Privacy Policy

Draft for review. Placeholders in brackets must be completed before launch.

This Privacy Policy explains what personal information [Legal Company Name] collects when you use brandinthenews.com or order our press release service, why we collect it, who we share it with, and the rights you have.

1. Who we are

The data controller is [Legal Company Name], [Business Address]. Email [email protected] with any question about this policy.

2. What we collect

Order details: your name, email address, company or brand name, website, and the package and add-ons you choose.
Your release content: the notes, draft, logo, image or quote you send us about your announcement.
Payment information: payments are processed by our third-party payment processor. We see that a payment succeeded and limited billing details, but we never store full card numbers.
Messages: emails and form submissions you send us, including affiliate applications.
Technical data: IP address, browser and device type, pages viewed and referring site, collected through cookies.

3. How we use your information

We use it to write, edit and publish your release and produce your live-link report; to answer your questions; to take payment and keep accounting records; to send service messages such as a draft ready for approval; to improve our site and guides; and to meet legal and tax obligations and prevent fraud. We do not sell your personal information, and we do not send marketing email to people who have not asked for it.

Publishing partners: the news sites in our network receive your release content — headline, body, company details, quotes and images — so they can publish it. Your email address and payment details are not sent to them.
Service providers: our payment processor, email and hosting providers, and analytics tools, which process data for us under contract.
Advisers and authorities: accountants, lawyers or insurers where needed, and law enforcement or regulators where the law requires it.
A buyer or successor: if our business is sold or merged, customer data may transfer with it.

5. Cookies and analytics

We use cookies that are necessary for the site to work, and analytics cookies that show which pages people read and how they arrived. You can block or delete cookies in your browser settings; some parts of the site, including checkout, may not work without the essential ones.

6. How long we keep it

We keep order and billing records as long as needed to provide the service and meet tax and accounting rules — currently [retention period to be confirmed] — and longer where the law requires. Published releases are kept as a record of the coverage we delivered. When data is no longer needed we delete it or make it anonymous.

7. Your rights

Depending on where you live, you may be able to ask for a copy of the information we hold about you, have it corrected or deleted, object to or restrict how we use it, transfer it to another provider, or withdraw consent where our use relies on consent. Email [email protected] and we will respond within 30 days, after confirming your identity.

8. California residents (CCPA/CPRA)

California residents can ask what categories of personal information we collect, request deletion or correction, and opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioural advertising. You may use an authorised agent, and we will not discriminate against you for exercising your rights.

Where GDPR or UK GDPR applies, we rely on these legal bases: contract (writing and publishing your release, taking payment), legitimate interests (improving our service, preventing fraud, basic analytics), consent (optional cookies and marketing), and legal obligation (tax and accounting records). Where personal data leaves the UK or EEA we use appropriate safeguards such as standard contractual clauses. You can complain to your local supervisory authority, though we would rather resolve your concern first.

10. Security

We use encryption in transit, access controls and restricted internal access to order data. No method of transmission or storage is completely secure, so we cannot promise absolute security.

11. Children

Our service is for businesses and their representatives. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law, and we will update the date shown on this page when we do. Material changes will be described here before they take effect.

13. Contact

Questions about this policy or your data: [email protected]. See also our Terms of Service, the Help Center or contact us.