Introduction

This Privacy Policy explains how [Company legal name] (“WhiteLabelPR”, “we”, “us”) collects, uses and shares personal data when you visit whitelabelpr.io, create an account or use our white label PR platform (the “Service”). Under UK and EU data protection law we are the controller of the personal data described here, except where section 3 says otherwise.

1. Data we collect

Account data. Your name, email address, login details, company name, and the branding and settings you add to your storefront. If you sign up with Apple or Google, we receive the basic profile information you allow that provider to share with us.

Billing data. Your plan, billing contact details, tax information and transaction history. Payments are handled by our payment processor, [Payment processor name], which collects your card details directly.

Order and content data. Press releases, images, company information and contact details submitted with orders, by you or by your clients.

Usage data. Log data, device and browser information, IP address, pages viewed and actions taken in the dashboard.

Cookies. We use essential cookies to keep you signed in and remember your preferences and, with your consent where required, analytics cookies to understand how the site is used. You can control cookies through your browser settings.

Contact-form submissions. When you use our contact form, subscribe to updates or email us, we collect the details you send, such as your name, email address, phone number, country and message.

2. How we use data and our legal bases

We use personal data to provide and secure the Service, process orders and payments, give support, send service messages, improve the product, send marketing where permitted and comply with the law.

Under the UK GDPR and the EU GDPR we rely on: contract, to set up your account, process orders and bill you; legitimate interests, to secure and improve the Service, prevent abuse, respond to enquiries and tell business customers about our services; consent, for non-essential cookies and for marketing emails where consent is required, which you can withdraw at any time; and legal obligation, for tax, accounting and lawful requests from authorities.

3. Resellers and their clients

Resellers use the Service to serve their own clients. Where a reseller uploads or collects personal data about its clients through its storefront, the reseller is the controller of that data and we process it on the reseller’s behalf as a processor. If you are a client of a reseller, please contact that reseller first with any question about your data.

4. Who we share data with

Processors. Service providers that act on our instructions, such as hosting, payment processing, email delivery, analytics and customer support tools.

Distribution partners. PR providers, distribution partners and publishers, to the extent needed to fulfil the orders you place. Press releases are intended for publication, so any personal data included in a release, such as a named media contact, will become public.

Others. Professional advisers, authorities where the law requires it, and a buyer or successor if our business is merged, acquired or sold. [We do not sell personal data.]

5. Retention

We keep account data for as long as your account is open and for [Retention period] afterwards, billing records for as long as tax and accounting law requires, contact-form submissions for [Retention period] and usage logs for [Retention period]. Content published through distribution partners may remain publicly available on third-party sites after your account is closed.

6. International transfers

We have teams in the United Kingdom and the United States and use service providers in other countries, so your data may be processed outside the country where you live. Where we transfer personal data out of the UK or the European Economic Area, we rely on adequacy decisions or on appropriate safeguards such as the European Commission’s standard contractual clauses and the UK International Data Transfer Addendum.

7. Security

We use technical and organizational measures designed to protect personal data. No online service can be completely secure, so please use a strong, unique password and tell us straight away if you suspect unauthorized access to your account.

8. Your rights

UK GDPR and EU GDPR. You have the right to access your personal data, to have it corrected or erased, to restrict or object to our use of it, including for direct marketing, to receive it in a portable format and to withdraw consent. You can also complain to the Information Commissioner’s Office in the UK or to your local supervisory authority in the EEA.

CCPA. If you are a California resident, you have the right to know what personal information we collect, use and disclose, to have it deleted or corrected, to opt out of any sale or sharing of personal information, and not to be discriminated against for using these rights. [We do not sell personal information or share it for cross-context behavioral advertising.]

To use any of these rights, email [email protected]. We may need to verify your identity, and we will reply within the time limits set by law.

9. Children

The Service is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date, and we will tell you about material changes by email or in your dashboard.

11. Contact

The controller is [Company legal name], [Registered address]. For any privacy question or request, email [email protected] or use our contact page. [Data protection officer or UK / EU representative details, if applicable.]