Privacy Policy

Last updated: March 22, 2026

1. Who We Are

ParcelSelector is a WooCommerce plugin and associated API service that enables parcel locker selection during checkout. The service is operated by the plugin author and accessible at parcelselector.com. Contact: [email protected]

For GDPR purposes, ParcelSelector acts as a data processor on behalf of the WooCommerce store owner (the data controller) when processing end-customer order data.

2. What Data We Collect and Why

Parcel Locker Map API (ANUNAKI Engine)

When a customer views the parcel locker map on a WooCommerce checkout page, the plugin fetches locker location data from our API. Only the country code (e.g. "pl", "de", "gb") is transmitted — no personal data. IP addresses in server logs are retained for a maximum of 30 days. If you use the Classic (offline) engine, no request is made to our servers at all.

License Registration and Activation

When a store administrator activates the plugin, the following data is transmitted to our license server:

• Installation ID (UUID) — auto-generated, contains no personal information
• WordPress site URL — for license verification and fraud prevention
• Email address (if provided voluntarily) — for license key delivery and account recovery
• License type (FREE / PRO / etc.) — to enforce plan limits
• License mnemonic (BIP-39 phrase) — your license key, equivalent of a password

License Heartbeat (Daily Sync)

The plugin contacts our server approximately once per day to sync license status. Data sent: Installation ID, license type, aggregate order count, order limit. No customer personal data (no names, emails, addresses) is ever transmitted.

Order Tracking

When a WooCommerce order using parcel locker delivery is completed, the plugin sends: Installation ID and the WooCommerce Order ID (a sequential integer, e.g. 1042). We never receive the customer name, address, email, phone number, or payment information.

Data Stored Locally (Not Transmitted to Us)

The plugin stores the following data in your store's WordPress database only — it never reaches our servers: selected locker ID, locker name, locker address, locker city (all stored as WooCommerce order metadata). This data is subject to your store's own privacy policy.

3. Legal Basis (GDPR Article 6)

• Map API requests — Legitimate interest (Art. 6(1)(f))
• License registration — Contract performance (Art. 6(1)(b))
• Heartbeat sync & order tracking — Contract performance (Art. 6(1)(b))

4. Data Sharing

We do not sell, rent, or share personal data with third parties, except infrastructure providers (hosting, CDN) under appropriate DPAs, or when required by law.

5. Data Retention

• License and installation data — duration of active license + 90 days after expiry
• Email address (if provided) — until deletion is requested
• Server logs (IP addresses) — maximum 30 days
• Aggregate order counts — duration of the license

6. Your Rights (GDPR)

If you are located in the EEA, you have the right to access, rectify, erase, port your data, and to object to processing based on legitimate interest. To exercise any right, contact [email protected] — we will respond within 30 days.

For end-customers of WooCommerce stores: your rights regarding order data must be exercised with the store owner (the data controller). WordPress supports GDPR data export and erasure natively via WP Admin → Tools → Privacy.

7. Security

All data transmission uses HTTPS/TLS. We do not store credit card data or payment information.

8. Changes to This Policy

We will notify registered users of material changes by updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance.