Summary
- For each payment link, the app stores the plan, the link’s settings, and the name and email of the person it’s for, if the business adds them.
- It records when a link is opened (the time and the Wix checkout it made, not the visitor’s IP address or device) and the payments Wix reports for it, including the buyer’s name and email.
- Buyers pay in the business’s own Wix checkout. Card and bank details never reach us.
- Data is stored on Cloudflare, restricted to Cloudflare’s EU jurisdiction.
- We don’t sell data, show ads, use tracking cookies or run analytics on visitors.
- A link and its history are kept until the business deletes the link. Everything for a site is deleted when the app is uninstalled.
Who we are
Plan Payment Links is provided by Dylan Powell trading as ImpactLayer, a sole trader based in Bridgend, UK (“we”, “us”).
Contact for anything about privacy: support@impactlayer.co.uk
Who is responsible for what
- The business that runs the Wix site (“the business”) is the controller for its customers’ data. It decides who to send links to and what to do with the results.
- We are a processor for that data. We only use it to run the links, on the business’s instructions.
- We are the controller for the business owner’s own account details, such as the site’s email and the app’s settings.
If you were sent a payment link, the business that sent it is your first point of contact. You can also email us and we’ll help.
What we store about links and buyers
| Data | Why |
|---|---|
| The link: its short code, the plan and its price wording, a private label, the start date and coupon code if set, and when it was made | To show the right plan and price, and make the right checkout each time. |
| Name and email of the person the link is for, only if the business adds them | To fill in the checkout for them, email them the link and send reminders. |
| Link history: emailed (and to which address), reminders sent, paused or resumed, and problems found | So the business can see what happened to each link. |
| Opens: the time, and the ID of the Wix checkout that was made. No IP address or device details. | To show that a link was opened, and to match the payment to it. |
| Payments reported by Wix: order ID and number, amount, currency, payment status, the buyer’s name and email, Wix contact and member IDs, and subscription IDs and renewal number | To show the link as paid, renewing or cancelled. |
| Pricing Plans order events that haven’t been matched to a link yet | Wix sometimes sends these before the payment itself. They’re attached to the link when it arrives. |
If the business looks someone up with “Find a contact”, the app searches the site’s Wix Contacts and stores only the name and email the business picks.
What we store about your site
| Data | Why |
|---|---|
| App settings: reminders and the default email message | To send links and reminders the way you set them up. |
| Cached site details: business name, site email, timezone and currency, your app plan, your list of pricing plans and the setup check result, refreshed every 1 to 10 minutes | To show the business name on link pages and emails, use the right timezone and currency, and apply the right app plan. |
| Short code to site lookup | So a link opens the right site’s plan. |
| Wix event IDs, kept for 7 days | To ignore duplicate messages from Wix so nothing is counted twice. |
| Error log, the last 200 entries, with no personal data beyond link codes | To find and fix problems. |
What the app reads from Wix
- Your pricing plans, their prices and start-date rules, to build links and check they still work.
- Your site’s name, email, timezone and currency, and your app plan.
- Messages from Wix about plan orders and payments, to mark links as paid, renewing or cancelled, and about plans that change or are deleted.
- Your Wix Contacts, only when you search them with “Find a contact”, and only if you’ve given the app that permission.
Orders, members and contacts stay in Wix. The app keeps only what’s listed above.
When someone opens a link
The link opens a short page, hosted by us on Cloudflare, showing the business name, the plan and its price. Just viewing that page isn’t counted as an open and doesn’t make a checkout, so link previews in messaging apps don’t either. When the visitor presses the button, the app asks Wix to make a new checkout for the plan, with the start date, coupon and (if the business added them) the person’s name and email filled in, and tags it with the link’s code so the payment can be matched. The visitor then signs in or creates an account on the business’s site and pays in the Wix checkout, under Wix’s and the business’s own policies.
Visitors’ IP addresses are used only in memory for a short time to limit abuse, and are never stored.
Where it’s stored
Everything above is stored on Cloudflare (Cloudflare, Inc.) using Durable Objects restricted to Cloudflare’s EU jurisdiction, so it’s stored and processed in EU data centres. Data held by Wix, such as checkouts, orders, members, contacts and the emails Wix sends, is stored as described in Wix’s own privacy policy.
Who it’s shared with
- The business’s own Wix site: checkouts are made on the site, with the person’s name and email if the business added them.
- Wix’s email service: links and reminders the business chooses to email are sent through Wix’s Email Transmissions service, in the site’s name, with replies going to the site’s email.
We don’t sell data and don’t share it with anyone else. These are our processors:
| Who | What for |
|---|---|
| Wix.com Ltd. | The platform the app runs on, checkouts and email delivery. |
| Cloudflare, Inc. | Hosting, the link pages and storage. |
Cookies and tracking
The app sets no tracking cookies, runs no analytics on visitors and shows no advertising. The link page sets no cookies at all. The business’s Wix site and checkout may set their own cookies, as described in that site’s and Wix’s policies. This website sets no cookies.
How long we keep it
- Links: a link, its history and the payments matched to it are kept until the business deletes the link. Deleting it removes them straight away and the link stops working.
- Unmatched Pricing Plans order events: 30 days, then deleted.
- Wix event IDs: 7 days.
- Error log: the last 200 entries; older ones are deleted.
- Uninstalling: everything we store for the site is deleted when the app is uninstalled, and its links stop working.
Orders and members stay with the site
Orders, member accounts and contacts created when someone buys a plan belong to the business’s Wix site, not to us, so uninstalling the app doesn’t remove them. The business can manage them in Wix.
Lawful basis
For buyers and the people links are sent to, the business decides the lawful basis, as the controller. Usually this is taking a payment the person asked for (contract), or the business’s legitimate interest in following up a membership. For the business owner’s account details, our basis is providing the app you installed (contract) and our legitimate interest in running it securely.
Security
- Messages from Wix are checked for a valid signature before the app acts on them.
- The dashboard can only be opened through Wix sign-in, by people with access to the site.
- Link pages and emails are rate limited to stop abuse.
- All data travels over encrypted connections (HTTPS), and Cloudflare encrypts stored data at rest.
Your rights
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, or object to how it’s used. If you were sent a link, you can ask the business or email us. We’ll act on the business’s instructions and help them answer your request.
Email support@impactlayer.co.uk. If you’re unhappy with how your data is handled, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top.