Privacy Policy

1. Who We Are

EndorsementWall.com is operated by Industrial Strategic Ltd, a company registered in Scotland.

• Registered address: 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland, UK
• Company number: SC685479
• VAT number: GB 471932184
• Contact: +44 (0)131 510 2007
• Email: privacy@endorsementwall.com

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Industrial Strategic Ltd is the data controller.

2. What Data We Collect

2.1 Campaign Managers (Account Holders)

• Name, email address, and password (hashed)
• Organisation/campaign details you provide
• Payment information (processed securely by our payment provider; we do not store card details)
• Usage data and analytics

2.2 Endorsers (People Submitting Endorsements)

• First name, last name, email address
• Location (optional)
• Endorsement content (text, photo, video, or audio)
• Email verification records

2.3 Website Visitors

• IP address, browser type, device information
• Pages visited and interactions (via cookies — see our Cookie Policy)

3. How We Use Your Data

4. Data Sharing

We do not sell your personal data. We may share data with:

• Campaign managers — endorser details (name, location, endorsement content) are shared with the campaign they endorsed
• Service providers — hosting, email delivery, payment processing, and AI moderation services acting as our data processors
• Law enforcement — where required by law or court order

Campaign managers who export endorser data via CSV are responsible for handling that data in compliance with applicable data protection laws.

5. International Transfers

Our servers are located in the EU/UK. Where data is transferred outside the UK/EEA (e.g. to service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

6. Data Retention

• Account data: retained while your account is active, plus 12 months after deletion
• Endorsement data: retained while the campaign is active; deleted within 30 days of campaign closure
• Email verification codes: automatically expire and are deleted after 24 hours
• Analytics data: aggregated and anonymised after 26 months

7. Your Rights

Under the UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent

To exercise any of these rights, email privacy@endorsementwall.com or write to us at the address above. We will respond within 30 days.

8. US Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected and how it is used
• Right to delete your personal information
• Right to opt-out of the "sale" or "sharing" of personal information — we do not sell your data
• Right to non-discrimination for exercising your rights

To make a request, email privacy@endorsementwall.com with "CCPA Request" in the subject line.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security.

10. Children

Our services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe a child has submitted data through our platform, please contact us immediately.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Tel: 0303 123 1113

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance.