{"id":635,"date":"2026-09-18T19:18:42","date_gmt":"2026-09-18T17:18:42","guid":{"rendered":"https:\/\/www.webmonster.io\/privacy-policy-2\/"},"modified":"2026-11-04T14:16:20","modified_gmt":"2026-11-04T13:16:20","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.webmonster.io\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n<div class=\"wp-block-group alignfull wm-legal-page wm-section wm-legal-page--explained has-purple-bg-3-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-group alignwide wm-legal-layout wm-legal-layout--explained is-layout-flow wp-block-group-is-layout-flow\">\n<aside class=\"wm-legal-sidebar wm-panel-soft\">\n\t<nav class=\"wm-legal-nav\" aria-label=\"Legal pages\">\n\t\t<details class=\"wm-legal-nav__disclosure\" data-wm-legal-nav-disclosure open>\n\t\t\t<summary class=\"wm-legal-nav__title\">Legal pages<\/summary>\n\t\t\t<div class=\"wm-legal-nav__groups\">\n\t\t\t\t\t\t\t<div class=\"wm-legal-nav__group wm-legal-nav__group--information\">\n\t\t\t\t\t<p class=\"wm-section-kicker wm-legal-nav__group-title\">Legal information<\/p>\n\t\t\t\t\t<ul class=\"wm-legal-nav__list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/legal-notice\/\">Legal notice<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/terms-and-conditions\/\">General terms and conditions<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"wm-legal-nav__group wm-legal-nav__group--privacy\">\n\t\t\t\t\t<p class=\"wm-section-kicker wm-legal-nav__group-title\">Privacy<\/p>\n\t\t\t\t\t<ul class=\"wm-legal-nav__list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/privacy-policy\/\">Privacy policy<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/cookie-policy\/\">Cookie policy<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/data-processing-agreement\/\">Data processing agreement<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"wm-legal-nav__group wm-legal-nav__group--service\">\n\t\t\t\t\t<p class=\"wm-section-kicker wm-legal-nav__group-title\">Service terms<\/p>\n\t\t\t\t\t<ul class=\"wm-legal-nav__list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/hosting-terms\/\">Hosting terms<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/domain-terms\/\">Domain terms<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/email-terms\/\">Email terms<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/webmonster-care-terms\/\">WebMonster Care terms<\/a><\/li>\n<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/webmonster-managed-terms\/\">WebMonster Managed terms<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/webmonster-pros-terms\/\">WebMonster Pros terms<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/service-level-agreement\/\">Service level agreement (SLA)<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"wm-legal-nav__group wm-legal-nav__group--partners\">\n\t\t\t\t\t<p class=\"wm-section-kicker wm-legal-nav__group-title\">Partners<\/p>\n\t\t\t\t\t<ul class=\"wm-legal-nav__list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/partners-terms\/\">Partners and Recommend WebMonster<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"wm-legal-nav__group wm-legal-nav__group--accessibility\">\n\t\t\t\t\t<p class=\"wm-section-kicker wm-legal-nav__group-title\">Accessibility<\/p>\n\t\t\t\t\t<ul class=\"wm-legal-nav__list\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a class=\"wm-legal-nav__link\" href=\"https:\/\/www.webmonster.io\/en\/accessibility-statement\/\">Accessibility statement<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t<\/details>\n\t<\/nav>\n<\/aside>\n\n\n\n<div class=\"wp-block-group wm-legal-content wm-legal-content--explained is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-document__heading is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"wm-section-kicker wp-block-paragraph\">Privacy<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Privacy policy<\/h1>\n<\/div>\n\n\n\n<div class=\"wp-block-group wm-legal-document is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wm-panel-soft wm-legal-document__surface\" aria-hidden=\"true\"><\/div>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<aside class=\"wm-legal-explainer wm-legal-explainer--intro\" aria-labelledby=\"privacy-intro-title\">\n    <img class=\"wm-legal-explainer__monster\" src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/monstruo-legales.png\" width=\"1536\" height=\"1024\" alt=\"\" decoding=\"async\">\n    <div class=\"wm-panel-soft wm-legal-explainer__card\">\n        <p class=\"wm-section-kicker\">In plain English<\/p>\n        <h2 id=\"privacy-intro-title\">What we do with your data<\/h2>\n    <p>Here we explain what information we collect, why we use it, who we share it with and how long we keep it. We also explain how to access your data, correct it or ask us to stop using it where applicable.<\/p>\n    <\/div>\n<\/aside>\n\n\n\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">1. Data controller and contact details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.1.<\/strong> The data controller is <strong>Santiago \u00c1ngel Lope del Palacio<\/strong>, trading as <strong>WebMonster<\/strong>, whose business address is Calle Picasso 1, Oficina 5, 28691 Villanueva de la Ca\u00f1ada (Madrid), Spain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1.2.<\/strong> Data protection enquiries and requests to exercise rights may be sent to <a href=\"mailto:hola@webmonster.io\">hola@webmonster.io<\/a>, submitted through a support request in the <a href=\"https:\/\/clientes.webmonster.io\/?language=English\" target=\"_blank\" rel=\"noopener\">customer area<\/a> or sent in writing to the address above. You do not need an account to exercise your rights.