=== The GDPR Framework By Data443 ===
Contributors: Data443
Tags: gdpr, compliance, security, privacy, wordpress gdpr, eu privacy directive, eu cookie law, california privacy law, privacy law, general data protection, ccpa, gdpr law
Requires at least: 4.7
Tested up to: 7.0
Requires PHP: 5.6
Stable tag: 2.3.0
License: GPLv3
License URI: https://www.gnu.org/licenses/gpl-3.0.en.html

Easy to use tools to help make your website GDPR-compliant. Fully documented, extendable and developer-friendly.  Extensions to enterprise GDPR compliance coming - full active development and QA team.  Free, friendly support!

== Description ==

This plugin is a service of [Data443.com](https://www.data443.com).

Data443 is a Data Security and Compliance company traded on the OTCMarkets as [ATDS](https://www.otcmarkets.com/stock/ATDS/overview).  We have been providing leading GDPR compliance products such as [Global Privacy Manager](https://data443.com/global-privacy-manager/), Blockchain privacy, and enterprise cloud eDiscovery tools.

The GDPR regulation is a large and complex law.  Each member country is to ratify it into its own legislation and language.  This makes it cumbersome to manage - but rest assured - we have a full [Site Owners Guide](https://data443.atlassian.net/servicedesk/customer/portal/2/article/2078998660)  to help you learn and understand some of your requirements.

This product gives a simple and elegant interface to handle Data Subject Access Requests (DSARs). 

### Features
&#9745; Give users an optional time frame to give their consent
&#9745; Do Not Sell my private information capability released
&#9745; [Privacy Safe Seal&#8482;](https://orders.data443.com/cart.php?gid=8) now available - Strengthen your reputation by giving a visual representation of your Privacy Solution in operation!;
&#9745; Enable DSAR on one page - allow even those without an account to automatically view, export and delete their personal data;
&#9745; Configure the plugin to delete or anonymize personal data automatically or send a notification and allow admins to do it manually;
&#9745; Track, manage and withdraw consent;
&#9745; Generate a GDPR-compatible Privacy Policy template for your site;
&#9745; Use a helpful installation wizard to get you started quickly;
&#9745; Report on related data items within your WordPress installation;
&#9745; Significantly reduce your staff time efforts dealing with DSARs;
&#9745; Enable your larger organization to summarize and consolidate DSAR work;
&#9745; Report to management on DSAR status, volume and data requirements;
&#9745; We provide this fully documented;
&#9745; We are developer-friendly. Everything can be extended, every feature and template can be overridden.
&#9745; Cookie solution
&#9745; Integration with WooCommerce Version 3.4.0 or later.
&#9745; Integration with Easy Digital Download Version 2.6 or later.
&#9745; Integration with Email Subscribers & Newsletters.

## Disclaimer
Using The GDPR Framework does NOT guarantee compliance to GDPR. This plugin gives you general information and tools, but is NOT meant to serve as complete compliance package. Compliance to GDPR is risk-based ongoing process that involves your whole business. Data443 is not eligible for any claim or action based on any information or functionality provided by this plugin.

## Notice: Special Details for those using Caching Plugins:
As the pages generated by our plugin are highly dynamic, we recommend you exclude all pages generated from caching in order for them to function properly.  Here is an example of how to exclude our pages in [W3 Total Cache](https://data443.atlassian.net/servicedesk/customer/portal/2/article/718864404) and [WP Fastest Cache](https://data443.atlassian.net/servicedesk/customer/portal/2/article/709427345).

### Documentation
Full documentation: [The WordPress Site Owner's Guide to GDPR](https://data443.atlassian.net/servicedesk/customer/portal/2/article/2078998660)
For developers: [Developer Docs](https://data443.atlassian.net/servicedesk/customer/portal/2/article/2082439194)
For users: [Knowledge Base](https://data443.atlassian.net/servicedesk/customer/portal/2/article/192708653)

### Plugin support:
The GDPR Framework currently works with the following plugins
&#9745; Contact Form 7 & Contact Form Flamingo
&#9745; Gravity Forms - [Download the GDPR add-on](https://wordpress.org/plugins/gdpr-for-gravity-forms/)
&#9745; Formidable Forms - [Download the GDPR add-on](https://wordpress.org/plugins/gdpr-for-formidable-forms/)
&#9745; Ninja Forms - [Download the GDPR add-on](https://wordpress.org/plugins/gdpr-for-ninja-forms/)
&#9745; [WooCommerce](https://wordpress.org/plugins/woocommerce/)
&#9745; [Easy Digital Download](https://wordpress.org/plugins/easy-digital-downloads/)
&#9745; [Email Subscribers & Newsletters](https://wordpress.org/plugins/email-subscribers/)
&#9745; [WPML](https://wpml.org/)

== Installation ==

= Download and Activation =

1. Upload the plugin files to the /wp-content/plugins, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress.
3. ‘The GDPR Framework’ will be managed at Tools > Data443 GDPR tab.
4. The page 'Privacy Tools' will be created after Setup Wizard. This page displays the form where visitors can submit their request.

