Privacy Policy

1. Who is responsible

The data controller is In Plain English Ltd (“we”, “us”, “our”), operating the dotdotPR website and marketplace. For privacy enquiries, email hello@dotdotpr.com.

2. Data we collect

Depending on how you use the Service, we may process:

• Account and profile data (name, email, company, role preferences)
• Order and communication data (placement details, messages, support enquiries, contact form submissions)
• Payment-related metadata (transaction status, invoices). Card and PayPal payment details are handled by payment processors — we do not store full card numbers
• Technical and usage data (IP address, device/browser information, pages viewed, approximate location derived from IP)
• Analytics data via Google Analytics where enabled on the website

3. How we use data

We use personal data to:

• Provide, operate, and improve the Service
• Create and manage accounts and orders
• Process payments and send transactional emails
• Respond to sales, support, and publisher enquiries
• Maintain security, prevent abuse, and meet legal obligations
• Understand website usage and improve marketing pages

4. Lawful bases (UK GDPR)

We process personal data where necessary to perform a contract with you (or take steps at your request before a contract), where we have a legitimate interest in operating and improving a commercial marketplace and website (balanced against your rights), where we must comply with a legal obligation, or where you have given consent (for example certain cookies or marketing communications, where used).

5. Sharing

We share data with service providers who help us run the Service, including:

• Hosting and database providers (including Supabase)
• Payment processors (Stripe and PayPal)
• Email delivery providers (including notify.cx)
• Analytics providers (Google Analytics, where enabled)

We may also share information with publishers insofar as needed to fulfil placements you order, and where required by law or to protect rights and safety. We do not sell your personal data.

6. International transfers

Some providers may process data outside the United Kingdom. Where that happens, we take appropriate steps consistent with UK data protection law, such as relying on adequacy decisions or standard contractual clauses where required.

7. Retention

We keep personal data only as long as needed for the purposes above, including to maintain accounts, complete orders, meet accounting and legal requirements, and resolve disputes. Retention periods vary by data type; when data is no longer needed we delete or anonymise it where practicable.

8. Cookies and similar technologies

We use necessary cookies and similar technologies to operate the Service (for example authentication and security). We may also use analytics tools such as Google Analytics to understand how the website is used. You can control cookies through your browser settings. Blocking some cookies may affect site functionality.

9. Your rights

Under UK GDPR you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability, where applicable. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO). To exercise rights, contact hello@dotdotpr.com.

10. Children

The Service is directed at businesses and professionals. We do not knowingly collect personal data from children under 16.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date on this page will change when we do. Continued use of the Service after an update means you acknowledge the revised policy.

12. Contact

Privacy questions: hello@dotdotpr.com. Controller: In Plain English Ltd, operating dotdotPR.