How Esposearch Handles Personal Data.
This Privacy Policy explains how Esposearch collects, uses, stores, shares and protects personal data when you visit the website, create an account, purchase WordPress Products or Tasks, post a custom Project, accept a Customized Offer, contact support or otherwise interact with Esposearch.
This policy describes the Esposearch privacy framework.
Actual privacy obligations may vary according to your location, the service being used, the information involved and applicable law. Where another Esposearch notice or contractual term applies to a specific service, it should be read together with this policy.
Three simple ways to understand how Esposearch handles personal data.
Esposearch uses personal data only where it supports a clear website, customer, transaction, security or service delivery purpose. The categories below show where information usually comes from and why it may be needed during your relationship with Esposearch.
Information You Provide
This can include your name, email address, account information, organization details, billing information, messages, website requirements, Project information, uploaded files and other materials you provide so Esposearch can understand your request and administer the service you choose.
- Account and customer administration
- Service scoping and communication
- WordPress delivery and support
Information From Website Use
Technical information may include IP address, browser and device details, pages visited, referral information, cookie identifiers, session activity, security events and analytics data generated when you use Esposearch. This helps operate, secure, measure and improve the website experience.
- Website operation and security
- Analytics and performance measurement
- Fraud and abuse prevention
Information Used for Delivery
When approved work requires access to a website or connected service, Esposearch may process website content, configuration information, permissions, technical settings and related data reasonably necessary to complete the scope, verify the result and provide applicable support.
- Technical implementation
- Quality review and verification
- Ongoing management where purchased
Esposearch should request and use only the information reasonably connected to the website function, transaction, support request or approved WordPress work being provided.
Identity and Contact Data
Name, username, email address, telephone number, organization details, profile information and other contact details you provide.
Purchase and Commercial Data
Products purchased, Tasks ordered, Project submissions, Customized Offers, transaction references, billing information, order status, refunds, disputes, account balance activity and related commercial records.
Website and Project Data
Website URLs, requirements, technical descriptions, uploaded files, content, brand assets, product data, screenshots, instructions, deliverables and other information supplied for implementation.
Access and Technical Data
Where necessary for approved work, this may include WordPress access, hosting or domain access, analytics permissions, connected tool permissions and technical configuration details.
Communication and Support Data
Messages, support conversations, contact form submissions, onboarding answers, feedback, dispute communications and other correspondence with Esposearch.
Usage, Device and Security Data
IP address, browser, device type, operating system, referral source, timestamps, page interactions, security logs, session information and other technical data generated by website use.
Personal data supports specific customer, delivery and business functions.
Esposearch may use personal data for the following purposes where the use is relevant and lawful.
Accounts and Customer Relationships
Esposearch uses account and contact information to create and administer customer accounts, authenticate users, maintain profile information, respond to account requests and provide access to the website functions needed to purchase, manage and receive WordPress services.
Orders and Commercial Transactions
Commercial information is used to process Products, Tasks, Customized Offers and Projects, confirm transaction status, maintain order records, administer refunds or disputes where applicable and keep the commercial relationship connected to the service the customer purchased.
WordPress Delivery
Delivery information helps Esposearch understand requirements, coordinate suitable expertise, obtain necessary permissions, implement the approved scope, review completed work, communicate progress and provide ongoing technical management where the customer has purchased a continuing service.
Communication and Support
Esposearch uses communication data to answer questions, provide onboarding instructions, clarify requirements, share important delivery updates, respond to support requests and send account or transaction notices that are reasonably connected to the customer relationship.
Security and Abuse Prevention
Security information may be used to protect accounts, detect suspicious activity, investigate misuse, reduce fraud risk, maintain relevant logs and protect the integrity of Esposearch systems, customer websites and the legitimate transactions processed through the platform.
Improvement, Analytics and Marketing
Where permitted, Esposearch may use analytics and customer interaction data to understand website use, improve services, measure conversions, evaluate technical performance and communicate relevant information or marketing in accordance with applicable consent and privacy requirements.
Why processing may be lawful.
Depending on the information, purpose and applicable law, Esposearch may rely on contractual necessity, consent, legitimate interests, legal obligations or another lawful basis permitted by relevant data protection law.
Where consent is the basis, you may generally withdraw that consent for future processing, subject to any lawful reason that still permits or requires Esposearch to retain or use certain information.
Contract and Requested Services
Processing that is needed to take requested steps, administer a purchase or deliver the service you asked Esposearch to provide.
Consent
Processing based on your choice, such as certain marketing, nonessential cookies or another activity where consent is required.
Legitimate Interests
Reasonable business interests such as security, service improvement, fraud prevention, administration and protecting legal rights where those interests are not overridden by your rights.
Legal Obligations
Processing or retention required to comply with applicable tax, accounting, law enforcement, data protection, dispute handling or other legal obligations.
