Data Sharing Policy

1. Introduction & Scope

At Wp Admin, we recognize that data privacy and transparency are foundational to trust. This Data Sharing Policy outlines how we collect, process, protect, and share information in the course of delivering professional WordPress administration services.

This policy applies to all clients, website owners, contractors, and authorized users who engage with Wp Admin's management platform, support channels, and service agreements.

2. Data We Process

To effectively manage and secure your WordPress website(s), we process the following categories of data:

• Account & Authentication Data: Admin credentials, API keys, SSO tokens, and two-factor authentication configurations provided by you.
• Site & Technical Data: WordPress core versions, plugin/theme metadata, database configurations, server logs, and performance metrics.
• Business & Contact Information: Company name, billing address, support email, and emergency contact details.
• Usage & Interaction Data: Support ticket history, dashboard access logs, feature utilization, and communication records.

All data is processed under a lawful basis: contractual necessity (service delivery), legitimate interest (site security & maintenance), or explicit consent.

3. How & Why We Share Data

We share data only when necessary and under strict contractual or legal obligations. Our sharing practices include:

• Service Delivery: Sharing essential credentials and access tokens with our certified WordPress engineers for maintenance, updates, and troubleshooting.
• Infrastructure Providers: Transferring site backups, logs, and performance data to hosting providers and CDN networks for optimization and disaster recovery.
• Legal & Regulatory Compliance: Disclosing data when required by law, court order, or regulatory authority to protect our rights, property, or safety.
• Business Transfers: In the event of merger, acquisition, or asset sale, client data may be transferred as part of the transaction, with continued privacy obligations enforced.

4. Vendors & Partners

We carefully vet all third-party service providers. Each vendor signs a Data Processing Agreement (DPA) and undergoes security audits. Key partners include:

We do not share data with advertising networks, data brokers, or unverified third parties.

5. Security & Protection Standards

Protecting shared data is our highest priority. We implement industry-leading safeguards:

• End-to-end AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Role-based access control (RBAC) and principle of least privilege for all team members
• Automated credential rotation and secure vault storage for sensitive keys
• Regular penetration testing, SOC 2 Type II compliance, and ISO 27001 alignment
• Immutable backup storage with geographic redundancy

6. Your Rights & Controls

Depending on your jurisdiction, you retain the following rights regarding your data:

1. Access & Portability: Request a copy of all data we hold about you or your site.
2. Rectification: Update or correct inaccurate information at any time via your dashboard or support ticket.
3. Deletion: Request permanent removal of your data upon service termination (excluding legally required retention).
4. Restriction & Objection: Limit processing scope or opt out of non-essential data sharing.
5. Withdraw Consent: Revoke optional data processing permissions without affecting core service delivery.

To exercise these rights, contact our Data Protection Officer via dpo@wpadmin.com or through your client portal.

7. International Data Transfers

Our infrastructure and support teams operate globally. When data is transferred outside your home jurisdiction, we ensure compliance through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Regional data residency options for EU, UK, and APAC clients
• Continuous monitoring of adequacy decisions and transfer mechanisms

We maintain transparency regarding data location and will notify you of any material changes to transfer mechanisms.

8. Policy Updates

We periodically review and update this Data Sharing Policy to reflect changes in services, technology, or legal requirements. Material changes will be communicated via email and client dashboard notifications at least 30 days before taking effect.

Your continued use of Wp Admin services constitutes acceptance of updated policies. We encourage regular review of this page.