Privacy Policy

Last updated: 11 September 2026

This policy explains what personal data RelyWP collects, why we collect it, who we share it with and what rights you have. It covers our website, our plugins and our support service.

Who we are

RelyWP Ltd, trading as RelyWP, is the controller responsible for your personal data (“we”, “us”, “our”).

Legal entity: RelyWP Ltd
Company registration number: 11865883
VAT number: 317376494
Registered office: 38 Darwin Road, Bridlington, East Riding of Yorkshire, United Kingdom, YO16 6FZ
Data privacy manager: Elliot Sowersby
Email: [email protected]
Website: relywp.com

We are registered in the United Kingdom and our processing is governed by the UK GDPR and the Data Protection Act 2018. Where we offer plugins and support to customers in the European Economic Area, the EU GDPR also applies.

Our site and plugins are not intended for children, and we do not knowingly collect data relating to children.

The short version

We are a small plugin company. We collect the data we need to sell you a licence, deliver updates, answer your support questions and run our website. We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

One point worth being clear about: our plugins run inside your own WordPress site. The data they handle about your customers — points balances, affiliate coupons, tax exemption details, wishlists and so on — is stored in your database, on your server. It does not come to us. We only ever see it if you choose to send it to us, for example by attaching a log file or database export to a support ticket.

The data we collect about you

Personal data means any information about an individual from which that person can be identified. It does not include anonymous data, where the identity has been removed.

We may collect, use, store and transfer the following kinds of personal data:

Identity data: first name, last name, username or similar identifier, and job title or company name where you give it to us.
Contact data: billing address, email address and, where you give it, telephone number.
Financial data: we do not see or store your card details. Payments for our plugins are taken by Freemius, our merchant of record, and card data is handled by their payment processors.
Transaction data: details of the licences you have bought, your plan, renewal dates, invoices, refunds and the payments made to and from you.
Licence and site data: when a premium plugin is activated, it sends us, through Freemius, the site URL it is installed on, the licence key, the plugin and WordPress version and basic environment information such as the PHP version. This is what lets us deliver updates to the right sites and check that a licence is within its site limit.
Diagnostic data: if you opt in to usage tracking when installing a plugin, we also receive anonymous information about which features are in use and any errors encountered. This is optional, it is off unless you turn it on, and you can turn it off at any time from the plugin settings.
Technical data: internet protocol (IP) address, browser type and version, time zone setting and approximate location, operating system and platform, and other technology on the devices you use to visit our site.
Usage data: information about how you use our website, our documentation and our plugins.
Support data: the content of your messages to us, including any screenshots, log files, system reports or site access details you choose to share, and our replies.
Marketing and communications data: your newsletter subscription status and your preferences for receiving marketing from us.

We also use aggregated data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your personal data but is not personal data in law, because it does not directly or indirectly identify you.

We do not collect any special category data about you. This includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, and genetic and biometric data. We also do not collect information about criminal convictions and offences.

How your personal data is collected

We collect data in three ways.

Directly from you, when you:

buy a licence or start a free trial;
create an account in our customer portal;
contact us by email, through our contact form, or through our support system;
subscribe to our newsletter or download a resource;
leave a review or take part in a survey; or
apply to our affiliate programme.

Automatically, as you interact with our site and our plugins. We collect technical and usage data using cookies, server logs and similar technologies. Our Cookies Policy explains this in more detail. Licence and site data is collected automatically when a premium plugin is activated, as described above.

From third parties, including:

Freemius, our merchant of record, which passes us your name, email address, billing country and purchase details when you buy a licence;
our analytics and advertising providers;
WordPress.org, where a review or support forum post you make is public; and
publicly available sources such as Companies House, where we need to verify a business customer.

What we use your data for, and why we are allowed to

We only use your personal data when the law allows us to. In most cases, that is one of the following: because we need to perform a contract with you, because it is in our legitimate interests and those interests are not overridden by your rights, or because we have a legal obligation.

Purpose	Data used	Lawful basis
To sell you a licence, create your account and deliver the plugin	Identity, Contact, Transaction	Performance of a contract
To deliver plugin updates and verify licences	Licence and site, Transaction	Performance of a contract
To process payments, invoices, renewals and refunds, and to recover money owed	Identity, Contact, Financial, Transaction	Performance of a contract; legitimate interests (recovering debts due to us)
To provide support and respond to your questions	Identity, Contact, Support, Licence and site	Performance of a contract; legitimate interests (helping people evaluating our plugins)
To manage our relationship with you, including telling you about changes to our terms or this policy, and asking for a review	Identity, Contact, Transaction	Performance of a contract; legal obligation; legitimate interests (keeping our records up to date)
To send you our newsletter and other marketing	Identity, Contact, Marketing and communications	Consent
To improve our plugins, fix bugs and decide what to build next	Diagnostic, Usage, Support	Legitimate interests (developing our products)
To improve our website and measure our marketing	Technical, Usage	Consent, where analytics or advertising cookies are used; otherwise legitimate interests
To run our affiliate programme, including tracking referrals and paying commission	Identity, Contact, Transaction	Performance of a contract
To keep our site and business secure, prevent fraud and abuse, and meet our accounting and tax obligations	Identity, Contact, Technical, Transaction	Legitimate interests (running our business securely); legal obligation

We generally do not rely on consent as a legal basis for processing, other than for marketing emails and for non-essential cookies. Where we do rely on consent, you can withdraw it at any time.

