In short
- We collect your name and email when you buy or contact us. That is nearly all of it.
- We never see your card number — payment providers handle that, not us.
- The plugin on your website never sends us your data or your customers' data. It has no phone-home code.
- We do not sell your personal information to anyone, and we never have.
- You can ask us to show you, correct or delete your information at any time: help@oneclickorderpro.com.
1. Who we are
This website and the software sold on it are operated by Muhammad Abbas, a sole proprietor based in Multan, Punjab, Pakistan, trading as “One Click Order”. We are the data controller for the information described here.
For anything to do with privacy, write to help@oneclickorderpro.com. We reply within 2 business days, and always within 30 days.
2. What this policy covers
This policy explains what happens to personal information when you:
- visit oneclickorderpro.com;
- send us a message through our contact form or by email;
- buy a licence for One Click Order Pro; or
- use the “Report an issue” screen inside the plugin.
It does not cover what happens on your WooCommerce store. If you install our plugin and your shoppers place orders through it, you are the controller of their data and your own privacy policy applies — see section 5.
3. Information you give us
When you contact us
Our contact form asks for four things, and all four are required: your name, your email address, a subject and your message.
You may also attach one file (JPG, PNG, PDF or DOCX, up to 5 MB) — usually a screenshot of a problem. The attachment is emailed straight to our support inbox and then deleted from the web server. Please do not attach anything containing your customers' personal data, passwords or card details; we do not need them and we do not want them.
When you buy
To sell you a licence and to deliver it, we record:
- your name and email address;
- your order details — what you bought, how many days, the amount, the currency and the date;
- an order reference and the payment provider's transaction reference;
- the country given for billing or tax purposes.
We never receive your card details
Card numbers, CVV codes and bank credentials are entered on the payment provider's own secure page. They never pass through our website and we never store them. At most, a provider tells us that a payment succeeded, along with the last four digits of a card so you can recognise the purchase.
When you use “Report an issue” inside the plugin
The plugin has a screen in your WordPress dashboard that lets you report a problem to us. If — and only if — you use it, it emails us the name, email address and note you type, plus a screenshot if you attach one. Nothing is sent unless you fill that form in and press send.
When you email us directly
We keep the message, your email address and anything you choose to include, so that we have a record of the conversation and can help you properly next time.
4. Information collected automatically
Like every website, ours records some technical information automatically:
- Server logs kept by our hosting provider — your IP address, the page you asked for, the date and time, your browser and operating system, and the page that sent you to us. These exist to keep the site running and to spot attacks.
- A session cookie (
PHPSESSID), set when a page needs it. It carries no personal data; it exists so our contact form can protect itself against forged submissions (CSRF). - Advertising and analytics data from the Meta Pixel, described in section 6.
5. What the plugin does NOT send us
The plugin does not talk to us
Our plugin runs entirely on your own website. It contains no tracking code, no analytics, no licence call-home and no hidden requests to our servers. You can open the files and check — the PHP source is GPL-licensed and readable.
This means that all of the following stays on your own hosting, in your own WordPress database, and never reaches us:
- your shoppers' names, phone numbers, email addresses and delivery addresses;
- the orders placed through the one-click form;
- your products, prices and stock;
- your WooCommerce data, your site's traffic, and your plugin settings.
The only exceptions are the ones you trigger yourself: buying a licence, emailing us, using our contact form, or using the plugin's “Report an issue” screen.
When you uninstall the plugin, it deletes its own settings from your database. Your WooCommerce orders are left alone, because they are yours.
7. Why we use your information
We only use personal information for the reasons below. If the GDPR or UK GDPR applies to you, the last column is the legal basis we rely on.
| What we do | Information used | Legal basis |
|---|---|---|
| Take your order and send you the download | Name, email, order details | Performing our contract with you |
| Answer your questions and give support | Name, email, message, attachment | Performing our contract / our legitimate interest in helping customers |
| Send service emails about your purchase (receipt, download link, licence ending) | Name, email, order details | Performing our contract |
| Keep accounting and tax records | Order and payment records | Legal obligation |
| Keep the site secure and stop fraud and abuse | Server logs, IP address, order records | Our legitimate interest in protecting our business |
| Understand which pages people visit and measure our advertising | Meta Pixel data | Consent where the law requires it; otherwise our legitimate interest in promoting our product |
| Improve the plugin and fix faults | Bug reports, screenshots, support emails | Our legitimate interest in improving our product |
| Defend a legal claim or handle a payment dispute | Whatever is relevant to the claim | Legal obligation / our legitimate interest in defending ourselves |
9. Where your information is held
We are based in Pakistan, and our website and records are held on servers operated by our hosting provider. The other companies listed above operate internationally, so your information may be processed in countries outside your own — including the European Union and the United States.
