Your cart is empty
Last updated: 1 April 2025
| Data type | Legal basis |
|---|---|
| Account & subscription data | Contract performance (Art. 6(1)(b) GDPR) |
| Scan & analytics data | Legitimate interest — service operation and improvement |
| Feedback messages | Legitimate interest — business record keeping |
| Audit tool data | Legitimate interest — fraud prevention and rate limiting |
| Payment data | Contract performance (processed by Stripe) |
| Data type | Retention period |
|---|---|
| Account data | Retained while active + 30 days after cancellation, then deleted |
| Scan data | 12 months rolling — older records are permanently deleted |
| Feedback / review messages | Indefinitely (business records); contact us to request deletion |
| Payment data | Held by Stripe per their data retention policy; not stored by us |
| Audit tool records | 90 days, then deleted |
| Session tokens | Deleted on sign-out or expiry (30 days) |
Under the GDPR you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
| Processor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription management | USA (EU data transfer agreement in place) |
| Amazon Web Services (AWS S3) | Product image storage | EU (eu-west-1) |
| SMTP provider (Resend / own SMTP) | Transactional email delivery | EU |
| Google Cloud (Places API) | Business search and location data | USA (EU data transfer agreement in place) |
We do not store card numbers, bank details, or full payment information on our servers. All payment data is collected and stored by Stripe, Inc. You can view Stripe’s privacy policy at stripe.com/privacy.
Data controller: ABL Media Group
Data protection enquiries: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.