Privacy policy

Scope and effective date

Effective 16 September 2026. This policy applies to PMScripts.com, PMS customer accounts, orders, licence activation, downloads, protected cookie classification and support. It adapts the corporate information used by Pikus Media AB to the narrower, actual PMS service. Using the site does not constitute consent to optional processing; optional cookies and similar technologies require the choice presented in the consent interface.

Controller and contact

PMS Scripts is operated by Pikus Media AB, Stjärnbildsgatan 120 lgh 1002, 415 67 Göteborg, Sweden. Organisation number: 559478-7821. VAT number: SE559478782101. Email: hej@pikus.media. Telephone: +46 76 109 52 40. Pikus Media AB is the controller for the PMS store, accounts, licensing service and its own security logs. We have not appointed a data protection officer because our present processing does not require one; privacy enquiries can be sent to the contact above. A customer using PMS Cookie Banner on another website remains responsible for that website’s visitor data.

Data sources

We receive data directly from you when you create an account, place an order, enter company or VAT details, activate a licence, request support or submit a withdrawal or privacy request. Technical security data is generated when your browser or plugin connects to PMS. Stripe sends us payment status and transaction references; it does not give us your full card number.

Orders, payment and accounts

We process identity and contact details, account credentials, billing address, country, company and VAT information, order contents, amounts, currency, payment status and transaction references to enter into and perform the purchase contract. Accounting and tax data is also processed to comply with legal obligations. Required checkout data is necessary to accept and fulfil an order; without it we cannot complete the purchase.

EU VAT-number validation

When an EU business VAT number is supplied, we send the country code, VAT number and requester information required by the European Commission VIES service to validate it. We store the number, validation result, time, request identifier and hashes of any returned name or address as tax evidence; we do not use the returned business details for marketing. VIES is operated by the European Commission and the relevant national tax authority. See VIES.

Digital-delivery evidence

For a digital purchase we record whether the buyer expressly requested immediate delivery and acknowledged the applicable withdrawal consequence, the wording version and a UTC timestamp. This is retained with the order as contract and legal-claims evidence.

Licensing and downloads

Licence records include product, site allowance, validity, activation identifiers and associated site addresses. Processing is necessary to provide the purchased service. Security and package-distribution identifiers are processed for our legitimate interests in preventing misuse and protecting the service. A marker alone does not establish who disclosed a file.

Licensed cookie classification

With an active Pro licence, the plugin may submit bounded technical observations: cookie names and normalized script URLs without query strings. PMS compares them with its private catalogue and returns matching signed records. Cookie values, page content, URL queries and visitor consent records are not submitted. Classification payloads are used to answer the request and are not written to the licence database; ordinary hosting security logs may record time, endpoint and originating IP address.

Support, withdrawals and security

Support correspondence, withdrawal notices and privacy requests are processed to perform the contract, comply with law and handle the request. IP address, timestamps, endpoint, device or browser information, error details and security events can be processed for our legitimate interests in operating, diagnosing and protecting the service. Optional analytics is processed only after consent.

Legal bases and required data

Contract is the basis for accounts, orders, delivery, licence activation and requested support. Legal obligation is the basis for accounting, VAT and statutory consumer records. Legitimate interests are the basis for proportionate security, abuse prevention and legal claims, subject to your right to object. Consent is the basis for optional analytics or marketing and can be withdrawn at any time. Fields marked as required at checkout are needed to conclude and perform the contract or determine tax; optional company and VAT fields are used only when supplied.

Recipients and international transfers

Authorised Pikus Media AB personnel and providers receive only the data needed for their role. LH.pl hosts the service in the European Union. WooCommerce operates within our WordPress installation. Stripe receives payment, device and fraud-prevention data and acts under its own privacy policy. The European Commission VIES service and relevant tax authority receive VAT-validation data. Email and professional advisers may receive information where needed for support, legal claims or compliance. If a provider processes data outside the EEA, we require an applicable adequacy decision or safeguard such as the European Commission standard contractual clauses. Information about a relevant safeguard is available on request.

Retention

Orders, invoices, VAT evidence, refunds and associated digital-delivery evidence are retained for seven years after the end of the relevant accounting year, or longer where a legal hold requires it. Licence and activation records are kept during the entitlement and afterwards only where needed for accounting, support, security or legal claims. Support correspondence and privacy-request evidence are reviewed and normally deleted or anonymised within 24 months after closure unless a longer period is necessary. Application security logs are normally retained for up to 90 days unless an incident requires preservation. Browser consent choices expire after 180 days. We erase or anonymise data when its stated purpose and any mandatory retention period end.

Automated decisions

Pikus Media AB does not use customer data for solely automated decisions producing legal or similarly significant effects. Stripe can use automated fraud-prevention systems when processing a payment. Contact us if you want a failed or disputed payment reviewed.

Rights and complaints

Depending on the legal basis and applicable exceptions, you may request access, correction, erasure, restriction or portability, object to processing, or withdraw consent without affecting earlier lawful processing. We may need proportionate information to verify identity. We normally respond within one month and will explain any lawful extension or refusal. Contact us using the details above. You may complain to the Swedish Authority for Privacy Protection at imy.se or, where applicable, the supervisory authority in your EEA country.

Children

The PMS store is intended for adults and business users. We do not knowingly solicit personal data from children or offer products directly to children. Contact us if you believe a child supplied personal data without appropriate authority.

Changes to this policy

We publish material changes on this page with a new effective date. A change does not retroactively alter the legal basis for processing or the terms that applied to a completed order.

Cookies and customer installations

See our cookie policy. Visitor consent records created by the plugin on a customer website remain in that customer’s WordPress database and are separate from the PMS licensing service.