Privacy Policy

Last updated: 29 September 2026

1. Who we are

DropToolkit.com provides online tools, guides, and informational resources for people researching or operating ecommerce and dropshipping businesses.

DropToolkit.com is operated by Eduardo Tureta.

2. Website address

Our website address is: https://droptoolkit.com

3. Data controller and operator

Eduardo Tureta is the data controller for personal information processed through DropToolkit.com for the purposes of applicable UK data-protection law.

4. Contact details

Privacy enquiries and data-protection requests may be sent to: hello@droptoolkit.com

5. Information collected automatically

When someone visits DropToolkit.com, limited technical information may be processed automatically to deliver the website, maintain security, diagnose errors, and protect the service.

  • Internet Protocol address
  • Browser and device type
  • Operating system
  • Requested page or file
  • Date and time of the request
  • Referring page, where supplied
  • HTTP response and error information
  • Security events and suspected abusive activity

This information is generally collected through ordinary web-server, hosting, WordPress, and security infrastructure. It is not currently used by DropToolkit.com for behavioural advertising or analytics profiling.

6. Server and security logs

The website and its hosting infrastructure may maintain server, access, error, and security logs. These logs help deliver the website, investigate technical problems, prevent abuse, identify malicious activity, and protect the website and its visitors.

Log information is retained only for as long as reasonably necessary for operational, security, troubleshooting, and legal purposes. Some retention periods are determined by the hosting provider’s technical and security systems.

7. Comments

Public comments are currently enabled on published blog posts.

When a visitor submits a comment, WordPress may collect:

  • The information entered in the comment form
  • The comment text
  • The visitor’s IP address
  • Browser user-agent information
  • The date and time of submission
  • Any website address voluntarily supplied by the commenter

This information is used to display and administer comments, identify abuse, moderate submissions, and detect spam.

Comments are public after approval unless otherwise indicated. Visitors should not include sensitive or unnecessary personal information in a public comment.

8. Anti-spam and security processing

DropToolkit.com currently uses Akismet Anti-spam to help detect and prevent spam in WordPress comments.

When a visitor submits a comment, the comment submission information and associated technical data may be processed by Akismet and its service provider for spam-detection and abuse-prevention purposes.

Akismet is not described or used here as an analytics, advertising, or visitor-profiling service.

9. Cookies and similar technologies

DropToolkit.com uses cookies and similar technologies where needed to operate the website, remember relevant choices, support security, and provide features requested by visitors.

DropToolkit.com also uses Termly to provide consent-management controls. Termly allows visitors to review, accept, reject, withdraw, or change relevant consent choices through the Consent Preferences control.

Google Tag Manager and Google Analytics 4 are configured to load only after the visitor grants the relevant analytics consent through Termly. These services may process analytics-related identifiers and technical or usage information as described in this Privacy Policy and the Cookie Policy.

More detailed information about cookies, browser storage, consent categories, and available controls is provided in the Cookie Policy.

10. Embedded content and external services

Pages or articles may contain links to third-party websites. They may also contain embedded content, such as videos, images, or other externally hosted material, where applicable.

Embedded content can behave as though the visitor accessed the third-party website directly. That third party may collect information, use cookies, or record interactions according to its own privacy practices. DropToolkit.com does not control third-party websites or their data-processing activities.

At present, ordinary external links should not be treated as affiliate-tracking links unless clearly identified otherwise.

11. WordPress administration

DropToolkit.com uses WordPress as part of its website infrastructure.

The WordPress administration area is restricted to authorized administrators. WordPress processes authentication and preference information for these administrators and uses functional cookies to maintain authenticated sessions.

Public registration is currently disabled. DropToolkit.com does not currently provide public customer accounts or visitor profile functionality.

12. Hosting and service providers

DropToolkit.com relies on service providers where necessary to host, secure, maintain, and operate the website. These providers may process limited personal information on behalf of Eduardo Tureta when delivering their services.

Current services include Hostinger for website hosting and related infrastructure; Hostinger Reach for newsletter and email-marketing services; Termly for consent-management functionality; and Google services used for Google Tag Manager and Google Analytics 4 when the relevant analytics consent has been granted.

