Privacy Policy

Who is responsible for your information

WP Base is a WordPress maintenance and web design business run by Chris Kernaghan, based in Newtownabbey, Northern Ireland. WP Base is the data controller for the information described here.

If you have a question about this policy or about your information, email hello@wpbase.co.uk.

What information is collected

The amount of information collected depends on how you interact with WP Base.

• Enquiries and audit requests. When you complete a form on this site, you provide your name, email address, and whatever details you choose to include about your website or business. Some forms also ask for a phone number or website URL.
• Email correspondence. If you email directly, that message and your email address are held in the WP Base mailbox.
• Care plan customers. If you subscribe to a plan, billing details are collected and processed by Stripe. WP Base does not see or store your full card number. Records of invoices and subscriptions are kept for accounting purposes.
• Client site access. Where WP Base maintains your website, this involves access to hosting accounts, WordPress administration and related credentials. That access is used only for the work you have asked for.
• Website analytics. With your consent, analytics and advertising cookies record pages viewed, approximate location, device and browser type, and how you arrived at the site.

Why it is collected, and the lawful basis

• To respond to your enquiry. Lawful basis: legitimate interests, in that you have contacted a business expecting a reply.
• To deliver services you have paid for. Lawful basis: performance of a contract.
• To keep accounting and tax records. Lawful basis: legal obligation.
• To measure how the website and any advertising performs. Lawful basis: consent, given through the cookie banner and withdrawable at any time.
• To send occasional updates, where you have asked for them. Lawful basis: consent. Every message includes an unsubscribe link.

Who else handles your information

WP Base does not sell your information and does not share it for anyone else's marketing. A small number of service providers process data on WP Base's behalf in order to run the business.

• Cloudflare for website hosting and security.
• Fillout for enquiry and audit request forms.
• Zoho Mail for email.
• Stripe for payments and subscription billing.
• Google Analytics and Google Tag Manager for website measurement, where you have consented.
• LinkedIn for advertising and conversion measurement, where you have consented.

Some of these providers are based outside the UK. Where that is the case, transfers are covered by the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

Information may also be disclosed where there is a legal requirement to do so.

Cookies

This site sets cookies that are necessary for it to work, and these do not require your consent. Analytics and advertising cookies are only set after you agree through the cookie banner. You can change or withdraw that choice at any time using the cookie settings link in the footer, and you can block or delete cookies in your browser settings.

How long information is kept

• Enquiries that do not become work: up to two years, then deleted.
• Client records and correspondence: for the length of the working relationship and six years afterwards.
• Invoices and financial records: six years, as required by HMRC.
• Analytics data: in line with the retention period set in Google Analytics, currently 14 months.

Your rights

Under UK data protection law you can ask WP Base to:

• confirm what information is held about you, and give you a copy;
• correct anything that is inaccurate or incomplete;
• delete your information, where there is no reason to keep it;
• restrict or object to how it is used;
• transfer it to another provider in a portable format;
• stop sending you marketing, at any time.

Email hello@wpbase.co.uk and you will get a response within one month.

If you are unhappy with how your information has been handled, you can complain to the Information Commissioner's Office at ico.org.uk, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Security

Accounts are protected with strong unique passwords and two-factor authentication where it is available. Client credentials are stored in a password manager rather than in email or plain text files. No system is completely secure, but reasonable technical and organisational measures are in place to protect what is held.

Changes to this policy

This policy may be updated as the business or its tools change. The date at the top shows when it was last revised.