Privacy Policy
Last updated 19 November 2025
This Privacy Policy explains how Mr T. S. Lomas, trading as Caterham Computing (“we”, “us”, “our”), collects, uses, and protects your personal information when you visit ccplugins.co.uk, purchase our products, or contact us.
We are committed to protecting your privacy and to processing personal data lawfully, fairly, and transparently.
1 Who we are
Caterham Computing is a sole-trader business operated by Mr T. S. Lomas, based at 110 Commonwealth Road, Caterham, Surrey CR3 6LS, United Kingdom.
We build and sell WordPress plugins under the brand CC Plugins.
For any privacy-related enquiry, email privacy@ccplugins.co.uk.
We are the data controller for information collected through this website.
2 What data we collect
We collect only the information necessary to operate our store, fulfil orders, and provide support.
2.1 Information you provide directly
- Name, email address, billing address, and VAT number (if applicable) during checkout.
- Account login details (if you create an account).
- Support requests and correspondence sent via email or ticket system.
- Newsletter sign-up information (if you opt in).
2.2 Information collected automatically
- Standard server logs (IP address, browser type, pages visited, time and date) for security and performance monitoring.
- Non-personal statistics collected by WP Statistics, which uses first-party data only and sets no tracking cookies.
- Essential cookies created by WordPress, WooCommerce, and CookieYes for site functionality and consent management.
3 How we use your data and legal basis
| Purpose | Examples | Legal basis under UK GDPR |
|---|---|---|
| To fulfil your order | Processing payments, issuing licence keys, delivering downloads | Contract (Article 6 (1)(b)) |
| To provide updates and support | Verifying licences via Digital License Manager Pro, responding to support tickets | Contract (Article 6 (1)(b)) |
| To maintain site security and performance | Logging and monitoring via WP Statistics and Loginizer Pro | Legitimate interest (Article 6 (1)(f)) |
| To send optional newsletters or product updates | Email marketing only if you opt in | Consent (Article 6 (1)(a)) |
| To comply with legal requirements | Accounting, VAT and tax records | Legal obligation (Article 6 (1)(c)) |
We never use your data for advertising, profiling, or resale.
4 Cookies and tracking
Our website uses essential cookies to operate the shopping cart, login, and checkout systems.
Cookie consent is managed by CookieYes | GDPR Cookie Consent.
Analytics are handled locally using WP Statistics, which does not set cookies or share data externally.
We do not use third-party advertising, remarketing, or social-media trackers.
Full details are available in our Cookies Policy.
5 Data storage and retention
| Data type | Retention period | Reason |
|---|---|---|
| Orders, invoices, licence records | 6 years (minimum) | Accounting and tax law |
| Support tickets and emails | Up to 3 years | Reference and quality assurance |
| Newsletter subscriptions | Until you unsubscribe | Consent-based |
| Server logs | 30 – 90 days | Security and performance |
| Backups (BackWPup) | Rotated securely | Disaster recovery |
All data is stored securely on servers located in the United Kingdom or European Economic Area (EEA) wherever possible.
6 Data sharing and processors
We share personal data only with trusted providers essential to running our business, each bound by data-processing agreements:
- WooCommerce – e-commerce platform (self-hosted, no external data transfer).
- Digital License Manager Pro – licence generation and validation.
- PayPal / Stripe / WooPayments – payment processors for checkout.
- GoSMTP / GoSMTP Pro – transactional email delivery via your chosen SMTP provider.
- Awesome Support – ticket management for support requests.
- BackWPup – backup utility for site data, stored locally or on encrypted cloud services.
We do not sell or rent any personal data to third parties.
7 International data transfers
Some processors (for example, PayPal and email providers) may store data outside the UK or EEA.
When this occurs we ensure lawful safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses, to keep your data protected.
8 Your rights under UK GDPR
You have the right to:
- Access a copy of your data we hold.
- Request correction of inaccurate information.
- Request erasure (where legally permitted).
- Restrict or object to processing in certain cases.
- Request data portability of information you provided to us.
- Withdraw consent for marketing at any time.
To exercise these rights, contact privacy@ccplugins.co.uk.
If you believe we have mishandled your data, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
9 Children’s privacy
Our services are intended for adults.
We do not knowingly collect or process personal data relating to anyone under 16 years of age.
10 Security measures
We use multiple layers of security, including:
- Encryption in transit (HTTPS TLS 1.3).
- Firewall and brute-force protection (Loginizer Pro).
- Regular updates and patch management.
- Access controls and role-based permissions.
- Encrypted backups (BackWPup).
Despite these measures, no internet transmission is entirely secure. You use our site at your own risk, but we take reasonable care to safeguard your data.
11 Links to other websites
Our site may contain links to third-party websites (for example payment processors or documentation).
We are not responsible for their privacy practices or content.
Please read their privacy policies before submitting any personal information.
12 Changes to this policy
We may update this Privacy Policy from time to time.
Any major change will be announced on this page with a new “last updated” date.
Continued use of our site after updates constitutes acceptance of the revised policy.
13 Contact details
Mr T. S. Lomas
Caterham Computing
110 Commonwealth Road
Caterham, Surrey CR3 6LS
United Kingdom
Email: privacy@ccplugins.co.uk