Providers are expected to process information only as needed to provide the relevant service, comply with applicable law, and protect their systems.

13. Hostinger infrastructure

Hostinger currently provides hosting infrastructure associated with DropToolkit.com. Its systems may process or store website files, WordPress data, technical logs, security information, and related operational data.

Hostinger has its own privacy and security obligations. Visitors can review Hostinger’s current privacy information on Hostinger’s official website.

14. Newsletter and Hostinger Reach

DropToolkit.com offers a newsletter signup form on the public website. When a visitor submits an email address through that form, the address is processed through a secure server-side subscription process and sent to Hostinger Reach, our email-marketing service provider.

We use newsletter subscription information to administer subscriptions, send newsletter and email updates, share DropToolkit tools, resources, and related communications, maintain subscription records, prevent duplicate or abusive submissions, and respond to subscriber requests. Subscription records may be associated with the Newsletter Subscribers tag for newsletter administration.

Newsletter signup is voluntary and is based on the visitor’s consent. DropToolkit.com uses double opt-in: after signup, a subscriber must confirm their email address before the subscription becomes confirmed or active.

After successful confirmation, an automated welcome email may be sent through Hostinger Reach. Marketing emails include an unsubscribe mechanism. A subscriber may unsubscribe at any time, and may also withdraw marketing consent by contacting hello@droptoolkit.com.

Newsletter subscription information is retained while the subscription remains active and afterward only as reasonably necessary for record-keeping, security, legal, suppression, dispute-resolution, or compliance purposes. Subscribers may request access, correction, deletion, restriction, or other applicable data-protection rights through the contact details in this Privacy Policy.

15. Analytics

DropToolkit.com uses Google Tag Manager and Google Analytics 4 to understand how visitors use the website and to help improve website content, tools, and user experience.

Analytics processing is consent-controlled. Google Analytics 4 is configured to load only after the visitor grants the relevant analytics consent through Termly. Before that consent is granted, analytics processing is not intended to load through the public website.

Depending on the visitor’s consent choices and use of the website, analytics-related processing may include online identifiers, browser or device information, pages viewed, interactions, technical request information, and general usage data.

Visitors can review, change, or withdraw relevant consent choices through the Consent Preferences control. Further information about related cookies and similar technologies is available in the Cookie Policy.

16. Advertising

DropToolkit.com does not currently have Google AdSense or another confirmed display-advertising platform installed.

If display advertising is introduced, this policy and the Cookie Policy will be updated to explain the advertising provider, the information processed, the cookies or similar technologies used, and the choices available to visitors.

17. Affiliate tracking

DropToolkit.com does not currently use confirmed affiliate-program tracking links.

Some content may discuss or link to third-party products and services. An ordinary external link should not be assumed to involve affiliate tracking.

If affiliate tracking is introduced, qualifying links will be disclosed appropriately, and this policy or the Cookie Policy will be updated to describe any related tracking or data processing.

18. Contact forms and direct email

DropToolkit.com does not currently provide a public contact form.

Visitors may contact the site directly by email. When someone sends an email, Eduardo Tureta receives the sender’s email address and any personal information included in the message. That information may be used to respond, maintain correspondence, address legal or security issues, and keep records where reasonably necessary.

If a contact form is introduced, this policy will be updated to identify the information collected, the form provider where applicable, and the relevant processing and retention arrangements.

19. Lawful bases for processing

Depending on the circumstances, personal information may be processed under one or more of these UK GDPR lawful bases:

  • Legitimate interests: operating, securing, maintaining, and improving the website; responding to correspondence; administering comments; preventing fraud, abuse, and spam; and keeping appropriate records
  • Consent: where a visitor makes an optional choice, including subscribing to the newsletter or consenting to non-essential analytics cookies or similar technologies;
  • Contract or pre-contractual steps: where processing is necessary to provide something specifically requested by a visitor
  • Legal obligation: where information must be retained, disclosed, or otherwise processed to comply with applicable law
  • Legal claims: where processing is necessary to establish, exercise, or defend legal rights

Where processing relies on consent, consent may be withdrawn at any time without affecting processing already undertaken lawfully.

