Country / Region	Regional Regulator	Relevant Regulations	Website Policies	Privacy Policy	Cookies Policy	Disclaimer	Copyright and Trademark Information	Effective Date
International Website/s Policy			https://kokontis.com.au/website-policy/	https://kokontis.com.au/privacy-policy/	https://kokontis.com.au/cookies-policy/	https://kokontis.com.au/disclaimer/	https://kokontis.com.au/copyright-trademark/	15 May 2024
Australia and New Zealand								15 May 2024
European Union	https://www.edps.europa.eu/_en	Regulation (EU) 2016/679 (General Data Protection Regulation) in the current version of the OJ L 119, 04.05.2016; cor. OJ L 127, 23.5.2018 as a neatly arranged website. All Articles of the GDPR are linked with suitable recitals. The European Data Protection Regulation is applicable as of May 25th, 2018 in all member states to harmonize data privacy laws across Europe. If you find the page useful, feel free to support us by sharing the project.						15 May 2024
United Kingdom / Republic of Ireland								15 May 2024
Republic of China								15 May 2024
Japan								15 May 2024
Vietnam								15 May 2024
Americas								15 May 2024
United States of America / Canada								15 May 2024
Americas								15 May 2024
African States								15 May 2024

Privacy

WordPress.org websites (collectively “WordPress.org” in this document) refer to sites hosted on the WordPress.org, WordPress.net, WordCamp.org, BuddyPress.org, bbPress.org, and other related domains and subdomains thereof. This privacy policy describes how WordPress.org uses and protects any information that you give us. We are committed to ensuring that your privacy is protected. If you provide us with personal information through WordPress.org, you can be assured that it will only be used in accordance with this privacy statement.

Website Visitors

Like most website operators, WordPress.org collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. WordPress.org’s purpose in collecting non-personally identifying information is to better understand how WordPress.org’s visitors use its website. From time to time, WordPress.org may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

WordPress.org also collects potentially personally-identifying information like Internet Protocol (IP) addresses. WordPress.org does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below.

Gathering of Personally-Identifying Information

Certain visitors to WordPress.org choose to interact with WordPress.org in ways that require WordPress.org to gather personally-identifying information. The amount and type of information that WordPress.org gathers depends on the nature of the interaction. For example, we ask visitors who use our forums to provide a username and email address.

In each case, WordPress.org collects such information only insofar as is necessary or appropriate to fulfil the purpose of the visitor’s interaction with WordPress.org. WordPress.org does not disclose personally-identifying information other than as described below. And visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities, like purchasing a WordCamp ticket.

All of the information that is collected on WordPress.org will be handled in accordance with GDPR legislation.

Protection of Certain Personally-Identifying Information

WordPress.org discloses potentially personally-identifying and personally-identifying information only to those of project administrators, employees, contractors, and affiliated organisations that (i) need to know that information in order to process it on WordPress.org’s behalf or to provide services available through WordPress.org, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organisations may be located outside of your home country; by using WordPress.org, you consent to the transfer of such information to them.

WordPress.org will not rent or sell potentially personally-identifying and personally-identifying information to anyone. Other than to project administrators, employees, contractors, and affiliated organisations, as described above, WordPress.org discloses potentially personally-identifying and personally-identifying information only when required to do so by law, if you give permission to have your information shared, or when WordPress.org believes in good faith that disclosure is reasonably necessary to protect the property or rights of WordPress.org, third parties, or the public at large.

If you are a registered user of a WordPress.org website and have supplied your email address, WordPress.org may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with WordPress.org and our products. We primarily use our blog to communicate this type of information, so we expect to keep this type of email to a minimum.

If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. WordPress.org takes all measures reasonably necessary to protect against the unauthorised access, use, alteration, or destruction of potentially personally-identifying and personally-identifying information.

Use of personal information

We will not use the information you provide when you register for an account, attend our events, receive newsletters, use certain other services, or participate in the WordPress open source project in any other way.

