Aurofex Builder

Privacy Policy

Last updated: 13 November 2026

This Privacy Policy explains how personal data is collected and processed when you use the Aurofex Builder website at https://aurofex.josemortellaro.com/ (the “Website”), including when you browse product pages, submit a contact or feature-request form, create an account, or purchase digital products.

1. Data controller

The data controller is:

Jose Mortellaro
07730 Cala en Porter
Menorca, Balearic Islands
Spain

Privacy contact email: info@josemortellaro.com

2. What this Website is about

Aurofex Builder is a WordPress plugin that provides a visual editing interface for pages, posts, and the Site Editor while saving layouts as native Gutenberg blocks. The public Website is available at https://aurofex.josemortellaro.com/. It presents the product, answers technical questions, collects feedback (including ideas for a future PRO version), and may sell or license digital downloads.

3. Personal data we collect

3.1 Data you provide

  • Contact and feedback forms: name, email address, message content, and your confirmation that you agree to this Privacy Policy.
  • Customer accounts: account details needed to register, sign in, and manage purchases (for example name, email address, and password credentials stored securely by WordPress).
  • Orders and licensing: billing and order information, purchase history, license keys, and related customer records when you buy or renew a digital product.
  • Email correspondence: information you include when you email us.

3.2 Data collected automatically

  • Technical and usage data such as IP address, browser type, device information, pages visited, referring URL, and approximate timestamps.
  • Security and anti-spam signals used to protect forms, accounts, and the store from abuse.
  • Cookie and similar storage identifiers described in the Cookies section below.

We do not intentionally collect special categories of personal data through the Website. Please do not include sensitive personal information in form messages.

4. Purposes and legal bases

We process personal data for the following purposes:

  • Responding to enquiries and feature requests (contact and pricing feedback forms) — based on your consent and/or our legitimate interest in communicating with prospective users.
  • Providing the Website, accounts, downloads, and software licenses — based on performance of a contract or steps taken at your request before entering a contract.
  • Sending transactional emails (for example order receipts, account notices, password resets, and support replies) — based on contract performance and legitimate interest in operating the service.
  • Security, fraud prevention, spam filtering, and troubleshooting — based on our legitimate interests in protecting the Website, customers, and systems.
  • Legal, tax, and accounting obligations related to sales and invoicing — based on legal obligation.
  • Improving the Website and product using aggregated or limited technical analytics where applicable — based on legitimate interest or consent where required.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Cookies and similar technologies

The Website uses cookies and similar technologies that are necessary to operate core features, and may use additional cookies depending on the tools enabled on the site.

  • Essential cookies: session and security cookies for forms, login, cart/checkout, and account access.
  • Preference cookies: remembering display or login preferences where available.
  • Caching / performance cookies: may be set by the site’s caching layer to improve page delivery.
  • Analytics or marketing cookies: only if enabled; where required under applicable law, these are used with your consent.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Website (such as forms, login, or checkout) from working correctly.

6. Who we share data with

We do not sell your personal data. We may share data with service providers that help us run the Website, only as needed for their role, for example:

  • Web hosting and infrastructure providers that store the Website and its database.
  • Email delivery providers used to send transactional messages (currently including SMTP delivery via our business mailbox).
  • Payment processors and related checkout providers, if and when online payments are enabled for purchases.
  • Accounting / invoicing tools used to issue invoices for digital sales, where applicable.
  • Email or CRM tools used to manage customer or marketing communications, where you have opted in or another lawful basis applies.
  • Professional advisers and authorities when required by law or to establish, exercise, or defend legal claims.

These providers process personal data under our instructions or as independent controllers where the law requires (for example payment providers).

7. International transfers

We are established in Spain (EU). Some service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards recognized under the GDPR, such as an adequacy decision or Standard Contractual Clauses, unless another lawful transfer mechanism applies.

8. How long we keep data

  • Contact form submissions: kept for as long as needed to handle your request and for a reasonable follow-up period, then deleted or anonymized unless a longer retention period is required.
  • Customer accounts and order records: kept for the life of the account and for the period required for contract performance, support, licensing, tax, and accounting obligations.
  • Security logs: kept for a limited period consistent with security needs.
  • Cookies: retained according to each cookie’s lifetime and your browser settings.

9. Your rights

Under the GDPR and Spanish data-protection law, you may have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase data in certain circumstances
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD)

To exercise these rights, email info@josemortellaro.com. We may need to verify your identity before responding.

10. Children’s privacy

The Website and Aurofex Builder are directed to adults and professional WordPress users. We do not knowingly collect personal data from children.

11. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration. No online transmission or storage system can be guaranteed to be completely secure.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Website, our products, or legal requirements. The “Last updated” date at the top will change when we do. Continued use of the Website after an update means you should review the revised policy.

13. Contact

Questions about this Privacy Policy or our data practices can be sent to:

Jose Mortellaro
07730 Cala en Porter, Menorca, Balearic Islands, Spain
Email: info@josemortellaro.com