Legal

Privacy policy

Operated by Popsall Ltd (United Kingdom), trading as commissionedcode.co.uk · contact: hello@pressmark.org

What we collect and why

• Email addresses you give us to: claim a listing, log in, post a brief, subscribe to alerts, send an enquiry, or request a takedown. Used solely to operate that feature (confirmation links, offer notifications, brief delivery). We never sell or share address lists.
• Brief and offer content you submit, shown only to the parties the feature implies: briefs go to matching claimed publishers; offers go to the buyer who posted the brief. A buyer's email address is never shown to publishers.
• Server-side usage counts (page views, search impressions, clicks) aggregated per listing per day. We use no client-side analytics, no tracking cookies and no third-party trackers.
• Operational cookies: a session cookie for logged-in publishers only. No advertising or cross-site cookies.

Marketing (optional, opt-in only)

When posting a brief you can tick an optional box to receive occasional Pressmark updates and relevant publisher offers. This is consent-based: the box is never pre-ticked, consent is recorded only after you confirm your email address, every such email carries an unsubscribe link, and withdrawing consent takes effect immediately. Publisher offers sent this way are sent by Pressmark on the publisher's behalf — your address is never given to publishers or any third party. If you don't tick the box, your address is used solely to operate the feature you requested.

Legal bases

We process data to perform the service you request (claims, briefs, offers, alerts), and under legitimate interest for register integrity, abuse prevention and aggregate service statistics. Marketing-style messages to publishers about their own listings are sent on a legitimate-interest basis with a working unsubscribe in every email.

Storage, processors and retention

Data is stored with Cloudflare (hosting and database) and email is delivered by Resend; both act as processors under their standard data-processing terms. Login and confirmation tokens are stored hashed. Expired tokens are pruned automatically. Suppressed addresses are kept (address only) so we can honour the suppression. Briefs and offers are retained while the register operates so both sides keep their record; you can ask us to delete yours at any time.

Your rights

Under UK GDPR you can request access, correction, deletion, restriction or portability of your personal data, and object to processing, by emailing hello@pressmark.org. You can complain to the Information Commissioner's Office (ico.org.uk). Listings describe websites, not private individuals; publishers can correct their entry by claiming it or have it removed via the takedown form.