Privacy Policy

1. Overview

This Privacy Policy describes how DenniDigital ("we", "us", or "our") collects, uses, and protects personal data in connection with the InnPress PMS plugin and this website (innpresspms.com).

InnPress PMS is a self-hosted WordPress plugin. The vast majority of data it processes — your reservations, guest records, and property/room data — lives entirely in your own WordPress database. We do not have access to that data. This policy covers only the limited personal data we collect directly through our website and licensing system.

By using this website or the Plugin, you agree to the practices described in this policy. If you are using the Managed Hosting service, please also refer to DenniDigital's separate privacy notice for hosted services.

2. Who We Are

The data controller for personal data collected through this website and the Plugin licensing system is DenniDigital, the developer and distributor of InnPress PMS.

3. Data We Collect

We collect personal data in the following contexts:

3.1 Purchase & Account Registration

When you purchase a Pro License, we collect your name, email address, billing address, and payment information. Payment details are processed by our payment processor (Stripe) and are not stored on our servers. We receive only a tokenised reference and the last four digits of your card.

3.2 License Activation

When you activate the Plugin with a License Key, our licensing server records your site URL, the Plugin version installed, your WordPress version, and the activation date. This data is used solely to validate your license entitlement and deliver updates.

3.3 Newsletter Subscription

If you subscribe to our newsletter via the footer form, we collect your email address. You may unsubscribe at any time using the link in any newsletter email. We do not share newsletter subscriber lists with third parties.

3.4 Contact Form

When you submit a message via our contact form, we collect your name, email address, subject, and message content. This information is used only to respond to your enquiry.

3.5 Website Analytics

We may collect aggregated, anonymised usage data about how visitors interact with this website (page views, referral sources, browser type). Where analytics tools are used, they are configured to anonymise IP addresses and comply with applicable privacy law. We do not sell or share analytics data with third parties for advertising purposes.

3.6 Support Communications

When you contact support, we collect the information you provide in your message, including any diagnostic data you choose to share (such as error logs or screenshots). This data is used solely to diagnose and resolve your issue.

4. How We Use Your Data

We do not use your personal data for automated decision-making, profiling, or advertising targeting.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal basis for processing personal data is:

• Contract performance: Processing your purchase details, delivering your license key, providing updates and support.
• Legitimate interests: License validation, security monitoring, and anonymised website analytics.
• Consent: Newsletter subscriptions. You may withdraw consent at any time by unsubscribing.
• Legal obligation: Retaining transaction records for tax and accounting compliance.

6. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the following categories of trusted third parties, and only to the extent necessary:

• Payment processor (Stripe): To process Pro License purchases. Stripe is PCI DSS compliant. Their privacy policy is available at stripe.com/privacy.
• Licensing platform (Freemius): To manage license keys, activations, and plugin updates. Freemius receives your purchase email, site URL, and Plugin version for this purpose.
• Email delivery provider: To send transactional emails (receipts, license keys, renewal reminders) and newsletter emails.

All third-party processors operate under data processing agreements and are bound by confidentiality obligations and applicable data protection law.

We may disclose personal data if required by law, court order, or to protect our legal rights.

7. Your CRM Data (Plugin Data)

InnPress PMS stores all PMS records — reservations, guests, rooms, folios, activities, communications — in the WordPress database on your own server. We do not have access to, transmit, or process this data.

You are the data controller for all personal data stored in your CRM. You are responsible for:

• Obtaining valid consent or establishing a lawful basis for collecting and storing your clients' personal data.
• Responding to data subject access requests, deletion requests, and other rights exercised by your contacts.
• Securing your WordPress installation, database, and hosting environment.
• Maintaining appropriate backups of your CRM data.

The Plugin includes GDPR compliance tools (consent tracking, data export, and data deletion) to assist you in meeting your obligations. These tools are aids, not a guarantee of compliance.

8. Cookies

This website uses cookies for the following purposes:

We do not use advertising or tracking cookies. You may disable cookies in your browser settings; doing so may affect some functional aspects of this website.

9. Data Retention

• Purchase and billing records: Retained for 7 years to comply with tax and accounting obligations.
• License activation records: Retained for the duration of your active license plus 1 year after expiry.
• Newsletter subscriptions: Retained until you unsubscribe or request deletion.
• Support communications: Retained for 2 years to assist with follow-up and product improvements.
• Contact form submissions: Retained for 1 year, then deleted.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where we have no legal obligation to retain it.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Unsubscribe from newsletters at any time without affecting any other processing.

To exercise any of these rights, contact us at our contact page. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include encrypted transmission (HTTPS), access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying affected users promptly in the event of a data breach that poses a risk to their rights and freedoms.

12. Children's Privacy

InnPress PMS is a professional business tool intended for use by adults. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that a minor has provided personal data, we will delete it promptly. If you believe a minor has submitted data to us, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date and, where required by law, notify you by email or prominent notice on this website before the changes take effect.

Your continued use of this website or the Plugin after the effective date of the revised policy constitutes acknowledgement of the changes.

14. Contact

For any questions, concerns, or requests relating to this Privacy Policy or your personal data: