How Esposearch Handles Your Personal Information.

1. Who We Are

Esposearch.net is a brand of Esposearch Limited (registered in Kenya). Esposearch operates as a Specialist WordPress Agency.

This Privacy Policy applies to personal information processed through Esposearch.net and related interactions with Esposearch where this Policy is the applicable privacy notice.

Website: https://esposearch.net/
Privacy email: admin@esposearch.net

2. Esposearch’s Privacy Role Can Depend on the Context

For personal information collected directly through Esposearch.net for Esposearch’s own website, account, transaction, business or support purposes, Esposearch may determine why and how that information is processed.

Personal information can also appear inside a client’s WordPress website, database, WooCommerce store, files or other Project materials. In those circumstances, Esposearch may act in a processor, service-provider or similar contractor role depending on the relationship, instructions and applicable law.

Customer-controlled Project materials are addressed in more detail in the Content Privacy Policy.

3. Personal Information We May Collect

The information Esposearch may collect depends on how you interact with the website, whether you create an account, submit a Project, purchase an applicable digital product, contact support or otherwise communicate with Esposearch.

4. Personal Information and Customer Content

Personal information and Customer Content are related but not identical concepts.

Personal information generally refers to information relating to an identifiable individual. Customer Content may include website content, business information, databases, files, credentials, technical configuration and other Project materials supplied or made accessible to Esposearch.

Customer Content can itself contain personal information, including information about a client’s customers, employees, subscribers, buyers, website users or other individuals.

Detailed handling principles for Customer Content are available in the Content Privacy Policy.

5. Where Personal Information May Come From

Information You Provide Directly

Information may be supplied through registration, Project submission, purchases, contact forms, email, Live Chat, quotations, support or other authorized communications.

Information Generated Through Website Use

Depending on the website configuration, technical information may arise through server logs, sessions, cookies, security technologies, analytics or other normal website operations.

Information From Third Parties

Esposearch may receive relevant information from payment providers, authorized organizational representatives, referral sources or other service providers where such information is legitimately connected to the applicable interaction.

Information From Project Systems

Where a customer authorizes Esposearch to access a WordPress website, WooCommerce environment or other connected system, Esposearch may encounter personal information contained within that system.

6. Why Esposearch May Use Personal Information

Personal information may be used where relevant and lawful for purposes such as:

• creating and administering client accounts;
• authenticating users and protecting account access;
• reviewing custom Project requirements;
• preparing quotations and defining Project scope;
• coordinating and delivering approved WordPress work;
• communicating about Projects, accounts, transactions and support;
• administering applicable Project and digital-product transactions;
• providing customer support;
• maintaining website functionality;
• protecting website and account security;
• detecting fraud, abuse or suspicious activity;
• understanding website use and performance where applicable;
• maintaining necessary business and transaction records;
• resolving complaints or disputes;
• protecting legal rights;
• complying with applicable legal obligations;
• sending marketing communications where an appropriate lawful basis exists.

7. Lawful Bases for Processing

Depending on the information, purpose, relationship and applicable law, Esposearch may rely on one or more lawful bases for processing.

Where Esposearch relies on consent, that consent may generally be withdrawn for future processing. Withdrawal does not make earlier lawful processing unlawful and does not prevent processing supported by another applicable lawful basis.

8. Privacy in Custom WordPress Projects

Professional WordPress work is delivered through custom Projects. Project information may be received before Esposearch formally accepts the work because Esposearch may need sufficient information to evaluate the requirement.

Submitted Project information may include:

• name and contact information;
• business or organization information;
• website URL;
• Project requirements;
• technical descriptions;
• uploaded materials;
• scope and quotation information;
• communications and approvals;
• delivery and support records.

This information may be used to evaluate the requirement, clarify scope, prepare commercial terms, coordinate delivery, communicate with the client, support the Project and maintain legitimate business records.

9. Esposearch Experts & Authorized Personnel

Clients engage Esposearch as the agency. Esposearch may coordinate relevant professional capability internally where necessary for Project delivery.

