Privacy Policy

1. Introduction

Paid2Marketing ("we," "our," or "us") operates the website at paid2marketing.com and provides digital marketing and business communication services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Services or visit our website.

We process personal data in accordance with the General Data Protection Regulation ("GDPR") where applicable, and other applicable data protection laws. By using our Services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account data: Name, email address, company name, phone number, and password when you register.
• Billing data: Payment card details (processed securely by our payment processor — we do not store raw card numbers), billing address, and transaction history.
• Profile data: Any additional information you add to your account profile.
• Communications: Messages, support requests, and feedback you send us via email, contact forms, or live chat.
• Campaign content: Contact lists, message templates, email content, and other marketing materials you upload to the platform.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, actions performed, time and duration of sessions.
• Device data: IP address, browser type and version, operating system, device type, and screen resolution.
• Log data: Server logs including access times, error messages, and API call records.
• Cookies and tracking technologies: See Section 7 (Cookies & Tracking) for full details.

2.3 Third-Party Data

We may receive information about you from:

• Payment processors (transaction status and billing details)
• Social media platforms (if you connect social accounts to our platform)
• Analytics providers (aggregated usage statistics)

3. How We Use Your Information

We use your personal data for the following purposes:

• Service delivery: To create and manage your account, process transactions, and provide the Services you have subscribed to.
• Communication: To send you transactional emails (receipts, account alerts, security notifications) and respond to your support queries.
• Marketing: To send you product updates, newsletters, and promotional offers where you have opted in. You can unsubscribe at any time.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of our Services.
• Security and fraud prevention: To monitor for suspicious activity, enforce our Terms, and protect the security of our platform and users.
• Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and enforce our legal rights.

Our legal bases for processing personal data include: the performance of a contract (delivering the Services you subscribed to), compliance with legal obligations, your consent (for marketing), and our legitimate interests (security, platform improvement, and fraud prevention).

4. Data Sharing & Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who assist in delivering our Services (e.g., cloud hosting, payment processors, email delivery infrastructure). These providers are contractually bound to process data only on our instructions and in accordance with this policy.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity, subject to the same privacy protections.
• Legal requirements: We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.
• With your consent: We may share your data for any other purpose with your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. Specifically:

• Account data: Retained for the duration of your subscription and for up to 2 years after account closure for legal and accounting purposes.
• Campaign data: Retained according to your plan's data retention period (Basic: 30 days, Pro: 1 year, Enterprise: unlimited), or until you delete it.
• Billing records: Retained for 7 years in compliance with financial record-keeping requirements.
• Support communications: Retained for 3 years from the date of the last interaction.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to our processing of your data based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@paid2marketing.com. We will respond within 30 days. If you are unhappy with our response, you have the right to lodge a complaint with your national data protection authority.

7. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform. Please see our Cookie Policy for full details on the types of cookies we use, their purpose, and how to manage your preferences.

In summary, we use cookies for:

• Authentication and session management (essential)
• Remembering your preferences such as theme and currency (functional)
• Analysing platform usage and performance (analytics)
• Displaying relevant marketing content (marketing, where consented)

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Regular security audits and penetration testing
• Access controls limiting employee access to personal data on a need-to-know basis
• Secure deletion procedures for data no longer required

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Services at your own risk. Please notify us immediately if you suspect any unauthorised access to your account.

9. International Data Transfers

Paid2Marketing is based in Sri Lanka. If you access our Services from outside Sri Lanka, your data may be transferred to and processed in Sri Lanka or other countries where our service providers operate.

When transferring data from the European Economic Area (EEA) to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives an equivalent level of protection.

10. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@paid2marketing.com and we will take prompt steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Sending an email to the address associated with your account
• Posting a notice on our website with the updated "Last Updated" date

We encourage you to review this policy periodically. Your continued use of the Services after any changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our team:

• Email: support@paid2marketing.com
• Company: Paid2Marketing
• Location: Sri Lanka