Privacy Policy

Who We Are

CodeAtoZ is a software development agency based in India, specializing in Magento 2, WooCommerce, WordPress, Shopify, and React/Node.js development. We operate the website codeatoz.com and publish WordPress plugins available on WordPress.org and through our own store.

For the purposes of applicable data protection laws, CodeAtoZ is the data controller of personal data collected directly through our website and services.

Information We Collect

We collect information in several categories depending on how you interact with us:

2.1 Information You Provide Directly

• Contact & Inquiry Data: Name, email address, phone number, company name, project details, and any other information you submit through our contact form, quote request form, or when reaching out via email.
• Account Registration Data: If you register for an account to purchase or manage our Pro plugins, we collect your name, email address, billing address, and a hashed password.
• Purchase & Billing Data: When you purchase a Pro plugin license, we collect billing name, email, billing address, and payment information. Note: full payment card data is processed by our payment processor (WooCommerce Payments / Stripe) and is never stored on our servers.
• Support Requests: Information you provide when submitting a support ticket, forum post, or plugin review on WordPress.org, including your WordPress.org username and any diagnostic data you voluntarily share.
• Communication Data: Emails, messages, and attachments exchanged with our team during project discussions, onboarding, or support.
• Newsletter & Marketing: Email address and communication preferences if you subscribe to our newsletter or blog updates.

2.2 Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, time spent on pages, and other standard server log data.
• Device Information: Hardware model, unique device identifiers, and mobile network information (when applicable).
• Usage Data: How you navigate and interact with our website — links clicked, features used, and content viewed.
• Cookie & Tracking Data: Data collected via cookies, web beacons, pixels, and similar technologies (see Section 7).

2.3 Information from Third Parties

• Analytics Providers: Aggregated analytics data from services like Google Analytics.
• Payment Processors: Transaction confirmation and billing details from Stripe or PayPal after a purchase.
• WordPress.org: Publicly available plugin download statistics and user reviews.
• Social Media: Publicly available profile information if you connect or engage with us via social channels.

How We Collect Information

• Direct Submission: Forms on our website (contact, quote, checkout, account registration, newsletter signup).
• Automated Technologies: Cookies, server logs, and analytics scripts that activate when you visit our website.
• Plugin Activation & Licensing: When you activate a Pro plugin license, our licensing API receives your site URL, WordPress version, plugin version, and license key for validation purposes.
• Email & Chat Communication: Any information you voluntarily share when emailing or messaging us.
• Third-Party Platforms: Analytics and advertising platforms that may share aggregated or pseudonymous data with us.

How We Use Your Information

We use collected information for the following purposes:

Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under one or more of the following legal bases:

• Contractual Necessity (Art. 6(1)(b) GDPR): Processing required to fulfill a contract with you — e.g., delivering a plugin license you purchased or completing a development engagement.
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests — e.g., website security, fraud prevention, improving our products, and direct marketing to existing customers — where these interests are not overridden by your fundamental rights.
• Consent (Art. 6(1)(a) GDPR): Where you have freely given, specific, informed consent — e.g., subscribing to our newsletter or accepting non-essential cookies.
• Legal Obligation (Art. 6(1)(c) GDPR): Processing required to comply with applicable laws — e.g., maintaining financial records for tax purposes.

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share data in the following limited circumstances:

6.1 Service Providers & Sub-processors

We engage trusted third-party vendors who process data on our behalf under data processing agreements:

6.2 Business Transfers

If CodeAtoZ undergoes a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website prior to any such transfer and provide you with choices regarding your data.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of CodeAtoZ; (c) prevent or investigate possible wrongdoing; or (d) protect the personal safety of our users or the public.

6.4 Aggregated / Anonymized Data

We may share aggregated, non-personally identifiable statistics (e.g., "X% of our users use WooCommerce") with partners, in blog posts, or in marketing materials. Such data cannot be used to identify you.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand our audience.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling essential cookies will affect website functionality. For more information, visit allaboutcookies.org.

For Google Analytics opt-out, install the Google Analytics Opt-out Browser Add-on.

WordPress Plugins & End-User Data

CodeAtoZ publishes WordPress plugins, including Hide Price for WooCommerce (Free & Pro) and CodeAtoZ Campaign Manager. This section explains what data these plugins handle.