We will not sell or lease your personal information to third parties unless we have your permission or are required by law to do so.

We would like to send you email marketing communication which may be of interest to you from time to time. If you have consented to marketing, you may opt out later.

You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please click on the unsubscribe link at the bottom of the email.

Legal grounds for processing personal information

We rely on one or more of the following processing conditions:

• our legitimate interests in the effective delivery of information and services to you;
• explicit consent that you have given;
• legal obligations.

Access to data

You have the right to request a copy of the information we hold about you. If you would like a copy of some or all your personal information, please follow the instructions at the end of this section.

All WordCamp attendee-provided data can be viewed and changed by the attendee via the Access Token URL that is emailed to confirm a successful ticket purchase.

WordPress.org user accounts can be edited by following these steps:

1. Visit https://login.wordpress.org/, and enter your username and password.
2. You will be redirected to https://profiles.wordpress.org/your_username.
3. Click the “Edit” link next to your username.

If you would like to request access to your account data, please follow these steps:

1. Visit https://wordpress.org/about/privacy/data-export-request/.
2. Enter your email address.
3. Click “Accept Declaration and Request Export”.

Note: If you have a WP.org account, it’s recommended you log in before submitting to associate your account with the request.

Retention of personal information

We will retain your personal information on our systems only for as long as we need to, for the success of the WordPress open source project and the programs that support WordPress.org. We keep contact information (such as mailing list information) until a user unsubscribes or requests that we delete that information from our live systems. If you choose to unsubscribe from a mailing list, we may keep certain limited information about you so that we may honour your request.

WordPress.org will not delete personal data from logs or records necessary to the operation, development, or archives of the WordPress open source project.

WordPress.org shall maintain WordCamp attendee data for 3 years to better track and foster community growth, and then automatically delete non-essential data collected via registration. Attendee names and email addresses will be retained indefinitely, to preserve our ability to respond to code of conduct reports.

On WordCamp.org sites, banking/financial data collected as part of a reimbursement request is deleted from WordCamp.org 7 days after the request is marked paid. The reason for the 7-day retention period is to prevent organisers having to re-enter their banking details if a wire fails or if a payment was marked “Paid” in error. Invoices and receipts related to WordCamp expenses are retained for 7 years after the close of the calendar year’s audit, by instruction of our financial consultants (auditors & bookkeepers).

When deletion is requested or otherwise required, we will anonymise the data of data subjects and/or remove their information from publicly accessible sites if the deletion of data would break essential systems or damage the logs or records necessary to the operation, development, or archival records of the WordPress open source project.

If you would like to request deletion of your account and associated data, please follow these steps:

1. Visit https://wordpress.org/about/privacy/data-erasure-request/.
2. Enter your email address.
3. Click “Accept Declaration and Request Permanent Account Deletion”.

Note: If you have a WP.org account, it’s recommended you log in before submitting to associate your account with the request.

Rights in relation to your information

You may have certain rights under data protection law in relation to the personal information we hold about you. In particular, you may have a right to:

• request a copy of personal information we hold about you;
• ask that we update the personal information we hold about you, or independently correct such personal information that you think is incorrect or incomplete;
• ask that we delete personal information that we hold about you from live systems, or restrict the way in which we use such personal information (for information on deletion from archives, see the “Retention of personal information” section);
• object to our processing of your personal information; and/or
• withdraw your consent to our processing of your personal information (to the extent such processing is based on consent and consent is the only permissible basis for processing).

If you would like to exercise these rights or understand if these rights apply to you, please follow the instructions at the end of this Privacy statement.

Third Party Links

Our website may contain links to other websites provided by third parties not under our control. When following a link and providing information to a 3rd-party website, please be aware that we are not responsible for the data provided to that third party. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on WordPress.org, you should read their own privacy policies.

