WooCommerce Privacy Policy Generator

WooCommerce stores hold more data than hosted platforms

Because WooCommerce runs on your own WordPress install, you are responsible for the database as well as the storefront. Orders, customer accounts, abandoned carts and plugin logs all live on your hosting, so retention and security wording is about your setup, not a platform's.

• Order and customer records stored in your own database
• WordPress comments, form plugins and spam filters (Akismet processes commenter data)
• Payment gateway plugins, named individually
• Backup providers who receive a copy of the database
• Hosting location, which determines where data physically sits

WordPress-specific settings to check

WordPress ships a privacy settings screen and personal-data export and erase tools under Tools — worth enabling, because they give you a concrete way to honour access and deletion requests. Publish the policy as a page, set it in Settings → Privacy, and link it from the checkout so the gateway can find it.