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-1\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-1\">1. How to contact us about your data<\/h3>\n    <p>You can email <a href=\"mailto:hola@webmonster.io\">hola@webmonster.io<\/a>, open a support request or write to the postal address shown here.<\/p>\n    <p>You don&#8217;t need to be a customer or have an account to ask about your data or exercise your rights.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">2. Scope of this policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.1.<\/strong> This policy explains how WebMonster processes the personal data of people who visit its website, make enquiries, create an account, purchase services or participate in WebMonster Partners or Recommend WebMonster. It also covers customer representatives and contacts, and people introduced by participants in those programmes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.2.<\/strong> <strong>Customer<\/strong> means a person or entity purchasing services. References to the <strong>data subject<\/strong> include any natural person whose data is processed in any of the circumstances described in this policy, even if they have not purchased a service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.3.<\/strong> Where WebMonster hosts or processes personal data on the Customer&#8217;s behalf to provide hosting, email, managed services or technical work, the <a href=\"https:\/\/www.webmonster.io\/en\/data-processing-agreement\/\">Data processing agreement<\/a> applies. The Customer determines the purposes of that processing. This policy governs processing carried out by WebMonster to manage its own business.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2.4.<\/strong> Cookies and similar technologies are explained in the <a href=\"https:\/\/www.webmonster.io\/en\/cookie-policy\/\">Cookie policy<\/a>. Accepting contractual terms or reading this policy does not replace specific consent for processing that requires it.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-2\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-2\">2. Your data and the data on your website are different things<\/h3>\n    <p>This policy explains how we use data for our own business: answering enquiries, managing customer relationships and providing services.<\/p>\n    <p>If you host other people&#8217;s data, such as your shop&#8217;s customer details, our processing of that data is governed by the data processing agreement.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">3. Data processed and its sources<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.1.<\/strong> Depending on the relationship and service, WebMonster may process the following categories of data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Identity and contact details:<\/strong> first and last names, company and job title where applicable, NIF or another tax identifier, billing address, email address and telephone number.<\/li>\n\n\n<li><strong>Account and purchasing information:<\/strong> access details and authorised users, orders, quotes, services and domains purchased, renewals, cancellations, preferences and records of accepted terms.<\/li>\n\n\n<li><strong>Billing and payments:<\/strong> invoices, amounts, transaction status and identifiers, refunds and payment method details needed to collect payment through the relevant provider.<\/li>\n\n\n<li><strong>Enquiries and support:<\/strong> the content of requests, communications, incidents, authorisations and documents supplied to address them.<\/li>\n\n\n<li><strong>Partners and Recommend WebMonster:<\/strong> application and participation details, the programme and version accepted, referrals, attribution, commissions, rewards, balances and documents needed to validate, settle or apply them.<\/li>\n\n\n<li><strong>Fraud prevention checks:<\/strong> order details and risk-check results, including indicators that may link a transaction to potentially fraudulent activity.<\/li>\n\n\n<li><strong>Technical and browsing information:<\/strong> IP address, dates and access and activity logs, browser and device information, pages visited and interactions. Collection for statistical purposes is subject to section 8.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.2.<\/strong> Data comes primarily from the data subject and their use of the website and services. It may also come from the person creating or managing a business account; a Partners or Recommend WebMonster participant introducing a prospective customer; payment or domain registration providers reporting the status of a requested transaction; and FraudLabs Pro, which returns information about an order&#8217;s fraud risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.3.<\/strong> Where data is obtained from another person, WebMonster will provide information about its processing and source within the statutory time limits and, if used to contact the data subject, no later than the first communication, unless a legal exception applies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3.4.<\/strong> Forms identify mandatory fields. A customer account requires identification and billing details, an email address and a telephone number. The telephone number is used for domain registration processes that require it, identity checks where necessary, fraud prevention and occasional service-related contact, for example during incidents. Failure to provide necessary data may prevent account creation, order processing or handling of a request. An enquiry does not require all the data needed to purchase a service. Anyone providing another person&#8217;s data must be entitled to do so and provide only what is necessary.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-3\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-3\">3. What information we collect<\/h3>\n    <p>It depends on what you do: an enquiry doesn&#8217;t need the same information as a service purchase. We may process contact, billing, support and website usage data.