Data Protection Policy

How Marketingly handles and protects your data

GDPR Compliant

Full compliance with European data protection regulations

Encrypted Data

AES-256 encryption for all data at rest and in transit

Transparent

Clear visibility into how your campaign data is processed

Secure Storage

Enterprise-grade infrastructure for platform data

1. Data We Collect

Account and Business Information

  • Name, email address, and contact details
  • Company name, industry, size, and business objectives
  • Account credentials and platform configuration preferences

Campaign and Marketing Data

  • Campaign performance metrics and conversion analytics
  • Audience targeting configurations and segmentation data
  • Automation workflow settings and operator communications

2. Legal Basis for Processing

We process your data under the following legal bases:

  • Contract Performance: To provide AI marketing infrastructure and operator services
  • Legitimate Interest: To improve platform systems, prevent fraud, and enhance campaign performance
  • Consent: For optional marketing communications and non-essential cookies
  • Legal Obligation: To comply with applicable data protection and financial regulations

3. Data Security Measures

Technical Safeguards

  • AES-256 encryption at rest and in transit
  • Regular penetration testing and security audits
  • Multi-factor authentication for all accounts
  • Isolated infrastructure with secure data centres

Organisational Measures

  • Data protection training for all team members
  • Role-based access controls across the platform
  • Incident response and breach notification procedures
  • Regular compliance reviews and policy updates

4. Data Retention

We retain data only as long as necessary to provide our services:

  • Account data: Duration of subscription plus 7 years for regulatory compliance
  • Campaign data: 3 years from last campaign activity or until consent withdrawal
  • Analytics data: Anonymised after 26 months

5. Your Data Rights

Under GDPR, CCPA, and other applicable data protection laws, you have the right to:

  • Access your personal data
  • Rectify inaccurate information
  • Request erasure of your data
  • Restrict certain processing activities
  • Request data portability
  • Object to processing
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

6. International Data Transfers

When we transfer personal data outside the EEA, we ensure adequate protection through approved mechanisms such as Standard Contractual Clauses (SCCs), adequacy decisions, or binding corporate rules.

7. Contact Our Data Protection Officer

For data protection questions or to exercise your rights, contact our Data Protection Officer at dpo@marketingly.com.