Last updated: September 16, 2026
This English translation is provided for convenience. The French version is the legally binding text and prevails in the event of any discrepancy.
This policy explains what personal data Pluginect processes, why, how long it is kept and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and French Law No. 78-17 of January 6, 1978 on information technology, data files and civil liberties (loi Informatique et Libertés, the French Data Protection Act).
Data controller
Anthony Laurent EI (Entrepreneur individuel, a French sole proprietorship), trading as Pluginect, 1 Route de l’Hers, 31150 Lespinasse, France (SIREN 824 081 004). For any question about your data: contact@a-laurent.fr.
Data we process
Customer account and orders
- Data: last name, first name, email address, billing address, company name and VAT number where applicable, order and invoice history, password (stored in hashed form, never in plain text).
- Purposes: creating and managing your account, processing orders, issuing invoices, delivering license keys, and responding to requests.
- Legal basis: performance of the contract; legal obligation for invoicing and accounting.
- Retention period: for as long as the account exists; the account and its data are deleted three years after the last activity or after the end of the last license, whichever is later, except for accounting records, which are kept for ten years (French Commercial Code (Code de commerce), Article L123-22).
Payment
Payment is processed directly by the provider for the payment method you choose: Stripe (Stripe Payments Europe Ltd., Ireland) for card payments, PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) for PayPal. That provider acts as a data controller for payment data. Pluginect never receives or stores card numbers; it only receives confirmation of the payment and, where applicable, the information needed to issue a refund.
Consent to immediate performance
When you place an order, the statement you accept in order to receive your license immediately is stored together with its date, as proof of that consent (legal basis: legal obligation and legitimate interest in keeping evidence of the contract), for as long as the order is retained.
License activation and updates
When a paid plugin is activated on a website, and whenever it periodically checks whether an update is available, it sends the following to the pluginect.com license server:
- the license key and a randomly generated technical installation identifier;
- the website’s address and its environment type (production or development);
- the plugin, WordPress and PHP versions.
No data about that website’s visitors or customers is sent. This information is used to verify the license, limit the number of sites, offer the right update and prevent abuse (legal basis: performance of the contract). It is kept for as long as the license exists; an activation slot is released as soon as the license is deactivated on the site. To limit abuse, an irreversible fingerprint (hash) of the requesting IP address is kept temporarily.
Audience measurement on pluginect.com
This website measures its traffic with its own plugin, Pluginect Analytics, hosted on the same server. No data is sent to any third-party service.
- No IP address is recorded: the address is truncated before any processing, then combined with the browser type and a random value renewed every day, to produce a visit identifier that cannot be used to recognize a visitor from one day to the next.
- What is recorded: pages viewed and time spent, where the visit came from (referring website, campaign parameters), country, language, device type, browser, operating system, screen size, searches made on the website, and purchases made.
- No cookie is set for this measurement.
- Visit-level details are kept for 24 months; after that, only anonymous daily totals are kept.
Legal basis: legitimate interest in knowing how much the website is visited and how well its pages perform. You can object to this processing by writing to the contact address.
Email requests
Messages sent to support or to the contact address are used to reply to them (legal basis: performance of the contract or legitimate interest) and are kept for three years after the last exchange.
Recipients
The data is intended for Pluginect. It is shared, to the extent relevant to each of them, with its processors and service providers:
- Hostinger International Ltd. (hosting of the website and its databases);
- Stripe Payments Europe Ltd. and PayPal (Europe) S.à r.l. et Cie, S.C.A. (payment, depending on the method chosen);
- Hostinger International Ltd. (sending transactional emails from the website’s server);
- where applicable, the chartered accountant and the tax authorities, for accounting data only.
Pluginect does not sell or rent any personal data.
Transfers outside the European Union
The website and its databases are hosted in the European Union. The payment providers may process certain data in the United States, within their corporate group; these transfers rely on the EU-U.S. Data Privacy Framework, to which Stripe, Inc. and PayPal, Inc. are certified, and on the European Commission’s standard contractual clauses. No other data is transferred outside the European Union.
Security
The website is served exclusively over HTTPS. Passwords are never stored in plain text, license keys are stored in a protected form, and access to the administration area is restricted.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, the right to object to processing based on legitimate interest, and the right to give instructions regarding what happens to your data after your death.
To exercise these rights, write to contact@a-laurent.fr or to the postal address given above. You will receive a reply within one month. You may be asked for proof of identity if there is reasonable doubt as to your identity.
You can view and edit your account information at any time from My account.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Cookies
How cookies are used is described in the Cookie Policy.