Privacy Policy
The personal information we collect through the Site, how we use it, and the rights you have over it.
Last updated:
This Privacy Policy explains how Web Power & Light, LLC (“WP&L,” “Company,” “us,” “we,” or “our”) collects, uses, and shares personal information through getmemberium.com (the “Site”). Memberium® is a trademark of Web Power & Light, LLC.
This Policy is provided as a plain-language notice. It is not a contract and does not expand or limit any obligation we have under applicable data-protection law such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), or other applicable statutes.
This Policy works together with our Terms & Conditions and Cookie Policy. Capitalized terms used here without definition have the meaning given in the Terms.
1. Scope of This Policy
This Policy applies only to personal information collected by WP&L on or after August 1, 2026 through the Site. As of the effective date below, WP&L does not maintain a customer database containing personal information of former customers of Castle Mountain Limited. If WP&L acquires any such data in the future, we will provide a separate notice at that time, and the data will be handled in accordance with applicable law.
If you have questions about personal information collected before August 1, 2026, those requests should be directed to the entity that collected the data.
2. Information We Collect
We aim to collect the minimum personal information needed to operate the Site, deliver purchases, and respond to support requests.
Information You Provide Directly
- Account & profile data — name, email address, and any information you submit when registering for an account or signing up for updates.
- Purchase data — billing name, billing email, country, and order details submitted during checkout. This data is collected and processed by our Merchant of Record, LemonSqueezy. We receive the subset needed to deliver and support your order (typically your name, email, product, and renewal date).
- Support correspondence — the contents of any email, ticket, chat, or similar message you send to us.
Information Collected Automatically
- Server logs — our hosting infrastructure records standard request data such as IP address, user agent, requested URL, and timestamp. These logs are used for security, abuse prevention, and reliability, and are retained only as long as needed for those purposes.
- Videos — case-study and other video content is served from our own infrastructure at
memberium.webpowerandlight.com. The video host may log standard request data when a video is played.
What We Do Not Collect
As of the effective date, the Site does not use third-party web analytics, advertising, remarketing, session recording, or heat-mapping services. We do not place advertising cookies or tracking pixels. See our Cookie Policy for specifics.
3. How We Use Information
We use the information described above to:
- process and fulfill purchases, including delivery of license keys and download links;
- provide technical support and respond to inquiries;
- communicate about product updates, security advisories, and renewal reminders (you may opt out of marketing email at any time);
- detect, prevent, and respond to fraud, abuse, and security issues;
- comply with our legal obligations; and
- maintain and improve the Site and our products.
4. Legal Basis (EU/UK)
To the extent the GDPR or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — processing your purchase and delivering the Software and related services you requested.
- Legitimate interests — maintaining server logs for security, sending service announcements, and operating the Site, in each case balanced against your privacy interests.
- Consent — where you affirmatively opt in (for example, to receive marketing email), which you may withdraw at any time.
- Legal obligation — where we are required to retain or disclose information under applicable law.
5. How We Share Information
We do not sell personal information. We share personal information only as follows:
- Merchant of Record — LemonSqueezy. Payment, billing, and order data is collected and processed by LemonSqueezy under its own terms and privacy policy. LemonSqueezy is the seller of record for purchases made through the Site.
- Hosting & infrastructure providers. The Site is served from third-party hosting and content-delivery infrastructure. These providers receive standard request data needed to deliver pages and assets.
- Service providers. We may use third parties to provide tools such as email delivery, error monitoring, or transactional email. Each is bound by written obligations to protect personal information.
- Legal compliance. We may disclose information when required by law, court order, or government request, or where we believe disclosure is necessary to protect our rights, customers, or the public.
- Business transfer. In connection with a merger, asset sale, or similar transaction, information may be transferred subject to the protections described in this Policy.
6. Cookies & Tracking
The Site does not use third-party analytics, advertising, or session-recording cookies as of the effective date below. Details about the limited cookies and similar technologies we do use, and how to control them, are in our Cookie Policy.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy or as required by law:
- Account and purchase data is retained for the life of your license or account, plus any period required for accounting and tax records.
- Support correspondence is retained for a reasonable period to allow follow-up and quality assurance.
- Server logs are retained only as long as needed for security, abuse prevention, and reliability.
8. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no system is perfectly secure, and we cannot guarantee the absolute security of information transmitted over the internet.
9. Your Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Rectification — request correction of inaccurate or incomplete information.
- Erasure — request deletion of your personal information, subject to legal retention obligations.
- Restriction — request that we limit processing of your information in certain circumstances.
- Portability — receive your personal information in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing.
- Withdrawal of consent — withdraw consent at any time where processing relies on it.
To exercise any of these rights, contact support@getmemberium.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before responding.
10. Children’s Privacy
The Site is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.
11. International Transfers
Your information may be processed in the United States and other countries where our infrastructure or service providers operate. Where the GDPR applies, we rely on recognized transfer mechanisms (such as the European Commission’s adequacy decisions or Standard Contractual Clauses) for transfers outside the European Economic Area.
12. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide notice on the Site or by email. Your continued use of the Site after the effective date of any revision constitutes your acceptance of the revised Policy.
13. Business-Continuity Notice
The Memberium product was previously operated by Castle Mountain Limited under a separate license arrangement. WP&L is a distinct legal entity. As of the effective date below, we do not maintain a database of customers from the Castle Mountain era. If we acquire such data in the future, we will provide a separate notice describing how it will be handled.
14. Contact
If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us using the information in the footer below.
Effective date: This Privacy Policy is effective as of August 1, 2026, and applies only to information collected through the Site on or after that date. Privacy practices published at memberium.com before this date were issued by Castle Mountain Limited under a separate license arrangement and do not reflect the practices of Web Power & Light, LLC.