Privacy follows the same commercial model customers use to buy WordPress work.
Esposearch uses WordPress, WooCommerce and WorkReap functions to support customer accounts, purchases, Tasks, Projects, Customized Offers and related delivery workflows. Personal data associated with those activities is processed to administer the relevant transaction and service.
PayPal is the primary payment method. When PayPal processes a payment, PayPal handles payment information under its own systems and privacy terms. Esposearch may receive transaction information needed to confirm payment, identify the purchase, manage refunds or disputes and maintain business records.
Products and Tasks
Order information may include the item purchased, price, billing details, account information, onboarding answers, delivery status, support messages and records connected to the purchased scope. Esposearch uses this information to administer the transaction and complete the defined service.
Projects and Offers
Custom requirements may include detailed website information, uploaded materials, commercial terms, proposal or offer information, requested outcomes and related communications. This information helps Esposearch review the requirement, clarify scope, coordinate suitable expertise and manage delivery.
PayPal Payments
PayPal may collect and process payment, identity, device and transaction information under its own privacy framework. Esposearch may receive transaction details needed to confirm payment, identify the purchase, administer refunds or disputes and maintain appropriate commercial records.
Expert Delivery Data
Only information reasonably necessary for approved delivery should be available to an assigned Esposearch Expert or other authorized person involved in the work. Access should reflect the actual requirement and should not extend beyond what is needed to perform the assigned responsibility.
Cookies support essential website functions, measurement and selected integrations.
Esposearch may use cookies or similar technologies according to their purpose and applicable consent requirements. The exact cookies in use may change as website tools and integrations change.
Personal data may be shared when another party is needed to provide, secure or administer the service.
Esposearch should limit sharing to what is reasonably necessary for the relevant purpose and use appropriate arrangements where required by law.
International Processing
Esposearch operates from Kenya and may use technology providers or work with customers in other countries. Personal data may therefore be processed or stored outside your country.
- Esposearch should consider applicable transfer requirements and safeguards where personal data moves across borders.
- Service providers may operate infrastructure in several countries according to their own privacy and security arrangements.
- Where law requires consent, adequacy, contractual safeguards or another transfer mechanism, the applicable requirement should be respected.
Retention and Deletion
Esposearch should retain personal data only for as long as reasonably necessary for the purpose, legal obligations and legitimate business needs connected to that information.
- Account and transaction records may be retained for administration, accounting, fraud prevention, dispute handling and legal compliance.
- Project and delivery records may be kept for support, continuity, evidence of scope and quality management.
- Data that is no longer required should be deleted, anonymized or otherwise handled according to applicable retention requirements.
Privacy also depends on protecting the data entrusted to the service.
Esposearch may use technical and organizational safeguards appropriate to the nature of the information, the website environment and the risks reasonably associated with the processing.
Access Control
Access to customer information, website accounts and connected systems should be limited according to role, approved scope and operational need. Restricted permissions, temporary access and separation of responsibilities should be used where practical to reduce unnecessary exposure.
Security Practices
Reasonable safeguards may include secure hosting configuration, software updates, backups, monitoring, access controls, security tools, activity logging and incident response practices that are proportionate to the website environment, the information involved and the risks being managed.
Customer Responsibility
Customers should protect passwords, use appropriate access controls, provide accurate information and avoid sending highly sensitive credentials or payment information through ordinary communication channels. Shared access should be limited to what Esposearch genuinely needs for the approved work.
You may have rights over personal data that Esposearch holds about you.
Available rights depend on the law that applies to you and the processing. Esposearch may need to verify identity before acting on a request and may retain information where a lawful exception or obligation applies.
Be Informed and Access
Ask how Esposearch uses your personal data and request access to personal data held about you. The response may be subject to identity verification, applicable legal limits and protections for information relating to other people.
Correction
Ask Esposearch to correct personal data that is inaccurate, incomplete or misleading. The request should identify the information concerned and provide enough context to help Esposearch verify and update the relevant record appropriately.
Deletion
Request deletion where personal data is no longer required or another lawful ground for deletion applies. Some information may still need to be retained for legal compliance, transaction records, fraud prevention or dispute handling.
Object or Restrict
Where applicable, object to certain processing or ask Esposearch to restrict how particular information is used. This may include some marketing activities or processing that relies on particular legal grounds under applicable privacy law.
Data Portability
Where this right applies, request eligible personal data in a structured format or ask for transfer to another controller where technically feasible. Portability generally applies only to certain information and processing conditions defined by applicable law.
Withdraw Consent
Where Esposearch relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before the withdrawal or information that Esposearch may lawfully retain on another basis.
Automated Decisions
Where applicable law provides the right, ask about significant decisions made solely through automated processing and request appropriate human involvement. Esposearch should explain relevant automated use where disclosure is required and reasonably possible.
