This policy explains which personal data we process when you visit this site, buy from us, use your account and activate a licence — and which data we deliberately do not collect.
Last updated: October 3, 2026
Who is responsible
BlueAgency, Hilme Krke 90 - Donja Vogosca. Privacy questions: [email protected].
Visiting the site
- The web server logs technical data (IP address, time, page, browser) to keep the site secure and running. These logs are kept only as long as needed for that purpose.
- Fonts are served from our own server. We do not load Google Fonts, Gravatar or social media widgets, and we do not use advertising or tracking cookies.
- Cookies we do set are technically necessary: your cart, the checkout session and staying signed in.
Buying and your account
To sell you a licence and issue an invoice we process your name, e-mail address, billing address, company and VAT number (if you give them), the products you bought, prices and payment status. Payment is handled by the payment provider you choose at checkout; we never see or store your full card details.
We send you e-mails needed for your purchase: the order confirmation with your licence key, and reminders 30 and 7 days before your updates and support end. We do not send marketing e-mails without your consent.
Licence checks and updates
When you activate a key, and when your site checks for updates, our licence server receives and stores:
- the licence key (stored encrypted) and the product being checked,
- the address (domain) of the site and whether it is a live, staging or local site,
- the installed product versions and the time of the last check.
We do not store your WordPress or PHP version, your content, your users or your visitors. When you deactivate a site, its record is deleted. Downloads from your account are logged (product, version, time) to protect the licence.
Legal bases
- Performing our contract with you — orders, licences, downloads, updates, support (Art. 6(1)(b) GDPR).
- Legal obligations — invoices and tax records (Art. 6(1)(c) GDPR).
- Our legitimate interest in a secure site and in preventing misuse of licence keys (Art. 6(1)(f) GDPR).
Who receives data
Our hosting provider, the payment provider you choose and the service that delivers our e-mails process data on our behalf, under data processing agreements. We do not sell personal data.
How long we keep data
Orders and invoices are kept for as long as accounting and tax law requires. Licence and site records are kept while the licence exists and for a reasonable time after it ends. You can close your account at any time; data we must keep by law is then kept only for that purpose.
Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and object to processing based on legitimate interest. Write to us at the address above. You also have the right to complain to a data protection authority.