--- title: Privacy Policy canonical_url: https://lolacore.com/privacy-policy-2/ last_updated: 2026-05-14T20:37:38+00:00 plugin_version: 1.2.1 --- # Privacy Policy LEGAL · LOLACORE.COM Privacy Policy ============== Last updated: May 13, 2026 LolaCore is developed and operated by **María DC**, based in Granada, Spain. This Privacy Policy explains how we collect, use, and protect personal data in connection with **lolacore.com** and the LolaCore software ecosystem. 1. Who We Are (Data Controller) ------------------------------- For the purposes of the GDPR and Spain's LOPDGDD, the data controller is: **María DC** Granada, Andalusia, Spain 2. Scope of This Policy ----------------------- **2.1 lolacore.com (this website)** — Data collected when you visit, purchase, submit a contact form, or subscribe to communications. **2.2 The LolaCore plugin on your WordPress site** — The plugin operates entirely on your own server. We do not collect, receive, or process any data generated by the plugin. All plugin data is stored in your own database. We have no access to it. 3. Data We Collect on lolacore.com ---------------------------------- ### 3.1 Analytics (Google Analytics) We use Google Analytics to understand how visitors interact with our site. It collects pages visited, time spent, referring source, device type, and anonymized IP address. **Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR), subject to cookie consent. Data transfers to the USA are covered by Standard Contractual Clauses. You may opt out via the Google Analytics Opt-out Browser Add-on. ### 3.2 Contact Form We collect your name, email, and message content to respond to your inquiry. We use **Resend** for email delivery. Data is retained for up to 12 months. **Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR). ### 3.3 Purchase Data (via Lemon Squeezy) Premium add-ons are sold through **Lemon Squeezy** as Merchant of Record. Lemon Squeezy handles payment processing, taxes, invoicing, refunds, and PCI-DSS compliance. Your transaction data is governed by [Lemon Squeezy's Privacy Policy](https://www.lemonsqueezy.com/privacy). We receive only your name, email, license key, and purchase record — never your payment card data. **Legal basis:** Performance of a contract (Art. 6(1)(b) GDPR). ### 3.4 License Data When you activate a premium add-on, your license key and site URL are sent to Lemon Squeezy for validation. No other data is transmitted. License data is stored in your WordPress database and deleted upon uninstallation. ### 3.5 Transactional Email We use **Resend** to send license delivery, update notifications, and support responses. These are strictly transactional and do not require separate consent. **Legal basis:** Performance of a contract (Art. 6(1)(b) GDPR). ### 3.6 Marketing Communications We collect email addresses from visitors who opt in. This list is stored in our own WordPress database in Spain (EU), not transferred outside the EEA. Each email includes a one-click unsubscribe. **Legal basis:** Consent (Art. 6(1)(a) GDPR). 4. Cookies ---------- lolacore.com uses: **strictly necessary cookies** (session management, security — no consent required), **analytics cookies** (Google Analytics — subject to consent), and **preference cookies** (store your consent choice). Manage preferences at any time via the footer cookie settings link. 5. Third-Party Services ----------------------- Service Purpose Location Safeguard Google Analytics Website analytics USA Standard Contractual Clauses Lemon Squeezy Payments, Merchant of Record USA Lemon Squeezy Privacy Policy Resend Transactional email USA Standard Contractual Clauses 6. AI Providers — Important Notice ---------------------------------- The LolaCore plugin uses an AI provider configured by you on your own WordPress installation. **María DC is not a party to the data exchange between your site and your AI provider.** Messages and site context are transmitted directly from your server to your chosen provider under your own API key. We do not route, intercept, log, or receive any portion of these communications. 7. Data Retention ----------------- Data Type Retention Period Contact form inquiries 12 months from last contact Billing records (Lemon Squeezy) 7 years (Spanish tax law) Analytics data 26 months (Google Analytics default) Email communication logs 12 months Marketing subscriber data Until consent is withdrawn 8. Your Rights Under GDPR ------------------------- - **Right of access** — Request a copy of your personal data - **Right to rectification** — Request correction of inaccurate data - **Right to erasure** — Request deletion, subject to legal retention obligations - **Right to restriction** — Request that we limit how we process your data - **Right to data portability** — Receive your data in a machine-readable format - **Right to object** — Object to processing based on legitimate interest - **Right to withdraw consent** — Withdraw at any time without affecting prior processing Contact us at . We respond within 30 days. You may also lodge a complaint with the **Agencia Española de Protección de Datos (AEPD)** at [aepd.es](https://www.aepd.es). 9. Data Inside the LolaCore Plugin ---------------------------------- **We have zero access to your plugin data.** All data is stored in your WordPress database. No telemetry, usage statistics, or analytics are sent to our servers. No requests are made to us except for license validation. Conversation history and memory facts never leave your server except to your configured AI provider. Uninstalling the plugin permanently deletes all associated data. As the operator of your WordPress site, **you are the data controller** for any personal data the plugin processes. 10. Children's Privacy ---------------------- LolaCore products are intended for business and professional use. We do not knowingly collect personal data from individuals under 16. Contact if you believe a minor has submitted data. 11. Changes to This Policy -------------------------- We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top of this page when we do. 12. Contact ----------- **María DC** Granada, Spain LolaCore is a trademark of María DC. All rights reserved.