Who is responsible for your data
Data controller: RentalPlugin
NIE: Y5499131Y
Address: Calle Alicant 13-3, 03501 Benidorm, Spain
Privacy contact: info@rentalplugin.com
This notice explains how we handle personal data when you visit rentalplugin.com, contact us, use our rental software, or request a website build.
What information we collect
Depending on how you use the site, we may process contact details and messages you send us; customer account and service information; and technical data needed to run and secure the website, such as your IP address, browser, and server request logs.
If you request a complete website build, the project form collects your contact and business details, website and design preferences, requested pages, booking and rental information, and details for up to 20 rental items. It also lets you upload product and brand images. Please only upload materials you are entitled to share and avoid including unnecessary personal information in descriptions or images.
Why we use your information
- To respond to questions and prepare a requested demo, quotation, subscription, or website build.
- To provide and support the software or service you have purchased, configure your products and booking rules, and contact you about your project.
- To take payment, confirm orders, manage subscriptions, and meet accounting and other legal obligations.
- To operate, maintain, and protect the website and our services, prevent misuse, and resolve technical problems.
We rely on steps you ask us to take before a contract and on performing our contract with you; legal obligations; and our legitimate interests in operating, securing, and improving the service and responding to business enquiries. Where a feature requires consent, we rely on your consent and you can withdraw it.
Payments and email
Payments are handled through Stripe Checkout. Stripe processes payment information under its own privacy notice. We receive the information needed to confirm and administer the transaction, such as your contact, order, payment status, and transaction reference; RentalPlugin does not receive your full card number through the website. Stripe may send automatic payment or receipt emails about its checkout. For website build orders, our WordPress site also sends the project details to our configured business email so we can deliver the service. Replies from RentalPlugin are written by our team and sent through our server email. We do not use a mailing-list or marketing email service.
Stripe’s privacy information is available at stripe.com/privacy.
Who can receive your information
We share information only as needed with the people and providers that help us run the service: our website hosting and server email providers, WordPress service providers, Stripe for payment processing, and authorised RentalPlugin personnel who handle your request or provide your service. Those providers process information under their own terms and, where applicable, our instructions. We do not sell your personal information or use it for third-party advertising.
Information may be processed in countries outside the European Economic Area by a provider, including Stripe. Where required, the provider must use an appropriate legal transfer safeguard. See the provider’s privacy notice for details.
How long we keep information
- Unpaid website-build requests: the project form and its uploads are automatically deleted six months after submission if no payment is completed.
- Paid website-build projects: project details and uploads are automatically deleted 12 months after the project is marked launched.
- Accounting and transaction records: we keep records for the period required by applicable law. In Spain, business records generally have a six-year retention period.
- Customer account and service records: we keep these while your account or service is active and afterwards for as long as needed to handle legal, accounting, security, or dispute-resolution obligations.
- Technical and security logs: these are kept for the period needed to maintain and protect the service, subject to the hosting provider’s retention settings.
Cookies and browser storage
RentalPlugin uses cookies, local storage and session storage for the purposes below. Cookies are sent to the relevant website with requests; local and session storage remain in your browser unless a website feature reads them. Necessary storage supports services you request. Preferences and Analytics are optional and are off until you choose them.
Your choices
The banner offers Accept all optional, Reject all optional and Manage preferences. In Manage preferences you can enable Preferences and Analytics separately and save your choices. Necessary storage cannot be disabled through this panel. Rejecting optional storage does not prevent you from browsing, requesting a demo or buying. Use Cookie settings in the footer to change or withdraw your choice at any time. Withdrawal stops future optional measurement; it does not automatically delete information already received by Google. Contact info@rentalplugin.com about data rights.