Personal information or Customer Content should be made available to an Esposearch Expert, employee, contractor or other authorized contributor only where reasonably necessary for assigned work, administration, support, quality, security or another legitimate purpose.

Internal professional involvement does not mean that a client has independently hired that individual through a public freelancer marketplace.

10. Client Accounts

Account information may be used to create and administer profiles, authenticate access, provide applicable account functions, communicate about account matters and protect account security.

Current account routes include: Create Account, Client Login and the Dashboard.

Users should use reasonable care to protect their account credentials and contact Esposearch if they reasonably believe their account has been accessed without authorization.

11. Payments, Billing & Transaction Information

Where a third-party payment provider processes a transaction, payment information may be handled through that provider’s systems and privacy practices.

Esposearch may receive transaction information reasonably necessary to confirm payment, identify the transaction, issue or maintain applicable commercial records, administer refunds or disputes where relevant and meet legitimate accounting or legal obligations.

Where digital products are purchased separately from professional Projects, transaction information may include the item purchased, billing information, account information, payment status, applicable access/download records and related transaction history.

12. WordPress, Website & Technical Access

Some Projects may require access to WordPress, hosting, domains, DNS, databases, analytics, Search Console, APIs, WooCommerce or other connected systems.

These systems may contain personal information relating to customers, employees, buyers, subscribers, website users or other individuals.

Esposearch should request and use only the level of access reasonably necessary for the approved Project.

Temporary or restricted accounts are preferred where practical. Passwords, API secrets, full databases or highly sensitive credentials should not be sent through ordinary Live Chat where a safer method is available.

See the Content Privacy Policy for detailed Customer Content and credential-handling guidance.

13. Cookies & Similar Technologies

Esposearch.net may use cookies and similar technologies to support essential website functions, sessions, security, analytics, support, ecommerce and selected integrations depending on the website feature and configuration involved.

Where applicable consent is required, non-essential technologies should operate according to the relevant consent choices and controls.

Exact cookie names, providers and durations can change as WordPress plugins and third-party technologies change.

Detailed cookie information is available in the Cookie Policy.

14. Communications & Support

Personal information may be processed through email, forms, Live Chat, account communications, Project discussions and customer-support interactions.

Relevant communications may be retained where reasonably necessary for Project delivery, customer support, administration, transaction records, dispute handling, security or legal obligations.

Live Chat and other support providers may process technical and communication information needed to provide the requested interaction, subject to the relevant provider configuration and privacy practices.

Users should not send unnecessary sensitive information, passwords, payment secrets or highly confidential files through ordinary Live Chat.

15. How Personal Information May Be Shared

Esposearch should limit sharing to what is reasonably necessary for the relevant purpose.

Authorized Esposearch Personnel

Relevant information may be available to employees, Esposearch Experts, contractors or authorized contributors who reasonably require it for Project delivery, support, administration, quality or security.

Service Providers

Hosting, cloud infrastructure, email, communication, security, analytics, ecommerce, payment, backup, AI or other technical providers may process information when their services are legitimately used.

Professional Advisers

Information may be shared where reasonably necessary with legal, accounting or other professional advisers.

Legal, Regulatory & Security Requirements

Information may be disclosed where reasonably necessary to comply with applicable law or valid legal process, investigate fraud or abuse, address security issues, protect legal rights or protect customers and systems.

Business Transactions

Information may become relevant to a legitimate merger, reorganization, financing, transfer or similar business transaction, subject to applicable law and appropriate safeguards.

16. International Processing

Esposearch operates from Kenya and may work with customers, service providers and technology platforms located in other countries. Personal information may therefore be processed or stored outside the user’s country.

Service providers may operate infrastructure in multiple jurisdictions according to their own technical and legal arrangements.

Where applicable law requires consent, contractual safeguards, adequacy or another lawful transfer mechanism, the relevant requirement should be considered.

Esposearch does not represent that all personal information is stored exclusively in Kenya.

17. Retention

Personal information should be retained only for as long as reasonably necessary for the purpose for which it was collected or another legitimate purpose that permits continued retention.

Relevant purposes may include Project delivery, account administration, transactions, support, accounting, dispute handling, fraud prevention, security, legal claims and legal obligations.

Different categories of information may require different retention periods. Esposearch does not apply one universal retention period to all personal information.

18. Security

Esposearch seeks to use reasonable administrative, organizational, contractual and technical safeguards appropriate to the circumstances.

Depending on the context, measures may include:

• access controls;
• authentication;
• minimum necessary permissions;
• credential controls;
• software maintenance;
• responsible platform configuration;
• backups where appropriate;
• reasonable service-provider selection;
• security monitoring where applicable.

If Esposearch becomes aware of a material personal-data security incident, response may include investigation, containment, remediation, documentation and notification where required by applicable law.

The appropriate response depends on the nature of the incident, information involved, Esposearch’s role and applicable legal requirements.

19. Your Privacy Rights

Depending on the law that applies to you and the processing involved, you may have some or all of the following rights. These rights do not necessarily apply identically in every jurisdiction or circumstance.

Deletion Requests

A deletion request may be limited where information remains reasonably necessary for legal obligations, transactions, contractual records, disputes, security, fraud prevention, legal claims or legitimate recordkeeping.

Automated Decision-Making

The inclusion of automated-decision rights in this Policy does not mean that Esposearch currently makes significant decisions about users solely by automated means. Where such processing were used in a context where applicable law provides specific rights, those requirements would need to be considered.

Where applicable law specifies a response period, Esposearch aims to respond within the period required by that law.

20. Marketing & Service Communications

Esposearch may send marketing or promotional communications where an appropriate lawful basis exists.

Users should be able to stop applicable direct-marketing communications through the available method associated with that communication or by contacting Esposearch.

Marketing communications are different from necessary service, transaction, account, Project, support or security communications. Opting out of marketing does not necessarily stop communications needed to administer an existing account, Project or transaction.

21. Artificial Intelligence & Automation

Esposearch may use AI-assisted or automation tools for selected website, content, analysis, support, operational or Project tasks where their use is appropriate.

Personal information should be minimized before being submitted to an AI-assisted system. Sensitive or confidential information should not be submitted unnecessarily.

Where an external AI provider is used, information may be processed according to the applicable service configuration, provider terms and privacy arrangements.

Esposearch does not intend to use personal information for unrelated general AI-model training. External providers, however, may apply their own data-use terms depending on the service, account and configuration involved.

AI-assisted processing does not automatically mean that a user is subject to significant solely automated decision-making.

22. Children & Other People’s Personal Information

Esposearch services are intended for people who can lawfully enter into the relevant customer relationship or act with appropriate authority.

Users should not submit another person’s personal information unless they have an appropriate reason and authority to do so.

Where a customer’s website or Project contains personal information belonging to other individuals, the customer remains responsible for ensuring that the information was lawfully obtained and that it may be processed for the requested work.

Where a customer acts for a company or organization, Esposearch may process personal information relating to representatives, employees, account administrators, contacts or other authorized individuals.

If Esposearch becomes aware that personal information appears to have been provided inappropriately, it may take reasonable steps to restrict, remove or otherwise address that information.

23. Changes to This Privacy Policy

Esposearch may update this Privacy Policy when services, technology, commercial practices, service providers, security practices, privacy practices or legal requirements change.

The current version should be published on this page with a revised Last Updated date.

Material changes may also be communicated through another appropriate channel where applicable law or another binding requirement requires additional notice.

24. Privacy Contact

Contact Esposearch if you want to ask about this Policy, exercise an applicable privacy right, request correction of information or raise a concern about how personal information has been handled.

Esposearch Limited
Esposearch.net is a brand of Esposearch Limited (registered in Kenya).
Website: https://esposearch.net/
Privacy email: admin@esposearch.net
Contact: https://esposearch.net/contact/

Where applicable, a person may also have the right to raise an unresolved privacy concern with the relevant data protection authority.