Privacy Policy

Who We Are

EDGE22 Studios Ltd. develops GenerateBlocks and other WordPress products and operates this website. We are a corporation registered in Alberta, Canada, and are the data controller responsible for the personal information we collect and use for our own purposes.

This policy explains how we handle information about website visitors, account holders, customers, and people who contact us. References to “we”, “us”, and “our” mean EDGE22 Studios Ltd.

For privacy questions or requests, contact support@generateblocks.com.

Who We Share Your Data With

We do not sell or rent your personal information.

We use service providers and other organizations to operate our website, deliver products and messages, provide support, and manage purchases. Their privacy roles depend on the services they provide. Some process information on our instructions; others act as independent data controllers for their own responsibilities. The principal services are described below, with links to their privacy notices.

Our team members, contractors, and service providers receive the information needed for their work and are subject to appropriate confidentiality and data-protection obligations. Payment providers and any authorized reseller acting as merchant of record receive information needed for the relevant transaction and their legal obligations.

We may disclose information when required by law, in response to a valid legal request, or where necessary and lawful to protect people, investigate fraud or security incidents, or establish, exercise, or defend legal claims. Professional advisers may receive information needed to provide legal, accounting, or other professional services.

If we propose to use your information for a new purpose, we will provide any notice and obtain any consent required by applicable law.

International Transfers

Our business is based in Canada. Our service providers and authorized team members may process information in other countries, including the United States. Privacy laws in those countries may differ from the laws where you live.

Where applicable law requires safeguards for an international transfer, the transfer must be covered by an appropriate legal mechanism, such as an applicable adequacy decision or approved contractual safeguards. You can contact us for information about the safeguards relevant to your data. Using our website does not, by itself, constitute consent to an international transfer that requires separate consent.

Cookies

Cookies are small files that a website stores on your device. We use cookies and similar technologies for functions such as account access, security, fraud prevention, and remembering preferences. Embedded services and payment providers may also use cookies for the purposes described below.

Where optional cookies or similar technologies require consent, we obtain that consent before using them. You can also manage cookies through your browser settings, although blocking necessary cookies may prevent features such as account access or checkout from working. Affiliate tracking is currently disabled, as explained below.

What Personal Data We Collect and Why

Registered Users

When you create or use an account, we process your username, email address, account credentials, and account activity to provide access, secure the account, and send necessary account messages. Your email address is used for messages such as password setup and password resets.

You may provide additional profile information, such as your name, website, or biography, where those fields are available. Profile and account information is stored in our website database and is accessible to authorized team members who need it for their work. You can update available profile fields through your account or contact us for help.

Where Gravatar is used to display profile images, a hash derived from your email address is sent to that service to look for a matching image. A hash is not necessarily anonymous: it may allow Gravatar to associate the request with its records. See Automattic’s Privacy Policy.

WordPress uses cookies for account and publishing functions. The standard durations are:

  • A temporary cookie used to check whether your browser accepts cookies is discarded when the browser session ends.
  • Login cookies normally last for two days, or two weeks if you select “Remember Me”. Logging out removes the login cookies.
  • Screen-preference cookies normally last for one year.
  • If you edit or publish content, a cookie identifying the edited post lasts for one day.

Publishing Content, Comments, and Forums

Information you publish, including comments, forum posts, your display name, profile image, and any public profile details, may be visible to others. Author information may also be available through WordPress’s public interfaces. Avoid publishing information you want to keep private.

When you submit a comment or forum post, we may process your account information, the submitted content, request IP address, and browser information to publish the content, moderate discussions, and prevent spam or abuse. Private support fields are accessible to our support team and should be used only for information needed to resolve the issue.

If you upload images, avoid including location information such as EXIF GPS data. Other people may be able to download the images and extract that information.

If you choose to save your details when commenting, WordPress may store your name, email address, and website in comment cookies for one year. Additional spam detection is provided through Akismet; see Automattic’s Privacy Policy.

Public content may remain on the website until it is removed. You can contact us to request correction or removal of content or personal information associated with your posts.

Email and Contact Forms

We use Google Workspace for internal email and customer communications. If you email us or submit a contact form, we process the contact details and information you provide to respond and maintain a record of the conversation. Form submissions may also include your IP address and technical information used for security and spam prevention. See Google’s Privacy Policy.

