Administrators
Privacy and GDPR
Sessions Pro processes personal data (client accounts, sessions, notes, emails). This guide summarizes rights and tools for site owners (coach / administrator).
For your privacy policy, use the Sessions Pro privacy policy as a starting point and mention the plugin under Settings → Privacy in WordPress (the plugin registers suggested text). Adapt it with your legal identity.
Data involved
| Category | Examples |
|---|---|
| Account | Name, first name, email, phone, password |
| Sessions | Date, location, link, status, price, payment, notes, PDF |
| Coach notes | Private text about the client (not visible to client) |
| Emails | Send logs (type, recipient, timestamp) |
| Payment | Manual status in Free; Stripe processes cards in Premium (outside the plugin) |
Native WordPress tools
Sessions Pro registers compatible exporters and erasers:
Tools → Export Personal Data
Tools → Erase Personal Data
Standard WordPress workflow: email request, confirmation link, JSON/ZIP export or erasure.
Typical export content:
- User profile
- Sessions linked to the client
- Notes and phone
Erasure: anonymization of plugin data and dissociation of sessions, via WordPress tools.
Responsibilities
| Actor | Role |
|---|---|
| Coach / site publisher | Data controller vis-à-vis their clients |
| Host | Infrastructure processor |
| Stripe (Premium) | Payment processor |
| SMTP / mail | Email delivery processor |
Mention Sessions Pro in your privacy policy (see the suggested text in WordPress).
If you accept product telemetry in the wizard, the plugin sends anonymous statistics (version, client/session buckets, enabled features) to sessionspro-app.com — no client names or email content. You can refuse or opt out later. Details: Sessions Pro website privacy policy.
Retention period
Recommendation: retain while the coach–client relationship is active. At the end:
- Delete or anonymize the client account via WP tools
- Historical sessions may be kept anonymized per your legal obligation
Data subject rights
Clients can request:
- Access (export)
- Rectification (client area profile or via coach)
- Erasure (subject to legal obligations)
- Objection / restriction — handled case by case
Channel: coach contact or site form.
Security
- Native WordPress authentication
- WordPress protection on sensitive actions
- No card storage in the plugin (Premium → Stripe)