Privacy Policy

Promotedly provides software that local businesses use to run promotions, collect customer contact details with consent, and send marketing messages. This policy applies to our marketing website, our application and the promotion pages we host on behalf of businesses.

Businesses

Our customers. They hold an account, configure campaigns, and decide what to collect and what to send. For the personal information of their own customers, the business is the controller and we act as their service provider or processor.

Consumers

People who claim a promotion, enter a giveaway, join a rewards program or book an appointment through a page we host for a business. We handle their information on that business's instructions.

If you claimed a promotion and want your details removed, you can contact us and we will act on it, but the business that ran the promotion is the party that controls that record and we will notify them.

From businesses using the platform:

• Account information: name, business name, email address, password hash, and role.
• Business profile: locations, opening hours, phone number, logo and brand colours.
• Billing information: plan, subscription status and the payment identifiers returned by our payment processor. We never receive or store full card numbers.
• Usage data: pages viewed in the application, campaigns created, features used, and diagnostic logs.

From consumers claiming a promotion:

• Contact details the business's campaign asks for, typically a name, email address and, where offered, a mobile number.
• Consent records: the exact disclosure text shown, the channel and purpose consented to, the timestamp, the page URL and a pseudonymised IP address.
• Promotion activity: which campaign was claimed, the reward issued, whether and when it was redeemed, and referral relationships.
• Optional submissions, such as a review video, where a campaign asks for one and the person agrees to it.
• Technical data: browser type, device type, approximate region derived from IP, and the referring page.

• To provide the service: hosting promotion pages, issuing rewards, sending the messages a business has configured, and reporting results back to that business.
• To keep the service secure: rate limiting, fraud and abuse detection, duplicate-claim prevention and audit logging.
• To bill businesses and enforce plan limits.
• To support businesses who contact us, and to notify them about material changes to the service.
• To comply with legal obligations, including retaining consent evidence for marketing messages.

We do not sell personal information, and we do not share it with third parties for cross-context behavioural advertising. We do not use consumer contact details collected by one business to market to them on behalf of another business, or on our own behalf.

Marketing messages sent through the platform come from the business whose promotion you claimed. We send them on that business's behalf and only where a consent record exists for the relevant channel.

• Email: every marketing email includes a working unsubscribe link. Unsubscribing suppresses further marketing email from that business immediately.
• Text messages: reply STOP to any message to stop all marketing texts from that business, or HELP for assistance. Consent is never a condition of a purchase.
• Transactional messages, such as a reminder for an appointment you booked, are separate from marketing consent.

Revoking consent is recorded permanently in our consent ledger together with the reason, so the suppression cannot be silently undone.

The business that ran the promotion

Receives the contact details, consent status and promotion activity of people who claimed its campaigns.

Infrastructure and database providers

Host the application and store its data under contract, with access limited to what operating the service requires.

Email and SMS providers

Deliver the messages a business sends, receiving only the recipient address or number and the message content.

Payment processor

Handles business subscriptions and card data directly. We receive only tokens and status information.

Analytics and error monitoring

Receive usage and diagnostic events, minimised so they do not include promotion contact details.

We may also disclose information where we are legally required to, or to protect the rights and safety of users, and we may transfer information as part of a merger or acquisition, in which case this policy continues to apply until it is replaced and you are notified.

• Business account and billing records: for the life of the account and then as required for tax and accounting purposes.
• Consumer contact records: until the business deletes them or closes its account, or until you ask us to delete them.
• Consent and suppression records: retained after deletion of the contact record, because they are the evidence that a message was permitted or must not be sent. These are kept in a minimised form.
• Diagnostic logs: a short rolling window, typically thirty days.

Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal information, to opt out of marketing, and not to be discriminated against for exercising those rights.

• California residents (CCPA/CPRA): rights to know, delete, correct and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined.
• EEA and UK residents (GDPR): rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority.
• All users: you can ask us to stop marketing to you at any time, through the unsubscribe link, by replying STOP, or by contacting us.

To exercise a right, email privacy@promotedly.com. We will verify your request and respond inside the period the applicable law allows. Businesses can export or delete their customer list from inside the application at any time.

We encrypt traffic in transit, hash passwords, pseudonymise IP addresses in the consent ledger, scope every database query to a single brand, and restrict internal access to what a role needs. No system is perfectly secure, so we also log access and monitor for unusual activity.

We will update this page when our practices change and revise the date at the top. If a change materially reduces your rights we will notify account holders directly before it takes effect.

Privacy enquiries: privacy@promotedly.com. General enquiries: hello@promotedly.com. Postal: Promotedly, 4651 Salisbury Road, Suite 400, Jacksonville, FL 32256, US.