20. Data retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including operational, security, legal, accounting, or dispute-resolution requirements.

In particular:

  • Server and security logs are retained according to operational and security needs and applicable hosting configurations.
  • Comments and related metadata may be retained while the comment remains published or while needed for moderation, spam prevention, record-keeping, or legal purposes.
  • Administrative account information is retained while access remains authorized and may be retained longer where necessary for security or audit records.
  • Direct email correspondence may be retained while an enquiry is being handled and afterward where reasonably necessary for records, security, or legal purposes.
  • Newsletter subscription records may be retained while a subscription remains active and afterward only as reasonably necessary for unsubscribe suppression, security, record-keeping, legal, dispute-resolution, or compliance purposes.
  • Residual copies may remain temporarily in routine backups until those backups are replaced under their normal retention cycle.

Retention periods may vary depending on the nature of the information and the reason it is held.

21. Data sharing and processors

Personal information is not sold by DropToolkit.com or Eduardo Tureta.

Information may be disclosed:

  • To hosting, infrastructure, security, email-marketing, consent-management, analytics, maintenance, or communications providers acting on behalf of Eduardo Tureta or providing the relevant service;
  • Where necessary to investigate fraud, abuse, spam, or security incidents
  • To professional advisers where reasonably necessary
  • To law-enforcement bodies, regulators, courts, or other parties where required by law
  • In connection with the establishment, exercise, or defence of legal claims
  • As part of a business transfer or reorganization, subject to appropriate protections

Only information reasonably necessary for the relevant purpose should be shared.

22. International data transfers

Some hosting or service providers may process information outside the United Kingdom.

Where UK personal information is transferred internationally, Eduardo Tureta will rely on an applicable legal mechanism or safeguard where required. This may include UK adequacy regulations, approved contractual safeguards, or another mechanism recognized under UK data-protection law.

The exact arrangements may depend on the providers and services active at the time. This policy will be updated if new services materially change those arrangements.

23. Your UK data-protection rights

Subject to applicable law and any relevant exceptions, individuals may have the right to:

  • Be informed about how their personal information is used
  • Request access to their personal information
  • Request correction of inaccurate or incomplete information
  • Request deletion of personal information
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Receive eligible information in a portable format
  • Withdraw consent where processing relies on consent
  • Complain to a supervisory authority

Requests may be sent to hello@droptoolkit.com. Identity verification may be required before a request is fulfilled.

These rights can vary according to the circumstances and applicable law. International visitors may also have rights under the laws that apply to them.

24. Right to complain

People in the United Kingdom may complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

Information about making a complaint is available at: https://ico.org.uk/make-a-complaint/data-protection-complaints/

Visitors are welcome to contact Eduardo Tureta first so the concern can be investigated, but doing so does not remove the right to contact the ICO.

25. Security

DropToolkit.com uses reasonable technical and organizational measures intended to protect personal information and maintain the availability and integrity of the website.

No internet transmission or storage system can be guaranteed completely secure. Visitors should avoid submitting sensitive or unnecessary personal information through comments or ordinary email.

26. Children’s privacy

DropToolkit.com is intended as a general business and ecommerce information resource and is not directed specifically at children.

The site does not knowingly seek to collect personal information from children. A parent or guardian who believes that a child has submitted personal information may contact hello@droptoolkit.com to request review or deletion.

27. External links

DropToolkit.com links to websites operated by other organizations. Eduardo Tureta is not responsible for their content, security, privacy policies, or data-processing practices.

Visitors should review the privacy information supplied by an external service before providing it with personal information.

28. Changes to this Privacy Policy

This policy may be updated when the website, applicable law, or its data-processing activities change.

Material new processing—such as display advertising, affiliate tracking, new contact forms, or materially different technologies—will be reflected in this Privacy Policy and, where applicable, the Cookie Policy before or when that processing becomes active.

The “Last updated” date at the beginning of the policy will identify the latest revision.

29. Contact

Privacy enquiries and data-protection requests may be sent to:

Eduardo Tureta
hello@droptoolkit.com

Scroll to Top