= Setup Guide =

Steps to add consent with contact form 7 are as follow:
1. First, need to create consent "Tools > Data443 GDPR > Consent > Add consent type" .
2. Then note down the slug for example the slug is "contact_acceptance"
3. Then go to the contact form 7 click on Acceptance button a pop-up will get open.
4. Add the name of that acceptance same as that of slug i.e "contact_acceptance".
5. Insert the tag then save the form then it will be embedded with contact form 7.
   example tag: [acceptance contact_acceptance] I consent to email contact. [/acceptance]

Compatibility Guide:

To make Easy Digital Download and Woo-commerce compatible with the plugin you need to check checkbox at Tools > Data443 GDPR > general > Woocommerce Integration / Easy Digital Download Integration.

Add consent to Easy Digital download:

You need to turn on the default EDD consent from Downloads > Settings > Privacy
and have to check checkboxes for "Agree to Privacy Policy" and "Show the Privacy Policy on checkout".

== Frequently Asked Questions ==
= Help, the identification emails are not sent! =
The GDPR Framework uses the exact same mechanism for sending emails as the rest of your WordPress site. Please test if your site sends out emails at all using the Forgot Password form, for example.
If you get the forgot password email but not the identification email, please make a post in the support forums.

= Help, the link in the identification email doesn't work! =
Are you using SendGrid or another email delivery service? This might corrupt the link in the email.
In case you're using SendGrid, make sure to turn off "click tracking". Otherwise, please post in the support forum!

= Help, the Privacy Tools page acts weirdly or always displays the "link expired" message! =
Check if you're using any caching plugins. If yes, then make sure the Privacy Tools page is excluded.
Also check if a server side cache is enabled by your web host.

= How is this plugin different from the tools in WordPress v4.9.6? =
WordPress 4.9.6 provides tools to allow administrators to manually handle GDPR requests. However, the GDPR framework allows visitors to automatically download and export data to reduce administrative work load.
In addition to that, we provide tools to manage and track custom consent types and also a privacy policy generator.
We are also planning to add other important privacy-related features missing from WordPress core over time.

== Screenshots ==

1. GDPR FRAMEWORK GENERAL
2. GDPR FRAMEWORK COOKIE POPUP
3. GDPR FRAMEWORK CONSENT
4. GDPR FRAMEWORK DATA-SUBJECT
5. GDPR FRAMEWORK PRIVACY TOOL

== Change log ==

= 2.3.0 (5/20/2026) =

* Test in WordPress 7.0

= 2.2.0 (1/30/2025) =

* RDU-1594 Fix potential security vulnerabilities

= 2.1.0 (2/27/2024) =

* RDU-1078 Remove database prefix from the user export data
* Fix latest PHP 8 warnings

= 2.0.4 (12/5/2022) =

* FRAM-368 Fix typo in Cookie Consent CSS code
* FRAM-371 Fix Privacy Safe image and text formatting

= 2.0.3 (7/27/2022) =

* FRAM-343 Fix Translation problems with some Polish strings
* FRAM-354 Fix a bug that affected the html download when YoastSEO plugin was active.

= 2.0.2 (4/19/2022) =

* FRAM-331 Fix cookie value to reflect a user allow or deny
* FRAM-339 Update language translation files

= 2.0.1 (3/16/2022) =

* FRAM-320 Fix WooCommerce integration initialization call timing to be earlier
* FRAM-323 Provide a settable message for the case where the email is not found
* FRAM-325 Fix the problem of sending data to non-registered visitors

= 2.0.0 (2/15/2022) =

* Fram-306 Streamline the code to address malware warning from 3rd party code
* Reduced PHP requirement to 5.6

= 1.0.49 (1/18/2022) =
* Fram-303 Automatically push a new release from GitHub to WordPress
* Fram-304 Add accessibility markup to the terms checkbox

= 1.0.48 (11/30/2021) =
* FRAM-294 Reduce PHP Requirement from 7.4 to 7.3

= 1.0.47 (11/29/2021) =
* FRAM-259 Add support for an Italian Translation
* FRAM-273 Add support for the Polish Translation
* FRAM-263 Fix broken link
* FRAM-267 Add Ninja Form detection during setup
* FRAM-254 autoload composer dependency conflicts fix
* FRAM-289 Edit Privacy Tools Page to only send emails to users with data on site. Otherwise a message displays that no data is found for specified email. 