Storage inventory
| Category / name | Provider and purpose | Duration |
|---|---|---|
Necessary: rp_consent_v2 (cookie and local storage) |
RentalPlugin. Records category choices, notice version and the time of your choice. The cookie also lets the server respect your analytics choice during checkout. | Choice valid for 180 days. The cookie expires after 180 days; local storage is checked on later visits. |
Necessary: wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_* |
WordPress. Cookie support checks and secure login sessions, used when accessing login/account/administration features. | Test cookie: browser session. WordPress authentication defaults: two days, or 14 days with Remember Me. Browser-session cookies may disappear sooner when the browser closes. |
Necessary for a requested demo: rentalplugin_grow_demo_v2 (local storage) |
RentalPlugin. Keeps your demo bookings and availability in this browser. It can contain the details you enter, so please use fictional information. | Demo records valid for 12 hours. Expired records are reset when the demo next reads its storage; clear browser storage to remove them immediately. |
Necessary for demo language switching: rp-demo-customer-language:*, rp-demo-walkin-language:* (session storage) |
RentalPlugin. Temporarily preserves the requested demo form when switching languages. | Draft accepted for up to two minutes; removed when consumed or when the browser tab session ends. |
Preferences: rentalplugin_site_language (local storage) |
RentalPlugin. Remembers your selected language for future visits only when Preferences is enabled. Choosing a language still works without saving it. | Used while Preferences consent remains valid, up to 180 days; cleared on withdrawal or a later visit without valid consent. |
Analytics: _ga, _ga_* (cookies) |
Google Analytics 4. Distinguishes browsers and sessions to measure visits and site activity. | This installation is configured for a maximum 180-day cookie lifetime without automatic renewal on every page view. Withdrawal removes matching first-party analytics cookies accessible to this website. |
Analytics: rp_outreach_v1 (local storage) |
RentalPlugin. Remembers campaign labels from links, such as source, medium, campaign and content, so we can evaluate outreach. Do not include personal details in campaign links. | Campaign information valid for up to 30 days and removed on withdrawal; expired information is removed when next checked. |
Analytics: rp_purchase_receipt (secure HttpOnly cookie) |
RentalPlugin. An opaque random reference links this browser to its checkout so the server can verify payment with Stripe before reporting a purchase. Created only with Analytics consent. Contains no card details or customer contact information. | Up to 24 hours; cleared after a verified purchase return, expiry, or the server next processes withdrawal. Associated temporary server record: up to 24 hours. |
Optional Google Analytics
Google Analytics 4 helps us understand visits, sources, page activity, demo/pricing/contact-link clicks and checkout starts. It may process online identifiers, browser/device information, approximate location and pages visited. A contact-link click does not prove an enquiry was sent. We report a first checkout purchase only after our server confirms with Stripe that payment is complete and paid, and only with Analytics consent. Reporting depends on returning to this browser and can be affected by blockers or a missing return visit. Subscription renewals and refunds are not reported by this integration.
Google tags are blocked before Analytics consent. Advertising storage, advertising user data and personalised advertising remain denied. Google signals is disabled by this installation. Automatic form-interaction and site-search measurement are disabled. We avoid ordinary account and project-intake page tracking; checkout measurement and verified purchase returns use limited event data without customer contact or card details. Payment references are hashed for Analytics transaction identifiers.
Google may process data outside the European Economic Area under applicable safeguards. Read how Google uses information from websites using its services. Browser-cookie duration and Google report-data retention are different settings; deleting browser cookies does not itself delete historical reports.
Stripe checkout and other third-party services
Payments take place on Stripe-hosted pages, where Stripe controls its own cookies and storage under its notices. Stripe documents fraud-prevention cookies including __stripe_mid (up to one year) and __stripe_sid (30 minutes). Which cookies appear depends on the checkout and payment features you use; these are provider-documented examples, not a claim that every visitor receives them. Our banner does not control cookies on Stripe’s separate website. See Stripe’s cookie policy and cookie settings.
No advertising/remarketing trackers or session-recording tools have been added by this installation. WordPress administration may also use editor-preference storage for authorised staff; it is not a visitor advertising tracker. Browser extensions and third-party websites you open have their own storage.
Review and removal
This inventory is based on RentalPlugin’s deployed integration code, inspected login/demo/payment paths and provider documentation reviewed on 24 October 2026. We did not complete a paid test transaction, and provider-controlled checkout storage can change. We review the notice when the tools change. To remove all local copies immediately, use your browser’s site-data controls; doing so can also sign you out and reset your demo and language choices.
Keeping your information safe
We use access controls and reasonable technical and organisational safeguards to protect project details and uploaded files. Access to private website-build submissions is limited to authorised administrators. No method of online storage or transmission can be guaranteed completely secure.
Your privacy rights
Subject to the law and the circumstances, you can ask us to access, correct, erase, restrict, or object to the use of your personal information, or request a copy in a portable format. If we rely on consent, you can withdraw it. We may need to retain some information to comply with legal obligations or establish, exercise, or defend a legal claim.
To make a request, email info@rentalplugin.com. You can also complain to the Spanish Data Protection Agency (AEPD), your supervisory authority.
Changes to this notice
We may update this notice when our services or legal requirements change. The current version will be published on this page.
Last updated: 24 October 2026.