<\/p>\n    <p>Most of it comes from you, but it can also come from whoever manages your account, someone referring you through Partners or Recommend WebMonster, or providers involved in a transaction. Forms show which details are required.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">4. Purposes and legal bases<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.1. Enquiries and quotes.<\/strong> Contact details and request content are used to respond, prepare proposals and follow up. Where an enquiry concerns a potential purchase requested by the data subject, the legal basis is taking pre-contractual steps. For other enquiries relating to WebMonster&#8217;s business, the basis is its legitimate interest in responding to communications received. Rights requests and legally required communications are handled on the basis of a legal obligation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.2. Accounts, purchases and service provision.<\/strong> Necessary data is used to create and manage the account, identify the Customer, process orders, provide services, handle renewals and cancellations and send communications necessary for that relationship. The basis is performance of the contract or requested pre-contractual steps. Data about company representatives and contacts is processed on the basis of the legitimate interest in managing the relationship with the entity they represent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.3. Payment collection, billing and legal obligations.<\/strong> Data is used to collect service payments, manage authorised recurring payments, payment problems and refunds, and issue and retain invoices. Payment management is based on contract performance. Invoicing, accounting and tax obligations are based on compliance with legal obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.4. Support and technical work.<\/strong> Requests, communications and necessary data are used to resolve incidents, carry out authorised work and document actions taken. The basis is performance of the contractual relationship. Where work involves processing personal content hosted on the Customer&#8217;s behalf, the processing agreement referred to in section 2.3 also applies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.5. Domains.<\/strong> Registrant and necessary contact details are used to process requested registrations, renewals, transfers and other operations, including checks required by the relevant registry. The basis is contract performance and, where applicable, compliance with legal obligations. The rules for each domain extension are addressed in the Specific <a href=\"https:\/\/www.webmonster.io\/en\/domain-terms\/\">domain terms<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.6. WebMonster Partners and Recommend WebMonster.<\/strong> Data is used to manage applications, participation, referral attribution, commissions, rewards, balances, settlements and communications for both programmes. The basis is taking pre-contractual steps and performing the participation relationship; tax documentation is processed to meet legal obligations. Checking for abuse and improper attribution is based on the legitimate interest in protecting the programmes. Attribution cookies requiring consent will be used only after consent has been obtained.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.7. Security and defence of rights.<\/strong> WebMonster processes necessary data to protect accounts and systems, investigate unauthorised access, prevent fraud and abuse, and establish, exercise or defend legal claims. The basis is the legitimate interest in protecting the business, its services and users, and compliance with legal obligations where applicable. Processing is limited to what is necessary for those purposes, with the rights of affected individuals taken into account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.8. Browsing statistics.<\/strong> Data is used to analyse visits and website usage through Google Analytics. The basis is consent given through cookie preferences, which may be withdrawn at any time. Rejecting statistics cookies does not prevent service purchases.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4.9. Fraud analysis.<\/strong> WebMonster uses FraudLabs Pro to assess order fraud risk automatically, using transaction data and checks on the identity, contact details and connection used. If risk is detected, the order is held for human review. WebMonster assesses the information before deciding whether to accept or reject it; the system&#8217;s result does not by itself determine rejection or cancellation. The affected person may provide clarification and request a review of the decision through the channels in section 1. This processing is based on the legitimate interest in preventing fraudulent transactions and protecting WebMonster and its customers.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-4\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-4\">4. Why we use it<\/h3>\n    <p>We use the data needed to help you, manage services, collect payments, meet legal obligations and protect accounts against fraud. Not all those uses depend on consent; where consent is needed, we&#8217;ll ask for it.<\/p>\n    <p>Orders undergo automated fraud checks. If a warning is raised, a person reviews the case: the system doesn&#8217;t decide on its own to reject it. You can provide clarification and ask for a review.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">5. Data retention<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.1.