= 1.0.46 (10/26/2021) =
* FRAM-242 Add a PREMIUM hyperlink in the admin plugins screen
* FRAM-244 Add information about the premium version in the admin settings tabs
* FRAM-245 Add more contact information in the admin settings tabs
* FRAM-256 Update FileFacets tab

= 1.0.45 (9/24/2021) =
* FRAM-219 Fix Fatal Error seen when editing a user profile
* FRAM-208 Update description tab
* FRAM-209 Update Support tab links
* FRAM-210 Update links in setup wizard

= 1.0.44 (8/26/2021) =
* FRAM-206 Fix Fatal Error triggered when withdrawing a custom consent

= 1.0.43 (8/2/2021) =
* FRAM-196 Change ClassiDocs Tab
* FRAM-202 Add Missing Tables

= 1.0.42 (4/29/2021) =
* FRAM-109: change [gdpr_privacy_safe] shortcode to [data443_privacy_safe] but preserve backward compatibility for now
* FRAM-135: 'Undefined key' seen when Consent tab is saved
* FRAM-136: Fix all references of undefined variables in the Data Subjects tab
* FRAM-137: Remove the Unnecessary save button in the 'Do Not Sell' admin tab
* FRAM-140: Fix read property "consent" on string at UserConsentModel line 80
* FRAM-144: Undefined Variable 'notices' accessed in PrivacyToolsPageController.php
* FRAM-149: Remove all uses of PHP Short Tags from the code
* FRAM-150: Update PHP minimum required in readme.txt of all three plugins

= 1.0.41 (4/14/2021) =
* FRAM-95: Fix the Privacy Seal to not display a broken link when the seal code is wrong.
* FRAM-112: Fix the use of undefined variables.
* FRAM-113: Add files to source control that were accidentally missed.

= 1.0.40 (8/14/2020) = 
* GDPRF-196 Verified functionality on WordPress version 5.5
* GDPRF-132, 179 Added custom URLs for privacy tools and terms & conditions page
* GDPRF-173 All WordPress user meta data available for download
* GDPRF-176 Allow users an optional time frame to give their consent
* GDPRF-181 Support Data443 by including our information with our privacy safe Seal

= 1.0.39 (6/29/2020) = 
* GDPRF-160 Highlighted privacy safe tab
* GDPRF-164 Added user instructions for do not sell shortcode
* GDPRF-159 Added link to ClassiDocs information

= 1.0.38 (6/26/2020) = 
* Added do not sell my information feature
* Verified functionality on WordPress version 5.4.2

= 1.0.37 (5/12/2020) = 
* Fixed shortcode instructions in settings tap for Privacy Safe.
* Fixed GDPR and CCPA framework conflicts that may cause site errors if both plugins are active.
* Verified functionality on WordPress version 5.4.1

= 1.0.36 (5/8/2020) = 
* Fixed popup error
* Updated privacy safe settings tab to show code tips

= 1.0.35 (5/8/2020) = 
* GDPRF-118: verified functionality on WordPress version 5.4.0
* Added support for the new Privacy Safe Seal&#8482; technology 

= 1.0.34 (01/21/2020) =
* WPSD-379 : fix to entry meta from $_POST
*  Input sanitization and extraneous jQuery library removal

= 1.0.33 (11/26/2019) =
* WPSD-362 : update newsletter hooks.
* WPSD-346 : Popup Learn More Text
* WPSD-303 : Correct links on Privacy Policy Tab

= 1.0.32 (06/10/2019) =
* WPSD-289 : Fix broken POT file
* WPSD-292 : Comments added without consent ticked
* WPSD-294 : Fix issue of forget mail with plugin
* WPSD-295 : Turn or privacy policy link on woocommerce checkout
* WPSD-298 : Add Slovak Language
* WPSD-300 : Privacy check on WooCommerce registration page
* WPSD-303 : Please correct links on Privacy Policy Tab
* WPSD-328 : Customization for "learn more" on the cookie popup tab

= 1.0.31 (06/10/2019) =
* WPSD-284 : Translation message missing
* WPSD-281 : Translate woocommerce privacy consent
* WPSD-280 : Translated to spanish
* WPSD-273 : Privacy Tools Email Link - Not entirely working
* WPSD-266 : Request to add register of full date of accept cookies and policies

= 1.0.30 (04/15/2019) =
* WPSD-259 : Add newsletter compatibility.
* WPSD-260 : Update Details tab.
* WPSD-263 : Users Seeing Other Deleted Users Information.

