1. Data we collect
- Account data — name, email, phone, account type (individual/agency), agency name.
- Order data — content you submit (articles, images, brand details), target publications, payment records.
- Technical data — IP address, browser, device, pages visited, basic analytics.
- Communications — emails, support tickets, chat transcripts.
We do not knowingly collect data from anyone under 18.
2. Why we collect it
- To provide the service (process orders, deliver placements, send invoices).
- To verify account holders and prevent fraud.
- To improve the product and meet legal obligations.
- To send transactional and (with consent) marketing email.
3. Lawful basis (UK / EEA)
- Contract — to fulfil your order.
- Legitimate interests — fraud prevention, product analytics.
- Consent — marketing emails, optional cookies.
- Legal obligation — tax records, complying with lawful requests.
4. Sharing
We share the minimum necessary data with:
- The chosen publication or magazine to fulfil your order.
- Payment processors and cloud infrastructure (data hosted in EU / US regions).
- Authorities where required by law (US courts, UK ICO/courts, Pakistan FIA under PECA, Indian authorities under the IT Act / DPDP Act).
We do not sell your personal data.
5. Your rights
- USA (CCPA/CPRA, California residents) — right to know, delete, correct, opt-out of sale/share, non-discrimination.
- UK & EU (UK GDPR / GDPR) — access, rectification, erasure, restriction, portability, objection.
- Pakistan (PECA, draft PDP Bill) — request access and removal of personal data.
- India (DPDP Act 2023) — access, correction, erasure, grievance redressal, nominate a representative.
To exercise any right email privacy@p-r.media. We respond within 30 days.
6. Retention
We keep account data while your account is active and for up to 7 years after closure for tax/audit purposes. Order content is retained for 3 years after the placement. You can request earlier deletion at any time.
7. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is limited to staff with a need to know. We use Row-Level Security on our database and store passwords as salted hashes.
8. International transfers
Personal data may be transferred to the USA, the EU, the UK, India and Pakistan where our infrastructure or partners operate. Transfers rely on Standard Contractual Clauses or the UK addendum where required.
9. Cookies
We use strictly-necessary cookies for authentication and a minimal analytics cookie. You can disable non-essential cookies in your browser.
10. Contact
Data Protection contact: privacy@p-r.media. UK / EU users have the right to lodge a complaint with their supervisory authority (e.g. the UK ICO). Indian users may approach the Data Protection Board of India under the DPDP Act 2023.