Effective date: 7 November 2025
Business name: oOMF! (ABN 22774578197)
Website: https://oomf.dev
Contact: hello@oomf.dev
Who We Are
oOMF! (“we”, “us”, “our”) designs and distributes software and content, including WordPress plugins and related services. We are based in Victoria, Australia and handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also reference rights under the EU/UK GDPR.
Scope
- Our public website oomf.dev and related sub-pages (e.g., docs, blog, support).
- Our WordPress plugins and any hosted endpoints we operate to support features (e.g., updates, licensing, telemetry, documentation, contact forms).
- Customer support via email and other published channels.
This policy does not cover third-party services we do not control (e.g., your web host, WordPress.com, Cloudflare, payment processors, analytics providers).
Types of Information We Collect
Information you provide
- Contact details (e.g., name, email) when you subscribe, request support, or purchase.
- Account and licensing details (e.g., license keys, plugin/site domain association).
- Support content you send us (e.g., logs, screenshots).
- Marketing preferences (newsletter opt-ins).
Information collected automatically
- Usage and analytics data (e.g., page views, referrers, approximate location, device/browser, timestamps).
- Telemetry (optional, plugin-specific): anonymised events such as plugin version, WordPress/PHP versions, feature toggles, and error codes.
Information from your WordPress site (when using our plugins)
- Configuration metadata needed to operate the plugin (e.g., plugin settings, feature flags).
- Service interactions (e.g., licensing checks, update checks).
- No sensitive data by default. If a feature requires processing personal data, we’ll explain this in the plugin’s settings and docs and provide reasonable controls.
How We Use Your Information
- Provide, operate, and improve our website, plugins, and support.
- Security and abuse prevention (e.g., fraud/abuse detection, rate-limiting).
- Licensing and updates (e.g., verify license eligibility, deliver updates).
- Communications (e.g., transactional emails, service notices, release notes).
- Analytics to understand performance, stability, and adoption.
- Legal compliance and enforcement of our Terms.
Legal Bases (where GDPR applies)
- Contract (to provide the product/service you requested).
- Legitimate interests (product improvement, security, minimal telemetry).
- Consent (newsletter marketing, optional telemetry).
- Legal obligation (records, tax, consumer law).
Cookies and Tracking
We use cookies and similar technologies for essential operations, analytics, and preferences. Your browser lets you block or delete cookies. Where required, we display a consent banner.
Disclosures to Third Parties
We may share limited data with infrastructure & analytics providers, payment & billing providers, email & support platforms, professional advisors, and law enforcement if required. We do not sell personal information.
International Transfers
Our providers may process data in multiple countries. We choose reputable vendors with appropriate safeguards (e.g., contractual clauses, security certifications).
Data Retention
- Operational records are kept while you use our products and for a reasonable period after (e.g., up to 7 years for tax and accounting).
- Support communications are retained to maintain history and improve service.
- Telemetry/analytics are retained only as aggregated or anonymised where feasible.
We delete or anonymise data when it’s no longer needed unless a longer retention is required by law.
Security
We take reasonable technical and organisational measures (e.g., least-privilege access, encryption in transit, update hygiene). No system is perfectly secure; promptly contact us if you suspect an issue.
Your Rights
Depending on your location, you may have rights to access, correct, delete, object/restrict processing, data portability, and withdraw consent. To exercise rights, email hello@oomf.dev. We may need to verify your identity.
Australia (APPs)
You can request access/correction. If you believe we’ve breached the APPs, contact us. If unresolved, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Children
Our website and plugins are intended for adults and business users. We do not knowingly collect personal information from children.
Third-Party Links and Services
Our site and plugins may link to external services. Their privacy practices are their own; review their policies.
Changes to This Policy
We may update this policy to reflect changes to our products, laws, or operations. We’ll update the Effective date and, where appropriate, provide notice.
Contact
Questions or requests: hello@oomf.dev. Postal address available on request.
