Who we are

ScalarWP sells WordPress plugin licences and provides custom WordPress engineering services at scalarwp.com. We are based in Bangladesh and are the data controller for everything described here.

What we collect

We only collect what you send us or what a purchase requires. There is no advertising or analytics tracking on this site.

When you use the contact form we receive your name, email address, website address, the budget range you pick, the kinds of work you tick, and your message.

When you book a call we receive your name, email address and the slot you choose.

When you buy a licence we receive your name, email address and billing details through FluentCart. Payment is processed by Stripe — your full card number never reaches us and we do not store it.

When a licence is activated the plugin checks the key against our server. That check identifies the site the key is used on and the plugin version, so we can honour the licence and deliver updates.

Automatically, our host records standard server logs: IP address, browser and device type, pages requested and timestamps, kept for security and troubleshooting.

What our plugins do not send us

Our plugins run on your own WordPress site. The content they handle — the files Cloud Storage Manager moves to your own Amazon S3, Cloudflare R2, OneDrive or Dropbox account, the wishlists and orders Wishio records — stays between your site and the accounts you connect. That data does not come to us, and we cannot see it. You host it and you own it.

Why we hold it

• To answer your enquiry, scope your project and send you a proposal.
• To deliver a licence, its updates and its support.
• To run a project you have engaged us for, and support it after launch.
• To keep records of what was agreed and what was paid, which we need for accounting.
• To keep the site and the licence service secure and working.

Where the law requires a basis for processing, ours is your consent when you contact us, performance of a contract once you buy or engage us, and our legitimate interest in running and securing the business.

How long we keep it

• Enquiries that do not become customers or projects: up to 24 months.
• Purchase, licence and project records: for the life of the licence or engagement and up to 7 years after, for accounting and legal record-keeping.
• Server logs: as retained by our host, typically a matter of weeks.

Who else sees it

A small number of providers process data on our instructions:

• Stripe — payment processing.
• FluentCart, running on our own site — orders, licences and receipts.
• Our web host — the site, form submissions and server logs.
• Our email provider — correspondence with you.
• Our scheduling tool — call bookings.
• Our accounting provider — invoices and payment records.

We do not sell, rent or share your details with anyone else unless you ask us to, or unless we are legally required to.

Cookies

This site sets the cookies WordPress and the checkout need to function. We do not use advertising or cross-site tracking cookies. Your browser can block or clear cookies at any time.

Your rights

You can ask us to show you what we hold, correct it, delete it, stop using it, or send you a portable copy. Write to us through the contact page and we will respond within 30 days.

If you are in the UK or EU and are not satisfied with our response, you can complain to your national data protection authority.

Security

The site and the licence service run over HTTPS. Access to form submissions, orders and project data is limited to the people who need it. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as required.

Children

This site is for business use and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If this policy changes we will update this page and the date above. Material changes will be noted at the top.

Contact

Questions about this policy, or a request about your data, go through the contact page.