Marketing

You will only receive marketing emails from us if you have asked for them, for example by subscribing to our newsletter or ticking the box when you buy. Every marketing email includes an unsubscribe link, and you can also email [email protected] to opt out.

Opting out of marketing does not stop service messages that we have to send you, such as receipts, renewal reminders, licence expiry notices, security advisories and notices about changes to these terms.

We will never share your personal data with another company for their own marketing purposes.

If you ask us to remove you from our marketing list, we keep a record of your email address on a suppression list so that we do not accidentally email you again.

Who we share your data with

We share your data with the service providers we need to run the business. Each of them acts on our instructions and is bound by contract to protect it.

Freemius, Inc. (United States) — merchant of record for all premium plugin sales. Handles checkout, payments, invoicing, sales tax and VAT, subscriptions, licence keys, the customer portal, plugin update delivery and the affiliate programme.
Stripe and PayPal (United States and Ireland) — payment processing on behalf of Freemius.
Help Scout PBC (United States) — our support inbox and knowledge base. Support emails to [email protected], and messages sent through our contact form, are stored in our Help Scout account, along with your name, email address and related site activity.
Intuit Mailchimp (United States) — our newsletter platform, if you subscribe.
Anthropic, OpenAI and Voyage AI (United States) — the assistant on our contact page uses these providers to understand your question and suggest documentation before it reaches a human. Your message is sent to them for that purpose. They do not use it to train their models, and we do not send them payment details. If you would rather not use the assistant, email [email protected] directly.
Cloudflare, Inc. (United States and United Kingdom) — content delivery, DNS and bot protection for our website, including Cloudflare Turnstile on our forms.
Google LLC (United States) — website analytics and advertising measurement, where you have consented to those cookies.
Our hosting provider — the servers that run relywp.com.
Our professional advisers — accountants, lawyers, bankers and insurers in the United Kingdom, where needed.
HM Revenue & Customs and other regulators, where we are required to report.

We may also share your data with a buyer or prospective buyer if we sell or reorganise the business, in which case the new owner may use your data in the way set out in this policy. And we will share data where we reasonably need to in order to comply with the law, enforce our terms, or protect the rights, safety and property of ourselves or others.

We require everyone we share data with to respect its security and to treat it in accordance with the law. We do not allow them to use your personal data for their own purposes.

International transfers

Several of our service providers are based outside the United Kingdom, mainly in the United States. Where your data is transferred outside the UK, we make sure a similar level of protection applies by relying on one of the following:

a UK adequacy decision covering the destination country;
the International Data Transfer Agreement, or the UK Addendum to the European Commission’s Standard Contractual Clauses, in our contract with the provider; or
the UK Extension to the EU-US Data Privacy Framework, where the provider is certified under it.

You can ask us for a copy of the safeguards that apply to a particular provider by emailing [email protected].

Data security

We have put appropriate security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access is limited to those who need it, they process it only on our instructions, and they are under a duty of confidence.

Because of the nature of electronic storage, we cannot promise that data will always remain secure. We have procedures to deal with any suspected personal data breach, and we will notify you and the Information Commissioner’s Office where we are legally required to do so.

How long we keep your data

We only keep your personal data for as long as we need it for the purposes we collected it for, including to meet any legal, accounting or reporting requirements.

Account, licence and purchase records: for as long as your account is open, and then for six years after you stop being a customer, because tax law requires us to keep basic records of our customers.
Support conversations: three years from the last message, so that we can pick up the history if you come back to us with a related issue.
Newsletter subscription data: until you unsubscribe, and then a minimal suppression record so that we do not email you again.
Website analytics data: no more than 26 months.
Server and security logs: up to 12 months.

In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use that information indefinitely.

Your rights

Under data protection law you have the following rights in relation to your personal data:

Request access to your personal data, commonly known as a subject access request. This lets you receive a copy of the data we hold about you and check that we are processing it lawfully.
Request correction of data that is incomplete or inaccurate, though we may need to verify the accuracy of anything new you give us.
Request erasure of your personal data, where there is no good reason for us to keep processing it. We may not always be able to comply, for example where we have to keep records for tax purposes, and we will tell you if that is the case.
Object to processing where we are relying on a legitimate interest and something about your situation makes you want to object. You can always object to processing for direct marketing.
Request restriction of processing, for example while we check the accuracy of data or consider an objection.
Request the transfer of your data to you or to another provider, in a structured, commonly used, machine-readable format. This applies to data you provided under consent or to perform a contract.
Withdraw consent at any time, where we are relying on consent. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, email [email protected]. You will not have to pay a fee, although we may charge a reasonable fee, or refuse to act, if a request is clearly unfounded, repetitive or excessive. We may need to ask you for information to confirm your identity before we act, as a security measure. We try to respond to all legitimate requests within one month, and will tell you if we need longer because a request is complex.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first at [email protected] so that we have a chance to put it right. You also have the right to complain at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk. If you are in the EEA, you may complain to your local supervisory authority instead.

Third-party links

Our site and documentation include links to third-party websites, plugins and services. Clicking those links may allow third parties to collect or share data about you. We do not control those sites and are not responsible for their privacy statements. When you leave our site, we encourage you to read the privacy notice of every website you visit.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed. If we make a significant change, we will tell you by email or by a prominent notice on our site.

It is important that the personal data we hold about you is accurate and current. Please let us know if your details change.