= 1.0.29 (02/28/2019) =
* WPSD-244 : Error when using 'Download as table' with 'WooCommerce data on GDPR tool' enabled.
* WPSD-236 : EDD GDPR compliance with tool.
* WPSD-228 : Add comment consent to export.

= 1.0.28 (02/28/2019) =
* WPSD-220 : WordpressAdmin::enqueue() going about it horribly wrong.
* WPSD-231 : Export HMLT ne fonctionne pas / Doesn't work.
* WPSD-233,WPSD-233 : Genesis Login Modal Box and frontend Js issue.

= 1.0.27 (02/26/2019) =
* GDPRF-93 : Update links in Support tab of plugin.
* WPSD-217 : Privacy tools page in 2 languages site.

= 1.0.26 (02/05/2019) =
* Fix issue Integration with woocommerce. 

= 1.0.25 (02/04/2019) =
* Version Refresh to ensure latest stable functional - correcting svn upload failure previously

= 1.0.24 (02/04/2019) =
* SD-203: Enable Privacy Link option doesn’t seem to change anything.
* GDPRF-84: Update links in Support tab of plugin.
* GDPRF-83: Integration with WooCommerce.

= 1.0.23 (01/14/2019) =
* SD-173: Add hook to change the error message on WP comment.
* GDPRF-80:Add Data443 Privacy Manager tab in plugin.
* GDPRF-67: During the Automatic Setup that this is indicated.

= 1.0.22 (12/19/2018) =
* GDPRF-76: Confirm WP 5.0 Support and Compatibility
* SD-172: Update feature for accept and decline button.
* SD-170, 171, 174: Custom url for Privacy policy.
* SD-173: Comment checkbox ignored in WordPress 5.0.
* SD‌-169: Plugin conflict fix

= 1.0.21 (12/05/2018) =
* GDPRF‌-60: Update links in support tag in plugin
* SD‌-138: Resolve header popup issue
* SD‌-144: The pop-up banner is always visible on the bottom
* SD‌-145: There is a bug with your Flamingo integration, here’s the fix
* SD-144: The pop-up banner is always visible on the bottom
* SD‌-146: Compatibility with Gutenberg plugin
* SD‌-150: Compatibility to PHP 7.2 
* SD‌-151: error in download plugin
* SD‌-155: Query Monitor analysis
* SD-157: fix of `Codelight\G\C\C\UserConsentModel->createUserTable()` – every admin request

= 1.0.20 (11/19/2018) =
* SD-133: Cookie Consent first time user popup
* Fixed couple of entries
* Make separate tab for popup settings
* Enhance popup feature

= 1.0.19 (11/05/2018) =
* GDPRF-44: Change random function to updated library
* GDPRF-48 & GDPRF-55: Updated documentation
* GDPRF-56 & SD-115: Add new Knowledge Base link to Details tab
* SD-121: How to handle the "No" to cookies consent?
* SD-123: informal German translation added
* SD-127: fixed Danish translation issue

= 1.0.18 (10/23/2018) =
* GDPRF‌-47: ClassiDocs Integration
* GDPRF‌-15: Add compatibility with avada Fusion Builder
* GDPRF‌-16: Fix JS conflict when select2 is already loaded
* SD‌-97: Checkbox conditional checked at admin
* SD‌-61 & SD‌-112: Fixed translation problems
* SD‌-104: Consent Tracking and Data Request Help
* SD‌-108 and SD‌-114: Added contact 7 form instructions to Installation tab
* SD‌-114: Add setup guid to read me file

= 1.0.17 (10/1/2018) =
* SD-95: Remove undeclared variable issue
* SD-96: Remove issue with Error with PHP 7.2.1
* SD-98,SD-99 & SD-100: Remove Latest Update Conflict.
* SD-94 & SD-102: Fixed French Translation in .po

= 1.0.16 (9/26/2018) =
* SD-88: Add “Learn More” the all PO And POT languages Files
* SD-89: Remove Issue of redeclare function with DIVI theme
* GDPRF-1: Make comments privacy policy checkbox optional
* GDPRF-2: Figure out whether or not logs should be exportable / deletable
* GDPRF-5: Add fields for changing email sender name and email
* GDPRF-9: Consider displaying consent log in data export
* GDPRF-23: Altering text for consent types
* GDPRF-29: "gdpr_cookie_consent" consent for cookie popup tracking
* GDPRF-33: Save user logs
* GDPRF-37: Add dutch to supported languages
* Manageable popup from backend