Raise a Complaint
Contact Esposearch if you believe personal data has been handled improperly. Where applicable, you may also raise the matter with the relevant data protection authority after or instead of contacting Esposearch directly.
Want to exercise a privacy right?
Describe the request clearly and include enough information for Esposearch to identify the relevant account or interaction. Do not send passwords or unnecessary sensitive information.
Artificial Intelligence and Automation
Esposearch may use artificial intelligence and automation tools for selected website, content, support, analysis or operational tasks where those tools create practical value.
- Personal data should be minimized before submission to an artificial intelligence service.
- Sensitive or confidential data should not be submitted unless it is necessary, appropriate and handled under the applicable requirements.
- Where an external artificial intelligence provider is used, information may be processed according to that provider relationship and applicable privacy terms.
Children and Other People’s Data
Esposearch services are intended for people who can lawfully enter into the relevant customer relationship or are acting with appropriate authority.
- Do not submit another person’s personal data unless you have an appropriate reason and authority to provide it.
- If a Project or website contains personal data belonging to others, the customer remains responsible for ensuring that the data was lawfully obtained and may be processed for the requested work.
- If Esposearch learns that personal data has been provided inappropriately, it may take reasonable steps to restrict, delete or otherwise address that information.
Changes to this Privacy Policy
Esposearch may update this policy as services, technology, legal requirements or privacy practices change. The updated version should be posted on this page with a revised date. Material changes may also be communicated through another appropriate channel where required.
Questions about your personal data?
Contact Esposearch if you want to ask about this policy, exercise an applicable privacy right or raise a concern about how personal data has been handled.
Use this address for privacy questions and rights requests.
Visit the Esposearch website for current service and policy information.
Esposearch Limited
Esposearch Limited is the company responsible for this website.
Republic of Kenya
Esposearch Limited is registered and operates from the Republic of Kenya.
Quick answers about personal data.
These frequently asked questions explain how Esposearch handles personal data across website use, customer accounts, WordPress services, payments, support, cookies and delivery workflows. They provide a practical summary of the broader Privacy Policy while keeping privacy expectations clear for customers.
The answers cover information collected through Products, Tasks, Customized Offers and Projects, including website access, transaction records, communication data and technical information. They also explain how Esposearch may work with PayPal, service providers and assigned Experts when delivering customer work.
You should read these answers together with the full Privacy Policy above because rights, legal bases, retention periods and international data rules may depend on your location, the information involved and the Esposearch service or transaction you choose to use.
QWhat personal data does Esposearch collect?+
Esposearch may collect account and contact details, purchase and project information, website access details supplied for approved work, communications, payment related records, technical usage data and other information you choose to provide.
QDoes Esposearch store my full payment card details?+
Esposearch does not need your full payment card details to deliver WordPress services. When PayPal processes a payment, payment information is handled through PayPal under the PayPal privacy terms and payment systems.
QWhy does Esposearch need website access details?+
Some WordPress work requires access to the website, hosting, domain, analytics or connected tools. Esposearch should request only the access reasonably necessary for the approved scope and use it for that work.
QHow does Esposearch use data from Products, Tasks and Projects?+
Information connected to Products, Tasks, Customized Offers and Projects is used to understand the requirement, process the transaction, coordinate delivery, communicate with you, maintain records and provide support.
QDoes Esposearch share personal data with Esposearch Experts?+
Only information reasonably necessary for the approved work should be made available to an assigned Esposearch Expert or other authorized person involved in delivery. Access should remain limited to the applicable requirement.
QDoes Esposearch use cookies?+
Yes. The website may use essential, preference, security, analytics, support and payment related cookies or similar technologies. Nonessential cookies should be managed through the applicable consent controls where required.
QDoes Esposearch use artificial intelligence?+
Esposearch may use artificial intelligence tools to assist with selected website, content, support or operational work. Personal data should be minimized before it is submitted to an artificial intelligence service, and sensitive information should not be included unless necessary and appropriate.
QHow long does Esposearch keep personal data?+
Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain legitimate records, resolve disputes, meet legal obligations and protect the website and business.
QCan I ask Esposearch to correct or delete my personal data?+
You may contact Esposearch to request access, correction, deletion or other applicable privacy rights. Some information may need to be retained where law, contractual obligations, dispute handling, fraud prevention or legitimate record keeping requires it.
QHow can I raise a privacy concern?+
You can contact Esposearch at admin@esposearch.net or through the Contact page. If a concern remains unresolved, you may also have the right to contact the relevant data protection authority.
Personal data should support the service, not become the product.
Esposearch uses personal data to operate the website, provide WordPress services, administer customer relationships, process transactions and protect legitimate business and customer interests.