YOP Poll

Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains how we collect and use personal data when you visit yop-poll.com or store.yop-poll.com (together, the “websites”), buy YOP Poll Pro, use a YOP Poll Pro licence, subscribe to our newsletter or contact us for support.

1. Who we are

The data controller is Nechifor Dorel PFA, VAT ID RO31493545, registered address Fundac Margareta Baciu 12, Iași, Romania (“YOP”, “we”, “us”).

For any privacy question or request, email [email protected].

2. What we collect and why

When you visit the websites

  • Technical data: IP address, browser and device type, pages visited, referring page, date and time. Our servers log this automatically. We use it to run, secure and troubleshoot the websites (legitimate interest).
  • Cookies and similar technologies: some are needed for the websites and checkout to work; others measure visits, campaign performance and how pages are used. Non-essential cookies are only set with your consent. See our Cookie Policy.

When you buy YOP Poll Pro

  • Order and billing data: name, email address, billing country and address, company name and VAT number (if you provide them), the plan you bought, price, currency, taxes and order reference. We use it to process your order, deliver the download and licence key, send receipts and manage your subscription (performance of a contract), and to keep accounting and tax records (legal obligation).
  • Tax evidence: your IP address and billing country, used to apply the correct VAT rate under EU rules. If you enter an EU VAT number, we check it with the European Commission’s VIES service (legal obligation).
  • Payment data: payments are processed by Stripe or PayPal. We never see or store your full card number. We receive limited payment details from them, such as the payment status, card brand and last four digits, or your PayPal email address.
  • Purchase source: when you arrive from a campaign link, we record its source (for example UTM parameters) and the page you landed on, and attach it to your order. This tells us which campaigns lead to sales (legitimate interest; the related cookie is only set with your consent).
  • Fraud prevention: Stripe and PayPal collect device and payment information to detect fraud (legitimate interest).

When you start a checkout but don’t finish it

If you enter your email address at checkout and don’t complete the purchase, we keep that email address, your name if you gave it, the plan you chose and when you started. We may send you up to a few emails reminding you about the unfinished order (legitimate interest). Every reminder has an unsubscribe link, and you can also object by emailing [email protected]. Reminders stop as soon as you complete the purchase or opt out.

When you use a YOP Poll Pro licence

When you activate YOP Poll Pro on a website, check for updates or download a new version, the plugin sends us your licence key, the address (URL) of that website and the plugin version. We use this to validate your licence, count the websites it is active on, and deliver updates while your subscription is active (performance of a contract).

When you subscribe to our newsletter

We collect your email address, your name if you give it, the date and source of your sign-up, and whether you open our emails or click their links. We use this to send you the newsletter and resources you asked for, such as the YOP Poll Starter Kit (consent). Every email has an unsubscribe link, and you can withdraw consent at any time.

If you buy from us, we may also email you about similar YOP products, unless you opt out (legitimate interest). You can opt out at any time with one click.

When you contact us

We keep your name, email address, your messages and any details you send us, such as your website URL or screenshots, so we can answer you and provide support (performance of a contract, or legitimate interest if you are not a customer).

3. Who we share data with

We do not sell your personal data. We share it only with service providers that help us run our business, and only as much as they need:

  • Stripe and PayPal: payment processing and fraud prevention.
  • Our hosting provider: stores the websites, the store database and server logs.
  • Our email delivery provider: sends receipts, licence emails and newsletters.
  • Google (Google Analytics, Google Ads) and Microsoft (Microsoft Clarity): visit statistics, campaign measurement and page-usage analysis, only with your consent.
  • The European Commission’s VIES service: EU VAT number checks.
  • Our accountant and public authorities: where Romanian tax or accounting law requires it.

Stripe and PayPal act as independent controllers for some of the data they process; their own privacy policies apply to it.

4. Transfers outside the European Economic Area

Some providers, such as Stripe, PayPal, Google and Microsoft, may process data in the United States or other countries outside the EEA. When they do, the transfer is protected by the EU-U.S. Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

5. How long we keep data

  • Invoices, orders and tax evidence: for as long as Romanian accounting and tax law requires, currently up to 10 years.
  • Licence records (licence key, activated website URLs): while your licence exists, and for up to 3 years after it expires, so you can renew or reactivate it.
  • Newsletter data: until you unsubscribe. After that we keep only your email address on a suppression list, so we don’t email you again.
  • Unfinished checkouts: 90 days, then deleted, unless you complete a purchase.
  • Support messages: up to 3 years after the conversation ends.
  • Server logs: a few weeks, unless needed to investigate a security incident.
  • Cookies: for the periods listed in our Cookie Policy.

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • access the personal data we hold about you and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted, unless we must keep it by law;
  • restrict or object to processing based on our legitimate interests, including direct marketing;
  • receive data you gave us in a portable format;
  • withdraw consent at any time, without affecting processing done before you withdrew it.

To use any of these rights, email [email protected]. We will reply within one month. We may ask you to confirm your identity first.

You can also complain to the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro, or to the authority in the EU country where you live.

7. Security

The websites use HTTPS. Access to customer data is limited to people who need it, and payment card data is handled only by Stripe and PayPal. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the authorities of a breach where the law requires it.

8. Children

Our products are meant for website owners and businesses. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

9. Polls on your own website

YOP Poll runs on your own WordPress site. Votes and any data your visitors enter in your polls are stored in your site’s database, not sent to us. You are responsible for that data and for telling your visitors how you use it.

10. Changes to this policy

We may update this policy when our services or the law change. We will change the date at the top, and tell customers by email about significant changes.