= 1.0.15 (9/11/2018) =
* SD:50: Fix issue with consent 
* SD-80,SD-81 & SD-82: Fix Compatibility issue Contact form 7
* Add languages for text and buttons on "cookie acceptance" popup
* Editable cookie acceptance Popup from general tab
* SD-83: Fix issue with decline button translation
* GDPRF-50: Changes "Taiwan" from "Taiwan, Province of China"
* SD-62: Fix translation text issues.
* GDPRF-43: Made the Privacy Policy checkbox optional
* GDPRF-49: Change Menu Name to "The GDPR Framework By Data443"

= 1.0.14 (8/29/2018) =
* Make Cookie Popup Optional

= 1.0.13 (8/29/2018) =
* Proper update - Upload failure on previous promo

= 1.0.12 (8/27/2018) =
* GDPRF-27: Change comment consent text
* GDPRF-36: Add english (canada) to supported languages
* GDPRF-46: Change checkbox comment
* GDPRF-31: Added "cookie acceptance" pop up
* GDPRF-8: Recaptcha Removed
* GDPRF-24: Make default consent translatable

= 1.0.11 (8/2018) = 
Numerous backlog bug fixes including:
* GDPRF-6: Comments checkbox reported to disappear with WPML active
* GDPRF-22: Can’t save on Consent tab
* GDPRF-12: Treat upper- and lowercase chars in visitor email addresses equally
* GDPRF-25: Captcha on privacy tools page
* GDPRF-26: Privacy Tools Delete text change
* GDPRF-17: Add locations outside of US and EU
* GDPRF-11: Ensure + symbol works in email addresses
* GDPRF-13: Privacy Policy: replace "[TODO]" with something that's not a shortcode format
* GDPRF-39: Confirm "delete my data" when button is pushed
* GDPRF-40: Can't leave any comments with GDPR activated
* GDPRF-4: Add Polylang compatibility
* GDPRF-34: Validate functionality with most current WP version

= 1.0.10 =
* Fix fatal error caused by Flamingo integration

= 1.0.9 =
* Add support for Contact Form 7 Flamingo
* Remove nested the_content filter in the consent area editor to avoid potential conflicts with various plugins (Thanks Gary McPherson!)
* Fix some missing translation strings (Thanks trueqap!)
* Additional minor tweaks
* Update Italian translation (Thanks Rienzi Comunica!)

= 1.0.8 =
* Disable Privacy Tools page if not set via admin (fixes infinite redirect issue)
* Add additional admin notification if Privacy Tools page is not set
* Additional minor tweaks 

= 1.0.7 =
* Update translation pot file
* Add partial Greek translations (Thanks @webace-creative-studio)

= 1.0.6 =
* Fix administrative roles not being able to comment via admin interface
* Fix trashed or spam comments not being deleted
* Minor usability tweaks everywhere
* Fix PHP5.6 not properly saving custom consent (Thanks @paulnewson!)
* Fix CF7 always showing as enabled in wizard
* In Tools > Data443 GDPR > Data Subjects, add the display of given consents
* Add warning about SendGrid compatibility in the installer
* Fix issue with installer wizard not properly saving export action
* Add notice in case the settings are not properly configured
* Added Bulgarian translation (thanks Zankov Group!)
* Added partial Italian translation (thanks Matteo Bruno!)

= 1.0.5 =
* Fix installing consent tables and roles properly
* Add Spanish translations (Thanks @elarequi!)
* Add partial German translations (Thanks @knodderdachs!)
* Lower required PHP version to 5.6.0
* Re-add container alias for DataSubjectManager
* Fix for installer giving the option to add links to footer for unsupported themes
* Fix PHP notice in WPML module

= 1.0.4 =
* Fix translations, for real this time
* Add French translations (Thanks @datagitateur!)
* Fix PHP warning if WPML is activated
* Add filter around $headers array for all outgoing emails sent via this plugin

= 1.0.3 =
* Change text domain to 'gdpr-framework' to avoid conflict with other plugins
* Add Portuguese translation (Thanks @kativiti!)
* Add partial Estonian translation

= 1.0.2 =
* Fix T&C and Privacy Policy URLs on registration and comments forms
* Add basic styling and separate stylesheet for Privacy Tools page
* Allow disabling styles for Privacy Tools page via admin
* Add confirmation notice on deleting data via front-end Privacy Tools
* Change strings with 'gdpr-admin' domain back to 'gdpr'. Add context to all admin strings.

= 1.0.1 =
* Fix PHP notice on Privacy Tools frontend page if logged in as admin

= 1.0.0 =
* Initial release