<\/strong> Data needed to manage the account and provide services will be kept while the Customer relationship continues or while services, hour packages, balances or obligations remain outstanding, including participation in WebMonster Partners or Recommend WebMonster. Ending one service does not necessarily end every relationship with WebMonster.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.2.<\/strong> After the relationship ends, only documentation necessary to meet tax and commercial obligations and address potential liabilities will be kept, for the applicable statutory retention and limitation periods. If a claim or proceeding is pending, related documents will be retained until it is resolved and for the relevant subsequent periods. Retention does not authorise use for other purposes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.3.<\/strong> Enquiries that do not lead to a purchase will be kept as long as necessary to answer them and complete the requested steps. After that, only information that must be retained for legal obligations or specific liabilities will be kept for the applicable periods.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.4.<\/strong> Invoices and accounting records will be retained for the periods required by tax and commercial law, taking account of the applicable calculation rules and any extensions or interruptions. These documents may be retained in a separate archive even after the customer account is closed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.5.<\/strong> Technical and security logs will be retained as long as needed to check operation, detect and investigate incidents and protect systems. Where logs are needed as evidence of an incident or claim, the relevant records will be kept for the time needed to address it and any associated liabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.6.<\/strong> Google Analytics retention is described in section 8. Content hosted on the Customer&#8217;s behalf and associated backups are governed by the specific terms and the data processing agreement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.7.<\/strong> Recipients acting as independent controllers, identified in section 6, apply their own retention criteria to processing for which they are responsible, as explained in their privacy information. WebMonster&#8217;s retention periods do not mean those recipients automatically delete their records on the same date.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5.8.<\/strong> When erasure is appropriate, data will be blocked where necessary to address potential liabilities, as required by law. Blocking prevents ordinary use. Once the applicable periods expire, the data will be destroyed or irreversibly anonymised.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-5\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-5\">5. Why cancelling doesn&#8217;t always mean everything is deleted<\/h3>\n    <p>While we have a relationship with you, we keep what we need to manage it. Afterwards, we may be required to retain documents such as invoices, or information needed to handle claims.<\/p>\n    <p>That doesn&#8217;t let us keep using it for any purpose we choose. Data hosted on your website and its backups have their own retention rules.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">6. Data recipients<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.1.<\/strong> Accounts, orders, billing and support requests are managed through systems hosted on infrastructure administered by WebMonster. Infrastructure and support providers may access data where they need to process it to provide their services, subject to the appropriate confidentiality, security and data protection obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.2.<\/strong> Necessary data will also be disclosed to the following recipients, depending on the transaction:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Stripe:<\/strong> to process payments, authorised recurring charges, refunds and associated transaction checks. Depending on the activity, Stripe may act as WebMonster&#8217;s processor or as controller of its own processing, including processing arising from its legal obligations and certain fraud prevention activities. Its <a href=\"https:\/\/stripe.com\/es\/privacy\" target=\"_blank\" rel=\"noopener\">Privacy policy<\/a> explains this processing.<\/li>\n\n\n<li><strong>Hexasoft Development Sdn. Bhd. (FraudLabs Pro), Malaysia:<\/strong> to analyse order fraud risk. It receives transaction data and the identification, contact and technical data needed for checks. The provider states that it acts as an independent controller for its processing, under its <a href=\"https:\/\/www.fraudlabspro.com\/privacy-policy\" target=\"_blank\" rel=\"noopener\">Privacy policy<\/a>.<\/li>\n\n\n<li><strong>Trilus Asesores Economistas, S.L.:<\/strong> for tax and accounting management and advice, with access to the documents needed for those functions.<\/li>\n\n\n<li><strong>Domain registrars and registries:<\/strong> to carry out requested operations and related checks. Hosting Concepts B.V., trading as Openprovider, is involved alongside the registry for the purchased extension. Disclosures and access to registration data are subject to applicable rules; purchasing a domain does not mean that all the registrant&#8217;s details are published indiscriminately.<\/li>\n\n\n<li><strong>Google:<\/strong> to provide Google Analytics where statistics cookies have been accepted. Further information is provided in section 8.<\/li>\n\n\n<li><strong>Financial institutions and providers of the collection or payment method used:<\/strong> to carry out and document transactions, including any Partners settlements.<\/li>\n\n\n<li><strong>Public administrations, authorities and courts:<\/strong> where a legal obligation or valid request exists. Professionals assisting WebMonster with a claim may also be involved, with access limited to what is necessary.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.3.<\/strong> In WebMonster Partners and Recommend WebMonster, each participant receives the information needed to check their attribution, commissions and rewards. Participation in either programme does not provide general access to referred customers&#8217; accounts, invoices, communications or hosted content.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6.4.<\/strong> Providers acting on WebMonster&#8217;s behalf process data according to its instructions and the relevant agreement. Where a recipient determines its own purposes and means, it acts as controller for the processing for which it is responsible.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-6\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-6\">6. Who we share information with<\/h3>\n    <p>Some operations need other providers: Stripe for payments, for example, or a registrar to manage domains. Here we explain who is involved and why.<\/p>\n    <p>Some work under our instructions; others have their own obligations and processing activities.<\/p>\n    <p>Someone who refers you through Partners or Recommend WebMonster doesn&#8217;t get general access to your account or data.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">7. International transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7.1.<\/strong> Using international providers, particularly Google, Stripe and FraudLabs Pro, may involve processing data outside the European Economic Area. Hosting the website or customer area on European servers does not rule out those transfers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7.2.<\/strong> Transfers will take place with the safeguards required by law: an adequacy decision applicable to the recipient and processing or, where appropriate, standard contractual clauses and necessary supplementary measures. Accepting this policy does not give blanket permission to transfer data without those safeguards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7.3.<\/strong> Data subjects may request information about the applicable safeguards and how to obtain a copy through the channels in section 1. They may also consult the <a href=\"https:\/\/business.safety.google\/adsprocessorterms\/\" target=\"_blank\" rel=\"noopener\">data processing terms applicable to Google Analytics<\/a>, <a href=\"https:\/\/stripe.com\/es\/legal\/dpa\" target=\"_blank\" rel=\"noopener\">Stripe&#8217;s Data Processing Agreement<\/a> and <a href=\"https:\/\/www.fraudlabspro.com\/fraudlabspro_dpa.pdf\" target=\"_blank\" rel=\"noopener\">FraudLabs Pro&#8217;s data protection agreement<\/a>, which includes controller-to-controller standard contractual clauses for transfers that require them.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-7\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-7\">7. Some providers are outside Europe<\/h3>\n    <p>Even though our systems are hosted in Europe, using international providers may involve processing data outside the European Economic Area.<\/p>\n    <p>Those transfers must have the required safeguards. You can ask us about them: accepting this policy doesn&#8217;t authorise every possible transfer abroad.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">8. Google Analytics and cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.1.<\/strong> Google Analytics is used to obtain statistics on visits, pages viewed and interactions, and understand how the website is used. It may process cookie-related identifiers and technical browser and device information. WebMonster activates it only after obtaining consent for statistics cookies. It is not currently connected to Google Ads.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.2.<\/strong> Retention is configured for two months for event data and fourteen months for user data. The retention period linked to the user identifier resets when new activity is recorded. These settings do not affect standard aggregated statistical reports and are not the same as the lifespan of each cookie.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.3.<\/strong> Data subjects may accept, reject or change their preferences through the website&#8217;s cookie management mechanism. Withdrawing consent does not affect the lawfulness of prior processing or prevent the exercise of applicable rights over data already collected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8.4.<\/strong> The <a href=\"https:\/\/www.webmonster.io\/en\/cookie-policy\/\">Cookie policy<\/a> identifies the cookies used and their characteristics. Google explains its services in <a href=\"https:\/\/policies.google.com\/technologies\/partner-sites?hl=es\" target=\"_blank\" rel=\"noopener\">How Google uses information from sites or apps that use our services<\/a>, and in its <a href=\"https:\/\/support.google.com\/analytics\/answer\/7667196?hl=es\" target=\"_blank\" rel=\"noopener\">information on Analytics data retention<\/a>.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-8\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-8\">8. Statistics need your permission<\/h3>\n    <p>We activate Google Analytics only if you accept statistics cookies. It helps us understand how the website is used.<\/p>\n    <p>You can decline or change your choice in the cookie settings without being prevented from purchasing services. Withdrawing permission doesn&#8217;t automatically delete data collected earlier.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">9. Data subjects&#8217; rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.1.<\/strong> In the circumstances and subject to the requirements established by law, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and portability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.2.<\/strong> Where processing is based on legitimate interests, data subjects may object on grounds relating to their particular situation. WebMonster will stop processing unless it demonstrates overriding compelling legitimate grounds or processing is necessary to establish, exercise or defend legal claims.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.3.<\/strong> Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of earlier processing. Portability applies, where appropriate, to data provided by the data subject and processed by automated means on the basis of consent or a contract.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.4.<\/strong> Requests are submitted through the channels in section 1, identifying the right to be exercised and providing the information needed to locate the processing. If there are reasonable doubts about identity, WebMonster may request proportionate additional information to verify it. A copy of an identity document will not be required as a matter of routine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.5.<\/strong> WebMonster will respond without undue delay and, in any event, within one month of receiving the request. Where necessary because of complexity or the number of requests, that period may be extended by two further months; the extension and its reasons will be communicated within the first month. Exercising rights is free of charge except in the exceptional cases permitted by law.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.6.<\/strong> Erasure does not require deletion of information that must be retained to meet a legal obligation or handle claims. In those cases, its use will be restricted and blocking applied where appropriate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>9.7.<\/strong> Data subjects may lodge a complaint with the <a href=\"https:\/\/www.aepd.es\/\" target=\"_blank\" rel=\"noopener\">Spanish Data Protection Agency<\/a> or the competent supervisory authority. They do not have to complain to WebMonster first.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-9\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-9\">9. What you can ask us to do with your data<\/h3>\n    <p>You can ask to access your data, correct it or have it deleted, among other rights, subject to the applicable requirements. If a use depends on your consent, you can withdraw it.<\/p>\n    <p>We&#8217;ll respond within one month. If we need an extension for the permitted reasons, we&#8217;ll let you know during that first month. Asking for deletion doesn&#8217;t remove our obligation to retain certain legally required information.<\/p>\n    <p>You can also complain to the Spanish Data Protection Agency without contacting us first.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<section class=\"wp-block-group wm-legal-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group wm-legal-section__text has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">10. Security and policy updates<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.1.<\/strong> WebMonster applies technical and organisational measures appropriate to the risk, including access controls, enhanced authentication for administration, encrypted connections and access logging. Two-factor authentication is available for customer accounts and is optional. Measures are reviewed as services and risks evolve, without guaranteeing the absolute absence of incidents.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10.2.<\/strong> This policy may be updated to reflect changes in processing, providers or legal requirements. The current version will be available on the website. Significant changes will be communicated to affected individuals through an appropriate channel. If data is to be used for a new purpose, information will be provided and consent obtained where necessary before that processing begins.<\/p>\n\n<\/div>\n\n\n\n<aside class=\"wm-panel-soft wm-legal-explainer wm-legal-explainer--summary\" aria-labelledby=\"privacy-summary-10\">\n    <p class=\"wm-section-kicker wm-legal-explainer__label\"><img src=\"https:\/\/www.webmonster.io\/wp-content\/themes\/webmonster\/assets\/illustrations\/bocadillo-con-cuernos.png\" width=\"1254\" height=\"1254\" alt=\"\" loading=\"lazy\" decoding=\"async\">In short<\/p>\n    <h3 id=\"privacy-summary-10\">10. How we protect data<\/h3>\n    <p>We apply access controls, encrypted connections and other security measures, although none removes every risk. You can enable two-step verification to protect your account.<\/p>\n    <p>We&#8217;ll communicate significant changes to this policy. Publishing a new version doesn&#8217;t replace any permission required to use your data for a new purpose.<\/p>\n<\/aside>\n<\/section>\n\n\n\n<p class=\"has-text-align-right wm-legal-version wp-block-paragraph\">VERSION: 26-2<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Legal pages Legal information Legal notice General terms and conditions Privacy Privacy policy Cookie policy Data processing agreement Service terms Hosting terms Domain terms Email terms WebMonster Care terms WebMonster Managed terms WebMonster Pros terms Service level agreement (SLA) Partners Partners and Recommend WebMonster Accessibility Accessibility statement Privacy Privacy policy In plain English What we [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"no-title","meta":{"footnotes":""},"class_list":["post-635","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/pages\/635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/comments?post=635"}],"version-history":[{"count":0,"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/pages\/635\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.webmonster.io\/en\/wp-json\/wp\/v2\/media?parent=635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}