Legal
Privacy Policy
How we collect, use, and safeguard your information.
Effective Date: 02-10-2026
This Privacy Policy explains how IDEOLOGIX MEDIA DOOEL ("IdeoLogix Media", "we," "our," "us") collects, uses and protects personal data when you visit iplocationblock.com, use the customer portal at app.iplocationblock.com, call the IP Location Block geolocation API, or use the IP Location Block WordPress plugin (together, the "services").
1. Who We Are
IdeoLogix Media is the controller of the personal data described in this policy, except where section 7 says otherwise.
IDEOLOGIX MEDIA DOOEL
Ul. Ilindenska 10, 6250 Kichevo, North Macedonia
Privacy contact: [email protected]
2. Personal Data We Collect
- Account data: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and Google account identifier.
- Billing data: your plan, subscription status, order and invoice records, and the country and tax details needed for invoicing. Card and other payment details are collected by Paddle, not by us.
- Usage and security data: API keys, API request counts and quota usage, and activity records such as sign-ins, with the IP address and browser user agent they came from.
- Support data: the content of support tickets and contact form messages, including any files you attach, and your name and email address.
- Website analytics: pages visited, referring site, approximate location and device and browser information, collected through Google Analytics.
- Geolocation lookups: the IP addresses your websites send to our API for lookup, and the IP address of the server making the request.
3. How We Use Personal Data and Our Legal Basis
- To provide the services (create and run your account, answer API requests, enforce plan limits): account, usage and geolocation lookup data. Legal basis: performance of our contract with you.
- To process payments, invoices and refunds through Paddle: billing data. Legal basis: performance of our contract, and our legal obligations under tax and accounting law.
- To keep the services secure (prevent fraud, abuse and spam, investigate incidents, rate-limit anonymous API use): usage and security data. Legal basis: our legitimate interest in protecting the services and our customers.
- To provide support and reply to messages: support data. Legal basis: performance of our contract, or our legitimate interest in answering enquiries.
- To send service emails (account verification, password resets, billing and quota notices, important changes): account data. Legal basis: performance of our contract.
- To understand and improve our website: analytics data. Legal basis: your consent where required by law, otherwise our legitimate interest in improving the website.
- To meet legal obligations and enforce our terms: the data relevant to the request. Legal basis: legal obligation, or our legitimate interest in establishing and defending legal claims.
4. Who We Share Personal Data With
We do not sell personal data. We share it only with:
- Paddle.com, our online reseller and Merchant of Record, which processes orders, payments, invoices and refunds. Paddle handles your payment data under its own privacy notice.
- Service providers that run the services on our behalf: Hetzner (hosting and databases), Cloudflare (content delivery, security, bot protection and file storage), MXroute (email delivery), Google (sign-in with Google and website analytics).
- Professional advisers, such as accountants and lawyers, where needed.
- Authorities, when required by law or to protect our rights and the safety of our users.
- A buyer or successor, if all or part of our business is sold or merged, subject to this policy.
5. International Transfers
We are based in North Macedonia, and some of our providers process data in other countries, including the European Union, the United Kingdom and the United States. Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent contractual protections offered by our providers.
6. How Long We Keep Personal Data
- Account and usage data: while your account is active, and deleted or anonymized within 12 months after you close it.
- Billing records: for as long as tax and accounting law requires, which can be up to 10 years.
- Activity and security records: up to 12 months.
- Support tickets and contact messages: up to 3 years after the conversation ends.
- Geolocation lookup results: cached for up to 15 days to answer repeat lookups quickly.
- Website analytics: according to the retention setting of our Google Analytics property, up to 14 months.
7. Data You Process with the Plugin and API
When you use the WordPress plugin or the API on your own website, you decide which visitor IP addresses are looked up and what happens to the results. For that visitor data, you are the controller and we process it on your behalf, only to return geolocation results. The plugin's own logs and settings are stored in your WordPress database, which we do not access.
8. Your Rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased, under certain conditions;
- restrict how we process your data, under certain conditions;
- object to processing based on our legitimate interests;
- receive your data in a portable format, or have it sent to another organization;
- withdraw your consent at any time, where we rely on consent, without affecting processing that took place before;
- complain to a data protection authority, such as the Personal Data Protection Agency of North Macedonia or the authority in your country of residence.
To exercise these rights, email [email protected]. We will respond within one month, and may ask you to confirm your identity first.
9. Security
We protect personal data with appropriate technical and organizational measures, including encrypted connections (HTTPS), hashed passwords, access controls and regular updates. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Cookies
Our website and portal use cookies that are necessary to run them, such as session, sign-in and security cookies, and Cloudflare's bot protection on forms. Our website also uses Google Analytics cookies to measure visits. You can block or delete cookies in your browser settings; blocking necessary cookies may stop sign-in from working.
11. Children
The services are intended for businesses and people aged 18 or over. We do not knowingly collect personal data from children.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Effective Date" above, and notify you by email of material changes.
13. Contact Us
For questions about this Privacy Policy or your personal data, contact us:
IDEOLOGIX MEDIA DOOEL
Ul. Ilindenska 10, 6250 Kichevo, North Macedonia
Email: [email protected]
Contact form: iplocationblock.com/contact-us