via Google Tag Manager | Distinguishes visitors and sessions so page and traffic-source reports can be produced. | Up to 2 years |
Session and login cookies are strictly necessary — the site cannot keep you signed in without them. Analytics cookies are not. You can delete or block cookies in your browser settings; blocking the necessary ones will break login and cart functionality.
A note on consent: we do not currently display a cookie consent banner. If you are in the EU, the UK or another region where prior consent is required for analytics cookies and you would rather not be counted, please use one of the opt-out methods in section 2.5 before browsing further.
5. Who we share data with
We do not sell personal data, we do not rent or trade mailing lists, and we do not share your data with advertisers. We share it only with the service providers that make the site work:
- Our web host — stores the site, its database, its server logs and our support mailbox.
- Google — Google Tag Manager and Google Analytics for site statistics only. Google does not process our email.
We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. If WooManagers is ever sold or merged, we will tell affected customers before their data moves.
6. International transfers
We operate from Pakistan and our service providers operate in the United States and the European Union. If you are in the EEA or the UK, this means your data may be processed outside your home jurisdiction, in countries that have not received an adequacy decision from the European Commission or the UK government. Where we rely on a provider such as Google, that transfer is governed by the provider’s Standard Contractual Clauses. Where data sits with us directly, we protect it by keeping the amount we hold small, restricting access to it, and deleting it on the schedules above.
7. Your rights
Wherever you live, you may ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it — write to info@woomanagers.com and we will act on it. We will not charge you for it and we will not treat you differently for asking.
If you are in the EEA or the UK, the GDPR and UK GDPR give you the specific rights to: access your data; have inaccurate data corrected; have data erased; restrict or object to processing, including processing based on legitimate interests; receive your data in a portable format; and withdraw consent at any time, without affecting processing that already happened. You also have the right to lodge a complaint with your national data protection authority — in the UK, the Information Commissioner’s Office at ico.org.uk.
If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information is collected and for what purpose, to request deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA, and we do not process sensitive personal information for the purpose of inferring characteristics. We honour Global Privacy Control signals sent by your browser as an opt-out where they apply.
We may ask you to confirm your identity before acting on a request, so that we do not disclose someone else’s data to the wrong person.
8. Security
The site is served over HTTPS, passwords are stored as salted hashes and never in readable form, and access to the site’s administration and to our mailbox is protected by strong, unique credentials. No system is perfectly secure, so we also limit exposure by simply not collecting data we do not need — we do not store payment card numbers, and our free plugins send us nothing at all.
9. Children
This site is aimed at store owners, developers and businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, write to us and we will delete it.
10. Links to other sites
Our site links to WordPress.org, WooCommerce, and other third-party sites. Once you follow such a link you are on someone else’s site, under their privacy policy, and we have no control over what they collect.
11. Changes to this policy
When we change how we handle data — a new payment processor, a new analytics tool, a plugin that starts communicating with us — we will update this page and change the “last updated” date above. Material changes affecting existing customers will also be sent by email. Please check this page before sending us anything you would not want handled under a policy you have not read.
12. Contact
Questions, corrections, deletion requests, or complaints about how we handle your data: info@woomanagers.com.