8.1 Our Plugins & Data Collection

Our free plugins, when installed on your WordPress site, do not send any data back to CodeAtoZ servers. All plugin settings and functionality operate entirely within your WordPress installation.

8.2 Pro Plugin Licensing

When you activate a Pro plugin license, our licensing system (powered by WooCommerce or a dedicated licensing API) receives:

• Your license key
• Your site's URL (domain)
• WordPress version
• Plugin version number
• PHP version

This data is used solely to validate your license, prevent unauthorized use, and deliver automatic updates. It is not used for any other purpose and is not sold or shared with third parties.

8.3 Telemetry & Usage Tracking

Our plugins do not collect telemetry, usage statistics, or any data from your WordPress site or your customers without your explicit opt-in consent. If a future plugin version introduces optional telemetry, it will be clearly disclosed and require active opt-in.

8.4 End-User Data (Your Customers)

Our plugins may process data belonging to your customers (e.g., WooCommerce order data, customer roles, pricing visibility). In this context, you are the data controller and CodeAtoZ acts as a data processor. You are responsible for ensuring your use of our plugins complies with applicable data protection laws and for providing appropriate privacy notices to your own customers.

Third-Party Services & Integrations

Our website and services may contain links to or integrations with third-party websites, tools, and services. These have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you use:

• Google (Analytics, Fonts, Tag Manager)
• Stripe
• PayPal
• Automattic / WooCommerce
• Mailchimp
• Cloudflare

When you engage our development services, project work may involve integrations with platforms such as Magento, Shopify, or third-party APIs. Any personal data involved in such integrations is handled per the client's instructions and relevant agreements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

When data is no longer required, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration, including:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted via HTTPS.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Password Hashing: Account passwords are stored using bcrypt hashing — we never store plaintext passwords.
• Secure Payment Processing: Payment card data is handled exclusively by PCI-DSS-compliant payment processors. We never receive or store raw card numbers on our systems.
• Regular Updates: We keep all software, WordPress installations, and plugins updated with security patches.
• Firewall & DDoS Protection: We use Cloudflare and server-level firewalls to protect against malicious traffic.
• Backups: Regular encrypted backups are maintained to ensure data integrity and availability.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you suspect unauthorized access to your account, please contact us immediately at [email protected].

International Data Transfers

CodeAtoZ is based in India. If you access our services from the European Economic Area (EEA), United Kingdom, United States, or other regions, your information may be transferred to and processed in India or in countries where our service providers operate.

India does not currently have an adequacy decision from the European Commission. Where we transfer data from the EEA or UK to third countries, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with sub-processors that meet GDPR requirements
• Reliance on adequacy decisions where applicable

By using our services, you acknowledge and consent to the transfer of your information as described in this policy.

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

How to Exercise Your Rights

To exercise any of the rights above, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Email Unsubscribe

You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any marketing email, or by emailing us at [email protected]. Transactional emails (receipts, license keys, security alerts) cannot be opted out of while you have an active account.

Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will take steps to delete such information promptly.

Do Not Sell My Personal Information (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights regarding your personal information.

We do not sell your personal information to third parties as defined under the CCPA/CPRA. We do not share personal information with third parties for cross-context behavioral advertising.

California residents have the right to:

• Know what personal information is collected and how it is used
• Delete personal information we have collected (subject to exceptions)
• Opt-out of the sale or sharing of personal information (not applicable as we do not sell)
• Non-discrimination for exercising CCPA rights
• Correct inaccurate personal information (CPRA)
• Limit use of sensitive personal information (CPRA)

To submit a verifiable consumer request, contact us at [email protected] or use our contact form. We will respond within 45 days.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website
• Send an email notification to registered customers for significant changes

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

Previous versions of this policy are available upon request at [email protected].

Contact Us

For any privacy-related questions, requests, complaints, or concerns, please contact us:

This Privacy Policy was last reviewed and updated on October 16, 2026 and is effective as of April 16, 2025. It does not constitute legal advice. We recommend consulting a qualified privacy attorney for compliance with regulations specific to your jurisdiction.