Get protected

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how GoldNetwork Sàrl (“we”, “us”, “our”) collects and uses personal data when you visit www.defendmywp.com, contact us, or buy and use DefendMyWP. We handle personal data in accordance with the Swiss Federal Act on Data Protection (nFADP).

1. Who is responsible

The data controller is:
GoldNetwork Sàrl
Avenue du Gros-Chene 32, 1213 Onex, Switzerland
Company ID: CHE-313.875.937
Contact: legal@defendmywp.com

DefendMyWP is a product of GoldNetwork Sàrl.

2. What this policy covers

It covers personal data we process as controller: data from visitors to our website, from people who contact us, and from customers who buy and run the DefendMyWP plugin. It also explains what the plugin sends back to us. It does not cover the processing you carry out on your own website using the plugin. There, you are the controller of your visitors’ data (see section 3f).

3. What we collect and why

a. Visiting the website

Our server and security logs record technical data such as IP address, browser/user-agent, pages requested and timestamps. We use this to deliver the website, keep it secure and prevent abuse. Legal basis: our legitimate interest in a secure, working website.

b. Contacting us (including the Business enquiry form)

When you use our Business enquiry form or email us, we process the details you provide, for the form: the number of websites, your name, email, phone (optional) and message, plus the IP address and time of submission for spam prevention. We use this only to respond to and manage your enquiry. Legal basis: steps taken at your request prior to a contract, and our legitimate interest in handling enquiries and preventing abuse.

c. Buying a subscription

When you purchase, our checkout provider SureCart and our payment providers Stripe and PayPal process your name, email, billing details and payment information, and we receive your order and subscription records. We do not see or store full card numbers. Legal basis: performance of our contract with you and compliance with legal (e.g. accounting) obligations.

d. Your account and licence

We keep your licence key and activation records, which include a one-way hash of your website address and the website host name, so we can manage your licence and its website limit. Legal basis: performance of our contract with you.

e. Support

If you contact support we process the messages and account details needed to help you. Legal basis: performance of our contract and our legitimate interest in supporting customers.

f. Data the DefendMyWP plugin sends us

When installed on your website, the plugin contacts our services to:

  • Fetch rule updates and plugin updates. The request includes only the plugin and WordPress version numbers (in the user-agent). No content from your website is sent.
  • Activate your licence. This sends your licence key, a one-way hash of your website address and your website host name.
  • Run the Health Check scanner. This sends file paths and cryptographic hashes of inspected files so they can be compared against known-good references. File paths can contain a server account name. The contents of your files are not sent.

The firewall’s blocked-request logs are stored only on your own website (in your database and the plugin’s protected folder); we do not receive them. Those logs are personal data of your visitors for which you are the controller. The plugin redacts sensitive values and keeps entries for 30 days by default (configurable).

4. Cookies

We use only cookies that are necessary for the website and checkout to function (for example, to keep your cart and process payment through SureCart, Stripe and PayPal). We do not use advertising cookies. If we add analytics or other non-essential cookies in future, we will ask for your consent first.

5. Who we share data with

We use carefully selected service providers that process data on our behalf:

  • SureCart, checkout, orders and licences
  • Stripe and PayPal, payment processing
  • OVH, website hosting and transactional email delivery (data centres in the EU)

We do not sell personal data. We may disclose data where required by law.

6. International transfers

Some of these providers are located outside Switzerland, including in the United States. Where data is transferred to a country without an equivalent level of protection, the transfer is covered by appropriate safeguards, such as the providers’ certification under the Swiss–US Data Privacy Framework or standard contractual clauses.

7. How long we keep data

Enquiry messages: up to 24 months. Customer, order and licence records: for the life of your subscription and as long as required by law afterwards (e.g. 10 years for accounting records). Website/security logs: a limited period for security purposes. We delete or anonymise data when it is no longer needed.

8. Your rights

You may request access to the personal data we hold about you, and its correction or deletion. Where processing is based on consent or our legitimate interests, you may withdraw consent or object. To exercise your rights, email legal@defendmywp.com; we may ask you to verify your identity and will respond within the time allowed by law. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

9. Data security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), access controls, two-factor authentication for administrative access and the principle of least privilege.

10. Children

Our website and products are intended for businesses and adults, not for children, and we do not knowingly collect data from children.

11. Changes

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.

12. Contact

Questions about this policy or your data: legal@defendmywp.com.