Data-protection law is not the same everywhere. Where we transfer personal information out of the EEA or the UK, we rely on the safeguards those providers put in place — normally the European Commission's Standard Contractual Clauses, or an adequacy decision. You can ask us for details.
10. How long we keep it
We keep information only as long as we actually need it:
| Information | Kept for | Why |
|---|---|---|
| Order and payment records | Up to 7 years | Tax and accounting rules |
| Support emails and contact-form messages | Up to 24 months after the conversation ends | So we have the history if you come back |
| Contact-form attachments on the web server | Deleted immediately once the email is sent | We only need them in the inbox |
| Download links / tokens | 72 hours | They expire by design |
| Server logs | Normally 30 days | Security and troubleshooting |
| Meta Pixel data | Held by Meta under Meta's own retention rules | Not in our control |
When a period ends we delete the information or anonymise it. We may keep a record for longer if we have to for a legal claim, an open dispute or a legal obligation.
11. How we protect it
We take sensible precautions to protect what we hold:
- the whole website is served over an encrypted HTTPS connection;
- card data never touches our systems, so it cannot leak from them;
- our order and token files are stored outside the public web folder, or blocked from being downloaded;
- the contact form checks file types and sizes, renames uploads, and deletes them after sending;
- the form is protected against forged submissions, and inputs are cleaned before use;
- access to our systems is limited to people who need it, using strong, unique passwords.
No website can promise perfect security. If a breach ever happens that puts your rights at risk, we will tell you and the relevant authority without undue delay, and in any case within 72 hours of becoming aware where the law requires it.
12. Your rights over your information
Whoever and wherever you are, you may ask us to:
- Show you the personal information we hold about you, and give you a copy.
- Correct anything that is wrong or incomplete.
- Delete your information, where we do not have to keep it for tax or legal reasons.
- Limit how we use it while a question about it is being sorted out.
- Send it elsewhere — a copy in a common, machine-readable format.
- Object to us using it on the basis of legitimate interests, including for advertising measurement.
- Withdraw consent at any time, where we asked for consent. This does not undo anything done before you withdrew it.
If you are in the EEA or the UK
All of the rights above are yours under the GDPR / UK GDPR, and you can complain to your national data-protection authority (section 19).
If you are in California
You may ask what categories of personal information we collect, use and disclose, ask for a copy, ask us to delete or correct it, and you will never be treated differently for asking. We do not sell or share personal information as those words are defined by the CCPA/CPRA, and we do not process it for cross-context behavioural advertising beyond the Meta Pixel measurement described in section 6 — which you can block in your browser.
Everyone else
We apply the same standard to every customer, wherever you live, because it is simpler and fairer.
13. How to use those rights
Email help@oneclickorderpro.com with the subject “Privacy request”, and tell us what you would like us to do. Please write from the email address you used with us, or give us your order number, so we can be sure the request really is yours — we will not hand personal information to the wrong person.
Using these rights is free. We answer within 30 days. If a request is unusually complicated we may need up to 60 days, and we will tell you before that happens.
14. Marketing emails
We send you emails you need — your receipt, your download link, replies to your questions, and important notices about a licence you hold. These are service emails and you cannot unsubscribe from them while you have an active purchase.
If we ever send product news or offers, every one of those emails carries an unsubscribe link, and one click is enough. We do not pass your email address to anyone else for their marketing.
15. Children's privacy
Our product is a business tool for shop owners. It is not aimed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, email help@oneclickorderpro.com and we will delete it promptly.
16. No automated decisions about you
We do not use profiling or automated decision-making that produces legal effects for you. Every decision that affects you — a refund, a support answer, a licence question — is made by a person.
17. Links to other websites
Our website links to other places, including the WordPress.org plugin directory, YouTube, Facebook and our payment providers' pages. Once you follow such a link, that company's privacy policy applies, not ours. We are not responsible for how they handle your information, so it is worth reading their policies too.
18. Changes to this policy
We update this policy when what we do changes, or when the law does. The version on this page is always the current one, and the effective date and version number are shown at the top.
If we ever make a change that significantly affects how we use your personal information, we will tell customers by email before it takes effect.
19. How to complain
If you are not happy with how we have handled your information, please tell us first at help@oneclickorderpro.com. We take it seriously and we would like the chance to put it right.
You also have the right to complain to a data-protection authority — in the EEA, the authority in the country where you live or work; in the UK, the Information Commissioner's Office (ico.org.uk). Complaining to us first does not take that right away.
20. How to contact us
For any privacy question, or to use any of the rights above, email help@oneclickorderpro.com. Our full business details are in the box below this policy.