Privacy Policy

1. Scope of this policy

This policy applies when you visit our website, purchase or manage an OSO licence, contact us, request support, or otherwise interact directly with One Step Order.

It does not replace the privacy policy of a WooCommerce merchant that uses OSO. Each merchant independently determines how it collects and uses information from its own customers and remains responsible for its store’s privacy practices.

2. Who we are

One Step Order (also referred to as “OSO”, “we”, “us” or “our”) provides a WordPress and WooCommerce solution for direct product-page ordering.

Privacy Officer: One Step Order Email: [email protected] Address: 6875, 27e Avenue, Montréal, Québec, Canada

3. Data processed by the OSO plugin

OSO is designed to operate locally within the merchant’s WordPress and WooCommerce installation. Product information, checkout fields, customer details, addresses, payment choices and order records remain on the merchant’s website and are not transmitted to One Step Order.

One Step Order does not access this store data unless the merchant intentionally includes information in a support request, for example by sending a screenshot, diagnostic report or temporary access credentials. Merchants should remove unnecessary personal information before sending support materials and should revoke temporary access when support is complete.

4. Personal information we collect

Information you provide

We may collect your name, email address, business or store name, website address, country, account and licence details, purchase and transaction references, support messages, feedback, and other information you choose to provide.

Purchases and subscriptions

Payments, subscriptions and software licences may be administered by a specialized commerce and licensing provider, such as Freemius or an equivalent provider. That provider may collect billing details, payment information, tax information and transaction data under its own privacy policy. One Step Order does not intend to store complete payment-card numbers on its own systems.

Information collected automatically

Our website and infrastructure may collect IP address, browser and device type, operating system, approximate location derived from IP address, referring page, pages visited, timestamps, cookie or similar identifiers, and technical logs used for security, diagnostics and audience measurement.

5. Why we use personal information

We use personal information to:

• process payments, subscriptions, renewals and licence delivery;
• provide plugin downloads, updates and account services;
• respond to questions and deliver technical or customer support;
• maintain security, prevent misuse and diagnose technical problems;
• understand website performance and improve OSO;
• maintain business, accounting and legal records; and
• comply with applicable legal and regulatory obligations.

Depending on the circumstances and applicable law, we rely on your consent, the performance of a contract, compliance with legal obligations, or our legitimate interests in operating and securing the service.

6. Service messages and marketing

We may send essential messages concerning purchases, licences, updates, security, account activity or support. These operational communications are not marketing messages.

We do not currently operate a general marketing email program. If we introduce one, we will request consent where required, identify the sender and provide a clear unsubscribe method. Withdrawing from marketing will not stop necessary service communications.

7. Service providers and disclosures

We may provide limited personal information to suppliers that help us operate the website and business, including payment and licence platforms, VPS hosting providers, Cloudflare or another content-delivery and security provider, email infrastructure, support or live-chat tools, and analytics providers such as Google Analytics.

Google Search Console may provide us with aggregated information about how the website appears in search results. We may add or replace service providers as the business develops and will update this policy when a change materially affects how personal information is handled.

We may also disclose information when required by law, to protect our rights or the security of users and services, to investigate fraud or misuse, or in connection with a merger, financing, reorganization or sale of all or part of the business.

We do not sell personal information.

8. International processing

One Step Order is based in Canada, but some service providers may process or store information in Canada, the United States, Europe or other countries. As a result, information may be subject to the laws and lawful access requirements of the jurisdiction where it is processed.

Where required, we assess our providers and use contractual, organizational or other appropriate safeguards for cross-border processing.

9. Cookies and analytics

Our website may use strictly necessary cookies for security, account access, purchases and essential functionality. We may also use Google Analytics to understand website traffic and performance. Non-essential analytics will be subject to consent where required by law.

Advertising cookies are not currently intended to be active. Meta Pixel, Facebook Conversions API, TikTok Pixel or TikTok Events API may be introduced later. If these tools are activated, we will update this policy and our Cookie Policy and obtain consent before using non-essential advertising technologies where required.

You can also manage or delete cookies through your browser. Disabling necessary cookies may prevent parts of the website, checkout or account area from working correctly.

10. How long we retain information

We keep information only for as long as reasonably necessary for the purposes described above, subject to legal, accounting, security and dispute-resolution requirements. Our general retention targets are:

• Active accounts and licences: for the life of the account or commercial relationship.
• Closed accounts: deletion or anonymization within approximately 90 days, unless a longer period is required.
• Invoices and transaction records: up to seven years, or the period required by applicable tax and accounting law.
• Support records: up to three years after the request is closed.
• Technical and security logs: generally up to twelve months.
• Analytics information: generally up to fourteen months.

We may retain limited information for longer when necessary to comply with law, establish or defend legal claims, prevent fraud, enforce agreements or maintain a record of a privacy request.

11. Information security

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. These measures may include access controls, secured infrastructure, encrypted connections, backups, software maintenance and monitoring.

No website, storage system or transmission method is completely secure. We therefore cannot guarantee absolute security.

12. Your privacy rights

Depending on where you live, you may have the right to request access to or correction of your personal information, withdraw consent, request deletion, object to or restrict certain processing, receive portable information, or complain to a privacy regulator.

To submit a request, email [email protected] . Please describe your request and the email address associated with your account or purchase. We may request information reasonably necessary to verify your identity. We will respond within the period required by applicable law.

If information concerns a customer of a WooCommerce store using OSO, contact that merchant directly. One Step Order does not receive or control the merchant’s customer and order database.

13. Children’s privacy

OSO is a business and ecommerce product and is not directed to children. We do not knowingly collect personal information from children where parental or guardian consent is required. If you believe a child has provided information directly to One Step Order, please contact us so we can review and, where appropriate, delete it.

14. Changes to this policy

We may update this Privacy Policy as our services, providers or legal obligations change. We will publish the revised policy on this page and change the “Last updated” date. Where required, we will provide additional notice or request consent before applying a material change.

15. Contact us