Support communications are also handled through Help Scout. Information needed to manage your request, including your email address, message content, and relevant account or purchase details, may be stored there. See Help Scout’s Privacy Policy.

Embedded Content from Other Websites

Pages or user posts may contain embedded content, such as videos, images, or social posts. Loading embedded content can connect your browser to the provider and disclose information such as your IP address, browser details, and the page you are viewing. The provider may use cookies or other tracking and may associate your activity with an account you hold with it.

The providers involved depend on the content you view. The following links cover examples of services whose content may be embedded:

Analytics

We use Fathom Analytics to understand visits and improve our website. Fathom’s website analytics does not set analytics cookies. It processes request information, including an IP address and browser user-agent, to derive site-specific statistical information. Our reports describe website usage rather than named visitor accounts.

This does not mean that no information is processed or that no analytics records are retained. Fathom describes its collection and handling of information in its data documentation. Where permitted, our legal basis is our legitimate interest in understanding and improving our website.

Payments and Purchases

For purchases made directly from EDGE22 Studios Ltd., we use Stripe and PayPal to process payments, as applicable. Those providers handle the information needed to process and manage payments and meet their own obligations. See Stripe’s Privacy Policy and PayPal’s Privacy Statement.

Where you purchase through an authorized reseller acting as the merchant of record, that reseller is the seller responsible for the transaction. Its identity and privacy policy will be provided at checkout. The reseller handles information for payment processing, subscription management, refunds, fraud prevention, invoicing, and tax compliance.

We exchange information needed to fulfil and support purchases with the applicable payment provider or reseller. Depending on the transaction, this may include your name, email address, billing address, country or region, business and tax details, purchased products, amounts, currency, and transaction or subscription status.

We keep account, purchase, license, subscription, and support records so we can provide access, manage renewals and refunds, resolve payment issues, and meet relevant recordkeeping obligations. When information is supplied by a payment provider or reseller, we use it for these same purposes.

Full card numbers and card security codes are handled by the payment provider and are not stored on our website. Payment providers may also process device, browser, network, and activity information to authenticate payments and prevent fraud, as described in their privacy notices.

A reseller acting as merchant of record is an independent data controller for its own processing. Payment providers may also act independently for certain purposes. EDGE22 Studios Ltd. remains responsible for its handling of information used to provide your account, products, licenses, and support.

Marketing and Service Emails

Our marketing email lists are opt-in. We use your email address and related subscription preferences to send the updates you requested. You can unsubscribe using the link in a marketing email. Necessary account, security, support, and billing messages may still be sent when you are not subscribed to marketing emails.

We manage our mailing lists using FluentCRM, a self-hosted system. Subscriber records and preferences are stored in our own website database. Email delivery uses Amazon Simple Email Service (Amazon SES), so AWS processes recipient addresses, message content, and associated delivery information. See the AWS Privacy Notice.

Emails may include open and click measurement, subject to applicable consent requirements. We use that information to understand engagement and improve communications. Unsubscribing stops future marketing emails; limited suppression information may be retained to respect that choice.

If we run advertising campaigns using cookies or pixels, the advertising service may process browser, device, and visit information. The services may include Google, X, or Meta. Any use of optional advertising technologies is subject to the notice and consent requirements that apply.

Hosting, Security, and Web Services

Our website hosting is provided by Rocket.net, operated by onRocket.com, LLC. Hosting services process the website’s files, databases, backups, and related technical records. See Rocket.net’s Privacy Policy.

Website traffic is served and proxied through Cloudflare. Cloudflare processes request and network information to deliver content and provide security services. See Cloudflare’s Privacy Policy.

Our website and infrastructure services may maintain technical and security records, including request IP addresses, browser information, timestamps, requested URLs, and error details. These records help us operate the service, investigate faults, prevent abuse, and protect accounts.

License Keys and Automatic Updates

When your website activates or checks a license or requests a product update, our licensing systems process information such as the license key, website URL, request IP address, and product information. These records allow us to validate access, provide updates, manage site activations, and investigate licensing problems or abuse.

If a GenerateBlocks license or purchase is managed through GeneratePress, also operated by EDGE22 Studios Ltd., relevant purchase and license information is used across those services to provide the access and support included in your purchase.

