WPScan.io Privacy Notice

Our contact details:

Name: WPScan
E-mail: team@wpscan.org

What type of information we have

We currently collect and process the following information:

- First name
- Surname
- Company Name
- VAT Number
- Email Address
- Website URLs
- Scan meta data (start time, elapsed time, etc.)
- Scan vulnerability reports

How we get the information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

- To be able to identify the user
- To be able to take payments
- To be able to perform security scans
- To be able to show scan results

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting team@wpscan.org
(b) We have a legal obligation.
(c) We have a vital interest.
(d) We need it to perform a public task.
(e) We have a legitimate interest.

What we do with the information we have

We use the information that you have given us in order to:

- To be able to identify the user
- To be able to take payments
- To be able to perform security scans
- To be able to show scan results

How we store your information

Your information is securely stored in London (web server) and the US (Amazon Web Services).
We keep scan data for two years. We will then dispose your information by automatically deleting the data after the given time period.

Your data protection rights

Under data protection law, you have rights including:

- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify information you think is inaccurate.You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at team@wpscan.org if you wish to make a request.

How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113