Aggregated Statistics

WordPress.org may collect statistics about the behaviour of visitors to its websites. For instance, WordPress.org may reveal how many times a particular version of WordPress was downloaded or report on which plugins are the most popular, based on data gathered by api.wordpress.org, a web service used by WordPress installations to check for new versions of WordPress and plugins. However, WordPress.org does not disclose personally-identifying information other than as described in this policy.

Cookies

Additionally, information about how you use our website is collected automatically using “cookies”. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

Please see our cookie policy for more information about what cookies are collected on WordPress.org.

Privacy Policy Changes

Although most changes are likely to be minor, WordPress.org may change its Privacy Policy from time to time, and at WordPress.org’s sole discretion. WordPress.org encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

Contact

Please contact us if you have any questions about our privacy policy or information we hold about you by emailing dpo@wordpress.org.

Cookie Policy

Cookies

Our Privacy Policy explains our principles when it comes to the collection, processing, and storage of your information. The Cookie Policy specifically explains how we, our partners, and users of our services deploy cookies, as well as the options you have to control them.

What are cookies?

Cookies are small pieces of data, stored in text files, that are stored on your computer or other device when websites are loaded in a browser. They are widely used to ‘remember’ you and your preferences, either for a single visit (through a ‘session cookie’) or for multiple repeat visits (using a ‘persistent cookie’). They ensure a consistent and efficient experience for visitors, and perform essential functions such as allowing users to register and remain logged in. Cookies may be set by the site that you are visiting (known as ‘first party cookies’), or by third parties, such as those who serve content or provide advertising or analytics services on the website (‘third party cookies’).

Cookies set by WordPress.org

We use cookies for a number of different purposes. Some cookies are necessary for technical reasons; some enable a personalised experience for both visitors and registered users; and some allow the display of advertising from selected third party networks. Some of these cookies may be set when a page is loaded, or when a visitor takes a particular action (clicking the ‘like’ or ‘follow’ button on a post, for example).

Below the different categories of cookies set by WordPress.org are outlined, with specific examples detailed in the tables that follow. This includes their name and purpose. Certain cookies are only set for logged-in visitors, whereas others are set for any visitors, and these are marked below accordingly. Where a cookie only applies to specific subdomains, they are included under the relevant header.

Strictly Necessary: These are the cookies that are essential for WordPress.org to perform basic functions. These include those required to allow registered users to authenticate and perform account related functions.

Functionality: These cookies are used to store preferences set by users such as account name, language, and location.

Performance: Performance cookies collect information on how users interact with websites hosted on WordPress.org, including what pages are visited most, as well as other analytical data. These details are only used to improve how the website functions.

Tracking: These are set by trusted third party networks (e.g. Google Analytics) to track details such as the number of unique visitors, and pageviews to help improve the user experience.

Third Party/Embedded Content: WordPress.org makes use of different third party applications and services to enhance the experience of website visitors. These include social media platforms such as Facebook and Twitter (through the use of sharing buttons), or embedded content from YouTube and Vimeo. As a result, cookies may be set by these third parties, and used by them to track your online activity. We have no direct control over the information that is collected by these cookies.

wordpress.org

Cookie	Duration	Purpose	Logged-in Users Only?
_ga	2 years	Google Analytics – Used to distinguish users.	No
_ga_<property-id>	2 years	Google Analytics – Used to persist session state.	No
devicePixelRatio	Browser default (1 year)	Used to make the site responsive to the visitor’s screen size.	No
wordpress_test_cookie	Session	Tests that the browser accepts cookies.	No
tk_ai	24 hours	Jetpack – Stores the unique identifier for the publisher to enable Jetpack to collect data.	No
tk_lr	1 year	Jetpack – Stores the unique identifier for the publisher to enable Jetpack to collect data.	No
tk_or	5 years	Jetpack – Stores the unique identifier for the publisher to enable Jetpack to collect data.	No
wp-settings-{user_id}	1 year	Used to persist a user’s wp-admin configuration.	Yes
wporg_logged_in wporg_sec	14 days if you select “Remember Me” when logging in. Otherwise, Session.	Used to check whether the current visitor is a logged-in WordPress.org user.	Yes
wporg_locale	1 year	Used to persist a user’s locale configuration.	Yes

