Legal
Privacy policy
What we collect when you use this site or buy W3Bullhorn, what we do with it, and your choices.
Last updated: 22 October 2026
This policy explains what personal information we collect when you use this website, ask us about W3Bullhorn, or buy a W3Bullhorn licence, what we do with it, and the choices you have. We have tried to keep it short and plain.
Who we are
W3Bullhorn is a product of W3nuts (“we”, “us”). We are the controller of the personal information described in this policy.
- Registered company: W3nuts, company number WE4343D, registered in Gujarat, India
- Registered office: Tagore Road, Opp Atul Motars, Rajkot 360001, Gujarat, India
- General email: hello@bullhornforwordpress.com
- Privacy questions: hi@bullhornforwordpress.com. Write to this address for anything in this policy, including the requests listed under “Your rights”.
What this policy covers, and what it does not
It covers this website, our forms, and the purchase and licensing of W3Bullhorn.
W3Bullhorn runs on your own WordPress site. The jobs, candidates and applications it handles stay between your website and your Bullhorn account, and they are not sent to us. For that information you, not we, decide why and how it is used. The only things your site tells us are listed under “Licence checks” below. If we install or set up the plugin for you, you may give us access to your website or Bullhorn account so that we can do it. We use that access only for the setup and support you ask for.
What we collect
When you buy. Your name, company (if you give one), email address, phone number and billing address, the website the licence is for, and the details of the order (what you bought, the price, the date and the order number). If you create an account, your account details and order history.
Payments. Payment is taken by our payment provider, Razorpay, on its own secure payment screen. Your card or bank details go to them and never reach this website or our servers. We receive confirmation that the payment succeeded or failed, and a transaction reference.
Your licence. We keep a record of each licence: the licence key, the customer details above, the website it is bound to, the dates it runs between, and whether and when we sent you the plugin.
Licence checks. When a site running W3Bullhorn checks its licence or looks for updates, it sends us the licence key, the website address, an installation identifier, which environment the site reports itself as, the versions of the W3Bullhorn plugins installed, and the PHP and WordPress versions in use. The installation identifier is a random value generated once and stored on that site, so that one website presenting many installations shows up as abuse. Like any web server, ours also sees the IP address of the request. There is no channel on which job, candidate or application data could travel, and nothing is metered.
Forms and email. If you use our demo or contact form, or write to us, we keep what you send: your name, email address, agency or company, website, and your answers or message. A form submission is stored on this website and emailed to us. We also store the exact wording of the consent box you ticked, with the date and time you ticked it, so that we can both see later what you agreed to. To limit spam we count repeat submissions from the same connection using a one-way scrambled (hashed) form of the IP address, held for ten minutes; the address itself is never stored.
Cookies. See “Cookies” below.
Why we use it, and our legal basis
- To take your order, issue your licence, send you the plugin and set it up (order, licence and payment details): this is needed to carry out our contract with you.
- To keep your licence working and send updates (licence checks): this is needed to carry out our contract with you.
- To answer your questions, run a demo and give support (forms and email): our legitimate interest in running our business and helping people who ask, or, before you are a customer, steps you ask us to take.
- To keep accounts and meet tax and legal duties (invoices and order records): a legal obligation.
- To keep the website and licence service secure and free of spam and abuse (logs, hashed IP address): our legitimate interest in security.
- Where we ask for your consent (for example, to contact you about a request, as the form says): your consent, which you can withdraw at any time.
We do not sell your personal information. We do not use it to make decisions about you by automated means.
Who we share it with
Only the people who help us do the above, and only what they need:
- Razorpay, our payment provider, to take payment.
- StableServer, our website host, which stores this website, our orders and our licence records.
- The same host’s mail service, which sends order and licence emails. There is no separate email provider and no email marketing platform.
- Accountants, legal advisers and insurers, where we need their advice.
- Authorities, where the law requires it.
There is no other supplier that handles your personal information. We run no analytics, no advertising pixels, no chat widget and no email marketing platform on this website.
Moving information outside your country
Everything described here is held and processed in India. We are an Indian company, our website host’s server is in India, and Razorpay is an Indian company. Nothing is passed on to a further country.
If you are in the UK or the European Economic Area, that means your information reaches India as soon as you send it to us, because that is where we are — it is not first held in your country and then exported. India is not the subject of a UK or EU adequacy decision, so we are not relying on one, and we are not going to claim standard contractual clauses we do not have. What we rely on instead is this: we collect very little, we tell you here exactly what we hold and for how long, we use no analytics or advertising, and we will delete what we hold on request. If that is not a basis you are comfortable with, do not send us anything you would not want held in India, and tell us before you buy so we can discuss it.
How long we keep it
- Orders and invoices: for as long as tax and company law require us to keep accounting records. We keep them for seven years
- Licence records: while the licence is active, and then for seven years with the order they belong to, so that renewals, refunds and accounting all reconcile.
- Enquiries from forms and email: 24 months after we last heard from you, then deleted
- Server logs: our host records them for its own security and operational purposes. We do not analyse them, and we delete archived logs older than 12 months.
When a period ends, we delete or anonymise the information.
Cookies
This website does not use advertising or tracking cookies, and does not run analytics. It sets only the cookies it needs to work: if you add something to your order, a cookie that remembers your order while you check out; if you log in, cookies that keep you logged in. These are strictly necessary, so they do not need your consent. Our payment provider may set its own cookies on its payment screen to take and secure the payment. You can block cookies in your browser settings, but ordering and logging in may then not work.
Your rights
Depending on where you live, you have the right to ask us for a copy of the personal information we hold about you; to have it corrected; to have it deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent where we rely on it. To use any of these, email hi@bullhornforwordpress.com. We may need to check who you are first, and some information we are legally required to keep.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to your data protection authority: if you are in the UK or the European Economic Area, you may complain to the data protection authority for your own country — the Information Commissioner’s Office in the UK, or your national authority in the EEA. We are established in India and are not registered with an authority in either, so there is no single regulator we can point you to; your own is the right one.
Security
We protect your information with measures suited to the risk: the whole site is served over an encrypted connection (HTTPS), access to the systems holding orders and enquiries is restricted to the people who need it, and your card details never reach our server at all because payment is taken on Razorpay’s own screen. No system is completely secure and we will not pretend otherwise. If a breach is likely to affect you, we will tell you, and the authorities where the law requires it.
Children
W3Bullhorn is sold to businesses. This website is not aimed at children, and we do not knowingly collect their information.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, if the change affects how we use your information, tell you directly.
Contact us
Questions about this policy, or any request about your own information: hi@bullhornforwordpress.com. For anything else, hello@bullhornforwordpress.com or the contact form.