Who is responsible for your data
[to be added before launch], [to be added before launch], is the controller of your personal data. Contact: [email protected].
What we collect
- Your email address, so we can tell you about your order and your ad.
- Your ad: the image, title and link, and the squares you chose.
- Payment records: Stripe processes your payment and tells us the amount and a payment reference. We never receive your card details.
- Security data: Cloudflare checks that visitors to the buy page are human (Turnstile) and protects the site from attacks, which involves processing your IP address and browser details.
Your ad’s image, title and link are public once approved. Your email address is never shown on the site.
Why we use it (lawful basis)
- To carry out our contract with you: taking payment, reviewing and showing your ad, refunds and emails about your order.
- Legitimate interests: keeping the site secure, preventing fraud and abuse, and re-checking links on the grid.
- Legal obligations: keeping financial records.
We don’t send marketing emails and we don’t sell your data.
Where it is stored
Our database, files and website run on Microsoft Azure in the United States (Central US region). Stripe and Cloudflare may also process data outside the UK. These transfers are protected by the providers’ data processing terms, including the UK International Data Transfer Addendum or the UK–US data bridge where it applies.
Who we share it with
- Microsoft (hosting), Stripe (payments), Cloudflare (security and delivery) and our email provider, only as needed to run the site.
- Authorities, if the law requires it.
How long we keep it
- Your ad and email address: for as long as your ad is on the grid.
- Payment and order records: six years, for tax purposes.
- Unfinished orders (squares held but not paid for): up to 12 months, to prevent abuse.
Cookies
We don’t use advertising or analytics cookies, so there’s no cookie banner. Cloudflare may set strictly necessary cookies for security, and signing in to the admin area uses a session cookie.
Your rights
You can ask to see, correct or delete your data, object to how we use it, or ask us to restrict it or send it to you. Email [email protected]. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.