You can install updates manually using the downloads available through your account instead of enabling automatic updates. This does not remove your existing account, purchase, or license records. Contact us if you want to request access to or deletion of your personal information.

Affiliates

Affiliate tracking is currently disabled on this website. We do not set affiliate attribution cookies while it is disabled.

Historical affiliate visit, referral, and commission records may be retained where needed to administer past transactions, resolve disputes, prevent fraud, or meet legal obligations. Enabling affiliate tracking in the future would require an updated disclosure and any applicable consent controls.

Legal Bases for Processing

Where applicable privacy law requires a legal basis, we rely on the basis appropriate to the purpose:

  • Contract: creating and managing accounts, fulfilling purchases, providing licenses and support, and administering subscriptions you request.
  • Legal obligations: keeping required financial and tax records, responding to lawful requests, and meeting other applicable obligations.
  • Legitimate interests: securing our services, preventing fraud and abuse, resolving disputes, responding to enquiries, and understanding and improving our website, where those interests are not overridden by your rights.
  • Consent: sending marketing communications and using optional technologies where consent is required. You may withdraw consent without affecting the lawfulness of processing before withdrawal.

How Long We Keep Information

Retention depends on the type of record and why it is needed. We consider the service being provided, applicable legal requirements, outstanding disputes or transactions, and whether identifying details are still necessary.

  • Accounts and profiles: records are kept while an account remains open. You can request closure or deletion; related records may need to remain for the purposes described below.
  • Purchases, subscriptions, and licenses: records are kept as needed to provide purchased rights and support, reconcile payments, and meet accounting, tax, dispute, or fraud-prevention requirements.
  • Public content: posts and comments may remain until they are removed. Requests to remove personal information are assessed under applicable law.
  • Support and security: records are kept as needed to resolve requests, maintain relevant service history, and investigate or defend against abuse or claims.
  • Marketing: subscription information is kept while you subscribe, with limited information retained where needed to record consent or respect an unsubscribe request.

A deletion request may result in personal details being removed or anonymized while necessary financial or service-history records are retained. We will explain any applicable exception. Information in backups may persist until those backups are replaced or expire; contact us for information about retention relevant to your request.

Your Privacy Rights

Depending on the law that applies to you, you may have rights to request access to your information, correct inaccurate information, request deletion, restrict processing, receive certain information in a portable format, or object to particular uses. These rights are subject to the conditions and exceptions in applicable law.

You may object to processing based on legitimate interests, including profiling based on those interests, on grounds relating to your situation. You may object to direct marketing at any time.

Where we rely on consent, you may withdraw it. Use the unsubscribe link for marketing emails, any available privacy or cookie controls, or contact us. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Send requests to support@generateblocks.com. We may ask for proportionate information to verify your identity and locate the relevant records. We respond within the period required by applicable law and explain any lawful limitation or extension.

You can complain to the privacy regulator responsible for your situation. This may include the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, the UK Information Commissioner’s Office, or your local European data-protection authority.

Payment providers and resellers may hold information for their own purposes. Their privacy notices explain how to exercise rights in relation to that information. Contact us if you need help identifying the provider involved in your purchase.

How We Protect Your Data

We use technical and organizational measures appropriate to the information and risks involved. Access to systems and customer information is limited to team members and contractors who need it for their work, and staff receive relevant security guidance and training.

We maintain and secure our website and work with our service providers to protect its infrastructure. No system or transmission method can be guaranteed completely secure. Please protect your account credentials and use temporary credentials when granting access for support.

Data Breach Response

If we become aware of a personal-data breach, we investigate, take steps to contain it, and assess its likely impact. We notify the relevant authorities and affected individuals where required, within the deadlines set by applicable law, and provide information about protective steps when appropriate.

Privacy Policy Changes

We may update this policy to reflect changes in our services, providers, or legal obligations. We publish updates on this page and provide any additional notice or obtain any consent required by applicable law.

Changelog

  • September 25, 2026 – Updated payment-provider and reseller disclosures, hosting and email services, affiliate-tracking status, privacy rights, retention, and related explanations.
  • June 9, 2023 – Updated hosting.
  • May 19, 2020 – Privacy policy created.