This Privacy Policy applies to Nettonic Ltd (trading as Get Site Calendar) and aligns with UK / EEA data protection standards (UK GDPR). It was last updated [DATE WHEN YOU REPUBLISH].

Privacy Policy

Nettonic Ltd (trading as Get Site Calendar) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you visit our website ("Website") or use our software and services ("Services").

Address: Nettonic Ltd, Bedford Heights, Brickhill Drive, Bedford, Beds, MK41 7PH.
Contact: privacy@nettonic.co.uk

BY USING OUR SERVICES OR VISITING OUR WEBSITE, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DISCONTINUE USE IMMEDIATELY.

On this page:

  1. Scope and information we collect
  2. How Site Calendar Pro handles end-user data on customer sites
  3. How we use your information
  4. How we share information (sub-processors)
  5. Data security and retention
  6. International transfers
  7. Your rights (UK and EEA users)
  8. Cookie policy
  9. Children's privacy
  10. Data Processing Addendum
  11. Changes to this policy

1. Scope and information we collect

We collect information from Customers, Marketing Participants, and Website Visitors. This policy does not apply to our Customers' own websites; they are responsible for their own end-user disclosures.

  • Account data: We collect names, email addresses, physical addresses, phone numbers, and payment details to provide Services and manage your account.
  • Usage data: We may automatically collect data on how our plugins and services are used (e.g. site health, versioning, configuration). You may opt out of this in your account settings.
  • Website analytics: We use tools like Google Analytics to collect anonymous statistical data (IP addresses, browser types) to improve our site experience.

2. How Site Calendar Pro handles end-user data on Customer sites

Site Calendar Lite and Site Calendar Pro are self-hosted WordPress plugins. When a Customer installs Site Calendar on their own WordPress website and uses it to register attendees for events, all attendee data is stored exclusively in that Customer's own WordPress database, on infrastructure that Customer controls. Nettonic Ltd has no access to attendee data, no ability to retrieve it, and no mechanism for receiving copies of it.

This means our Customers are the data controller for attendee data they collect through Site Calendar. Nettonic Ltd is the software vendor — we provide the application, but we do not act as a data processor for attendee records under GDPR Article 28, because there is no transfer of attendee data to us.

The only data that flows from a Customer's installation back to Nettonic Ltd is:

  • Licence activation pings: the customer's site URL and licence key, used to verify the licence is valid and within its site limit.
  • Update-check pings: the currently installed Site Calendar Pro version and the WordPress version, used to determine whether an update is available.

No attendee names, email addresses, phone numbers, ticket data, payment data, or event details are transmitted to us. Customers can verify this by inspecting outbound HTTP requests from their site — the only endpoint Site Calendar Pro contacts on getsitecalendar.com is the licence and update server.

What this means for Customers preparing their own privacy notices: when drafting the privacy notice for your own attendees, you do not need to list Nettonic Ltd as a data processor. You should, however, list the third parties that do receive attendee data as part of normal plugin operation (payment processors, transactional email providers, your hosting provider). Our GDPR & attendee data guide explains how to identify and document these relationships in your own privacy notice.

3. How we use your information

We use your data to:

  • Provide technical support and fulfil sales requests.
  • Process billing and payments.
  • Send functional updates or marketing communications (where permitted).
  • Diagnose technical issues and prevent fraud.
  • Comply with legal and regulatory obligations.

4. How we share information (sub-processors)

We use a small number of trusted third-party service providers (sub-processors) to deliver our Services. These companies receive only the data they need to perform their function, and each is bound by data processing terms that meet UK GDPR requirements.

Sub-processor Purpose Data shared Location
Stripe, Inc. Payment processing for licence purchases Customer name, email, billing address, card details USA / Ireland (EU)
Mailchimp (Intuit Inc.) Email marketing (opt-in only) Email address, name, marketing preferences USA
SiteGround (or current hosting provider) Website hosting All data stored on our website UK / EU
Google Analytics (Google Ireland Ltd) Anonymous website usage analytics IP address (anonymised), browser metadata Ireland (EU) / USA

Beyond these sub-processors:

  • Legal requirements: We may disclose information if required by UK law or to protect the safety and rights of Nettonic Ltd or its users.
  • Business transfers: In the event of a merger or sale, your data may be transferred to the new owner. Customers will be notified in advance with the opportunity to object.

We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

5. Data security and retention

We implement industry-standard technical and organisational measures to protect your data. These include encrypted connections (HTTPS), encrypted database backups, role-based access controls, and regular security audits of the software we operate.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements. Typical retention periods:

  • Active customer accounts: retained for the duration of your licence subscription plus 6 years (UK HMRC business records requirement).
  • Marketing list subscribers: retained until you unsubscribe, then suppressed permanently in our mailing system.
  • Support enquiries: retained for 3 years from the date of last contact for reference and quality purposes, then deleted.
  • Website analytics: retained for 14 months in Google Analytics, then aggregated.

6. International transfers

Nettonic Ltd is a UK-based company. While we primarily store data in the UK or EEA, some service providers may process data in the United States (notably Stripe and Mailchimp). We ensure such transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and, where applicable, adequacy decisions issued by the UK government or the European Commission.

7. Your rights (UK and EEA users)

Under the UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data ("right to be forgotten"), subject to overriding legal obligations.
  • Restriction: Request that we limit how we process your data.
  • Portability: Request your data in a machine-readable format.
  • Object: Object to processing based on legitimate interests or for direct marketing.

To exercise these rights, please contact us at privacy@nettonic.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

If you are an attendee of an event organised by one of our Customers — for example you bought a ticket through a website that uses Site Calendar Pro — your data rights are exercised against that Customer (the event organiser), not against Nettonic Ltd. We do not hold your data and cannot fulfil your request directly. Please contact the event organiser whose site you registered on.

8. Cookie policy

We use cookies to ensure our website functions correctly and to analyse traffic.

  • Strictly necessary: Required for the site to work (e.g. login sessions).
  • Functional: Remember your preferences (e.g. cart contents).
  • Performance / statistics: Help us understand how visitors interact with the site.

You can manage or disable cookies via your browser settings. For more information, visit www.allaboutcookies.org.

The Site Calendar Pro plugin running on our customers' websites does not set any cookies of its own.

9. Children's privacy

Our Services are not intended for children. We do not knowingly collect information from individuals under the age of 13 (or 16 in certain jurisdictions).

If you are a Customer running events involving children (school clubs, junior sports, family events), please refer to our GDPR & attendee data guide for guidance on collecting parental consent appropriately.

10. Data Processing Addendum

Customers who require a formal Data Processing Addendum (DPA) with Nettonic Ltd — for example, agencies whose end-clients require contractual evidence of GDPR compliance — can request one by emailing privacy@nettonic.co.uk.

Please note that the scope of any DPA with Nettonic Ltd is limited to the data Nettonic Ltd processes (your customer account data and licence transactions). It does not extend to attendee data on your own WordPress installation, because Nettonic Ltd does not process that data — you do, with your own sub-processors (your hosting provider, your payment gateway, your email service).

11. Changes to this policy

We may update this policy periodically. Significant changes will be notified via our website. Your continued use of our Services constitutes acceptance of the updated policy.