1. Controller and contact
Data Controller: Maroon Horizon Ltd. (Company Registration Number 575569)
Contact: info@mh.ie
2. What data we collect
Depending on how you use the Services, we may process the following categories of data:
| Service request data (PRO plugin) | Site URL, installation identifier, product/plan identifiers, license identifiers/keys, plugin/WordPress/PHP version information, and request metadata (such as IP address and user agent) sent as part of HTTPS requests. |
|---|---|
| Response and delivery data | Service responses may include metadata and time-limited download URLs, followed by encrypted bundles used by the PRO engine. We do not require your site files or content to deliver these bundles. |
| Support communications | If you contact us, we may process your email address and the contents of your message and any attachments you choose to provide. |
| Website data | Standard web server logs (IP address, request time, requested URL, user agent, referrer where provided) for security and operations. |
3. What we do not collect
- We do not request or require your WordPress site files or content to be uploaded to our Services for malware scanning.
- Encrypted bundles delivered by our Services are designed to provide signatures/feeds, not to collect your website content.
4. Purposes and legal bases
We process data for the following purposes:
- Provide the Services (deliver encrypted bundles, validate entitlements, respond to API requests).
- Security and abuse prevention (detect and prevent fraudulent or abusive activity, protect infrastructure).
- Operations and troubleshooting (reliability, debugging, performance monitoring).
- Support (respond to inquiries and resolve issues).
Legal bases under the GDPR (where applicable) may include: performance of a contract (to provide Services you request), legitimate interests (security, fraud prevention, service improvement), and consent (only where we specifically ask for it, such as optional website analytics if implemented).
5. Sharing and recipients
We may share data with:
- Service providers (hosting, security, email) who process data on our behalf under contractual safeguards.
- Licensing/commerce providers used for plugin licensing and delivery (for example, Freemius). Their handling of data is governed by their own policies.
- Legal/Compliance where required to comply with applicable law or protect our rights and users.
6. International transfers
Our service providers may process data in countries outside your jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
7. Data retention
We retain personal data only for as long as necessary for the purposes described:
- API/server logs: typically retained for a limited period (e.g., 30–90 days) unless longer retention is required for security investigations or legal compliance.
- Licensing/entitlement records: retained for the duration of the relationship and as needed for legal/accounting obligations.
- Support emails: retained for as long as reasonably necessary to provide support and maintain service history.
8. Security
We use reasonable technical and organizational measures designed to protect data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, but we aim to apply security best practices appropriate to the risk.
9. Your rights
Depending on your location and applicable law (including GDPR in the EEA/UK), you may have rights to: access, rectify, erase, restrict, object, and portability, and to withdraw consent where processing is based on consent.
To exercise your rights, contact info@mh.ie. We may need to verify your identity.
10. Cookies
Our website may use necessary cookies to operate correctly and help protect the Services. If we use optional analytics cookies in the future, we will provide an appropriate notice and choice where required.
11. Children
The Services are not intended for children. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date indicates when changes were made. Continued use of the Services after changes become effective constitutes acceptance of the updated Policy.
13. Contact and complaints
Questions or requests: info@mh.ie
If you are in the EEA/UK, you may also have the right to lodge a complaint with your local data protection authority.