PRIVACY POLICY

Last updated January 24, 2025

This Privacy Policy describes how BlogRolly Ltd ("Company", "we", "us", or "our") collects, uses, and discloses your personal information when you visit or use our website https://blogrolly.com (the "Site") and our related services (collectively, the "Services").

INFORMATION WE COLLECT
HOW WE USE YOUR INFORMATION
HOW WE SHARE YOUR INFORMATION
COOKIES AND TRACKING TECHNOLOGIES
DATA RETENTION
DATA SECURITY
YOUR PRIVACY RIGHTS
CHILDREN'S PRIVACY
INTERNATIONAL DATA TRANSFERS
UPDATES TO THIS POLICY
CONTACT INFORMATION

1. INFORMATION WE COLLECT

Information You Provide to Us

We collect information you provide directly to us, including:

Account Information: When you create an account, we collect your email address and any display name you choose to provide.
Blog Submissions: When you submit a blog for inclusion in our directory, we collect the blog URL, title, description, category, and any additional information you provide.
Communication: When you contact us via email or our contact forms, we collect the information you provide in those communications.
Payment Information: When you purchase premium services, our payment processor (Stripe) collects your payment information. We do not store full payment card details on our servers.

Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

Usage Information: Information about how you interact with our Services, including pages viewed, links clicked, and features used.
Device Information: Information about your device, including IP address, browser type, operating system, and device identifiers.
Analytics Data: We use analytics services (Google Analytics, Umami) to understand how our Services are used.

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

Provide, maintain, and improve our Services
Process blog submissions and maintain our directory
Create and manage your account
Process payments for premium services
Send you service-related communications
Respond to your comments, questions, and customer service requests
Analyze usage patterns and improve user experience
Prevent fraud and enhance security
Comply with legal obligations

We may share your information in the following circumstances:

Public Directory: Blog information you submit (title, description, URL, category) is displayed publicly in our blog directory.
Service Providers: We share information with trusted third-party service providers who assist us in operating our Services, including:
- Supabase (database and authentication services)
- Stripe (payment processing)
- Resend (email services)
- Google Analytics and Umami (analytics)
- Mailchimp (email marketing, with your consent)
Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
Business Transfers: In connection with any merger, sale, or transfer of assets, your information may be transferred as part of that transaction.
Consent: We may share information with your explicit consent.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to:

Remember your preferences and settings
Authenticate users and prevent fraud
Analyze site usage and performance
Provide personalized content and features

You can control cookies through your browser settings, but some features of our Services may not function properly if you disable cookies.

5. DATA RETENTION

We retain your personal information for as long as necessary to:

Provide our Services to you
Comply with legal obligations
Resolve disputes and enforce agreements

Specifically:

Account information is retained while your account is active and for 2 years after account deletion
Blog submissions remain in our directory unless you request removal
Analytics data is retained according to our analytics providers' retention policies
Communication records are retained for 3 years for customer service purposes

6. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

For EU/UK Residents (GDPR/UK GDPR)

Access: Right to request access to your personal information
Rectification: Right to correct inaccurate personal information
Erasure: Right to request deletion of your personal information
Portability: Right to receive your personal information in a portable format
Restriction: Right to restrict processing of your personal information
Objection: Right to object to processing of your personal information
Withdrawal of Consent: Right to withdraw consent where processing is based on consent

For California Residents (CCPA/CPRA)

Right to know what personal information we collect and how it's used
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

Exercising Your Rights

To exercise these rights, please contact us at hello@blogrolly.com. We will respond to your request within the timeframes required by applicable law.

8. CHILDREN'S PRIVACY

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. INTERNATIONAL DATA TRANSFERS

BlogRolly Ltd is based in the United Kingdom. If you are accessing our Services from outside the UK, please be aware that your information may be transferred to, stored, and processed in the UK and other countries where our service providers operate.

For EU residents, we ensure that any international transfers comply with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make changes, we will:

Update the "Last updated" date at the top of this policy
Notify you by email (to the email address associated with your account) of any material changes
Post the updated policy on our website

Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.

11. CONTACT INFORMATION

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

BlogRolly Ltd
20 Wenlock Road
London, N1 7GU
United Kingdom
Phone: +44 (0) 7796439429
Email: hello@blogrolly.com

Data Protection Officer

For data protection inquiries, you can reach us at hello@blogrolly.com with "Data Protection" in the subject line.

Supervisory Authorities

If you are in the EU or UK and have concerns about our data processing that we cannot resolve, you have the right to lodge a complaint with your local supervisory authority:

UK: Information Commissioner's Office (ICO) - https://ico.org.uk/
EU: Contact your local Data Protection Authority

LEGAL BASIS FOR PROCESSING (EU/UK RESIDENTS)

We process your personal information based on the following legal bases:

Contract: To provide our Services and fulfill our contractual obligations
Legitimate Interest: To improve our Services, prevent fraud, and communicate with you
Consent: For marketing communications and non-essential cookies (where required)
Legal Obligation: To comply with applicable laws and regulations

THIRD-PARTY SERVICES

Our Services integrate with third-party services that have their own privacy policies:

Supabase: https://supabase.com/privacy
Stripe: https://stripe.com/privacy
Google Analytics: https://policies.google.com/privacy
Resend: https://resend.com/legal/privacy-policy
Mailchimp: https://mailchimp.com/legal/privacy/

We encourage you to review these privacy policies to understand how these services handle your information.