Privacy Policy

This policy explains what personal data we collect when you use cachewatch.co.uk and the Cache Watch plugins, why we collect it, and your rights. We collect as little as we can.

1. Who is responsible for your data

FCB Digital Ltd, a company registered in England and Wales under company number 17483665. Registered office: 27 Mollands, Basildon, SS16 4LD, United Kingdom. Email: hello@fcbdigital.co.uk.

FCB Digital Ltd is the controller of the personal data described here. For anything about your data, email hello@fcbdigital.co.uk.

2. What we collect and why

Data	Why we use it	Lawful basis
Your email address and a securely hashed password	To create and run your customer account and let you sign in	Contract
Licence keys (stored encrypted), subscription status and renewal date	To provide your PRO licence and check it is active	Contract
The web addresses (URLs) of sites where you activate PRO, and when they last checked in	To activate your licence on those sites, deliver updates and show them in your dashboard	Contract
Stripe customer and subscription IDs	To link your account to your payments and let you manage billing	Contract
Payment details (card, billing address)	Collected and processed by Stripe, not by us. We never see or store full card numbers	Contract
Invoices and payment records	To keep accounts and meet tax law	Legal obligation
Emails we send you (licence keys, password resets, important account messages)	To provide the service	Contract
If you subscribe to our newsletter: your email address, when you signed up and confirmed, and which page you signed up on	To send you news about Cache Watch, new releases and tips, about once a month	Consent. Every newsletter has an unsubscribe link, and you can withdraw consent at any time
When you download a plugin from this website: the date, the version, the page you clicked from, and a one-way code made from your IP address and browser that changes every day	To count how many people download Cache Watch, without being able to follow anyone from one day to the next	Legitimate interests (understanding how the plugin is used)
Your IP address, in a one-way hashed form, for a short time	To stop abuse, such as repeated failed logins, and protect the service	Legitimate interests (keeping the service secure)
Standard web server logs kept by our host (IP address, pages requested, browser type)	To run, secure and troubleshoot the website	Legitimate interests

We do not use advertising or analytics trackers, we do not sell your data, and we do not use it for automated decisions that affect you.

3. Data the plugins send

The free plugin does not send us any data. If you choose to connect Cloudflare or Bunny CDN, it talks directly to those services using the details you enter on your own site.

Cache Watch PRO contacts our licence server when you activate or deactivate your licence, about once a day to check your licence is still valid, and when WordPress checks for updates. Each time it sends your licence key, your site address and the installed PRO version. Email and Slack alerts are sent from your own WordPress site to the addresses you configure; they do not pass through us.

4. Who we share it with

We only share personal data with the service providers we need to run Cache Watch:

• Stripe (payments and billing). Stripe may process data in the United States under appropriate safeguards. See stripe.com/gb/privacy.
• IONOS (website hosting, database and email), within the UK and European Union.

We may also share data if the law requires it, or to protect our rights or the safety of others.

5. How long we keep it

• Account, licence and activated-site data: while your account is open. If you ask us to close it, we delete it within 30 days, except what we must keep by law.
• Payment and invoice records: six years, to meet UK tax rules.
• Hashed security records (rate limiting): no more than 24 hours.
• Download statistics: the daily one-way code is deleted after 31 days. The date, version and page are kept as anonymous totals.
• Password reset links: they expire after one hour and are deleted once used.
• Newsletter: until you unsubscribe. Sign-ups that are never confirmed are deleted after 30 days. After you unsubscribe we keep your address only as a record that you opted out, so we don’t email you by mistake; ask us and we will delete it completely.

6. Keeping it secure

The site is served over HTTPS. Passwords are stored as one-way hashes, licence keys are encrypted, and payments are handled entirely by Stripe. Access to customer data is limited to us.

7. Your rights

Under UK data protection law you can ask to access, correct, delete or move your personal data, object to or restrict how we use it, and withdraw any consent you have given. Email hello@fcbdigital.co.uk and we will reply within one month. You can change your email address and password by contacting us, and manage billing yourself through your dashboard.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

8. Children

Cache Watch is a tool for website owners and is not intended for anyone under 18. We do not knowingly collect data from children.

9. Changes

If we change this policy, we will update the date at the top. If the change is significant, we will email customers before it takes effect.