make.wordpress.org

Cookie	Duration	Purpose	Logged-in Users Only?
_ga	2 years	Google Analytics – Used to distinguish users.	No
_ga_<property-id>	2 years	Google Analytics – Used to persist session state.	No
welcome-{blog_id}	Permanent	Used to record if you’ve chosen to hide the “Welcome” message at the top of the corresponding blog.	No
showComments	10 years	Used to determine if you prefer comments to be shown or hidden when reading the site.	No

*.trac.wordpress.org

Cookie	Duration	Purpose	Logged-in Users Only?
_ga	2 years	Google Analytics – Used to distinguish users.	No
_ga_<property-id>	2 years	Google Analytics – Used to persist session state.	No
trac_form_token	Session	Used as a security token for cross-site request forgery protection.	No
trac_session	90 days	Used to keep anonymous session information.	No

codex.wordpress.org

Cookie	Duration	Purpose	Logged-in Users Only?
_ga	2 years	Google Analytics – Used to distinguish users.	No
_ga_<property-id>	2 years	Google Analytics – Used to persist session state.	No
codexToken	6 months	Used to check whether the current visitor is a logged-in WordPress.org user. Only set if you select “Keep me logged in” when logging in.	Yes
codexUserId codexUserName	6 months	Used to check whether the current visitor is a logged-in WordPress.org user.	Yes
codex_session	Session	Used to check whether the current visitor is a logged-in WordPress.org user.	Yes

*.wordcamp.org

Cookie	Duration	Purpose	Logged-in Users Only?
_ga	2 years	Google Analytics – Used to distinguish users.	No
_ga_<property-id>	2 years	Google Analytics – Used to persist session state.	No
camptix_client_stats	1 year	Used to track unique visitors to tickets page on a WordCamp site	No
wp-saving-post	1 day	Used to track if there is saved post exists for a post currently being edited. If exists then let user restore the data	Yes
comment_author_{hash}	347 days	Used to tracked comment author name, if “Save my name, email, and website in this browser for the next time I comment.” is checked	No
comment_author_email_{hash}	347 days	Used to tracked comment author email, if “Save my name, email, and website in this browser for the next time I comment.” is checked	No
comment_author_url_{hash}	347 days	Used to track comment author url, if “Save my name, email, and website in this browser for the next time I comment.” checkbox is checked	No
wp-postpass_{hash}	10 days	Used to maintain session if a post is password protected	No
wp-settings-{user}	1 year	Used to preserve user’s wp-admin settings	Yes
wp-settings-time-{user}	1 year	Time at which wp-settings-{user} was set	Yes
tix_view_token	2 days	Used for session managing private CampTix content	No
tk_ai	Browser default	Used for tracking	No
jetpackState	Session	Used for maintaining Jetpack State	Yes
jpp_math_pass	Session	Verifies that a user answered the maths problem correctly while logging in.	No
stnojs	2 days	Remember if user do not want JavaScript executed	No
wordpress_logged_in_{hash}	Session	Remember User session	Yes
wordpress_test_cookie	Session	Test if cookie can be set	No

Controlling Cookies

Visitors may wish to restrict the use of cookies, or completely prevent them from being set. Most browsers provide for ways to control cookie behaviour such as the length of time they are stored — either through built-in functionality or by utilising third party plugins.

To find out more on how to manage and delete cookies, visit aboutcookies.org. For more details on advertising cookies, and how to manage them, visit youronlinechoices.eu (EU based), or aboutads.info (US based).

Some specific opt-out programs are available here:

Google Analytics – https://tools.google.com/dlpage/gaoptout

It’s important to note that restricting or disabling the use of cookies can limit the functionality of sites, or prevent them from working correctly at all.

---

Business Name: Kokontis and Australian Business Number (ABN): 37 886 734500

---