Legal

Privacy policy

Last updated 12 October 2026

This policy explains how Popsall Ltd (company number 16953262, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE), which operates Pressmark, handles personal data. We are the controller of that data. Questions and requests: hello@pressmark.org.

1. What we collect

What you give us

• Your email address when you sign in, claim an entry, post a brief or request, send an enquiry, set up alerts or ask for a removal.
• What you submit: entry details (which may include a contact name, role or photo), briefs, offers, messages and related information such as a brand or website address.
• If you buy a paid service: billing details and a record of the purchase and subscription. Payments are handled by our payment provider, Stripe; we do not receive full card numbers.
• Anything you send us when you contact us.

What we collect automatically

• Technical data such as IP address, browser and device type, and the pages requested, used to run and secure the service.
• Usage measurement: our pages report views and form interactions (for example which fields of a form were used, never what was typed). These are linked to an identifier derived from your IP address and browser that changes every day, so we can count visitors without cookies or tracking you over time.
• Bot and abuse checks, which may examine technical signals from your browser.

What we get from other sources

• Information published on websites, including business contact details such as advertising or general contact addresses and contact forms, used to compile entries and to contact publishers about their entry.
• Information about websites (such as traffic estimates) and aggregate search performance data from third-party services. This is about websites, not individuals.

2. How we use it and why

• To provide the service you ask for: accounts, claims, briefs, requests, offers, enquiries, alerts and paid services (performing our contract with you, or taking steps at your request).
• To keep Pressmark accurate, safe and working: verifying ownership, moderating content, preventing spam, fraud and abuse, and measuring and improving the service (our legitimate interests).
• To tell publishers about their entry, including inviting them to claim it and passing on buyer interest in their website (our legitimate interests; you can opt out at any time).
• Service messages such as sign-in links, confirmations, notifications and digests you have set up.
• Marketing only where you have agreed to it. You can withdraw consent at any time using the unsubscribe link or by contacting us.
• Legal and accounting obligations, such as keeping records of payments, and to establish or defend legal claims.

We do not sell personal data.

3. Automated checks

We use automated tools, including AI models, to help assess entries, briefs, offers and messages, for example to categorise them or to detect spam or unsuitable content. If an automated check affects your entry, brief or offer and you disagree with the result, contact us and a person will review it.

4. Who sees it

• Other users, as the feature requires: entry details are public; briefs and requests are shown to relevant publishers without the buyer's email address; offers are shown to the buyer concerned; enquiries you send a publisher, including any contact details you include, are passed to that publisher so they can reply.
• Service providers who process data for us under contract: hosting, database and security; email delivery; AI model providers; link safety, search and website-data services; and, for paid services, payment processing. We can tell you more about a specific provider on request.
• Others where required: professional advisers, authorities where the law requires, or a buyer of our business or its assets.

5. International transfers

Some of our providers process data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK data protection law, such as adequacy regulations or approved contract clauses.

6. How long we keep it

We keep personal data only for as long as we need it for the purposes above: account and entry data while your account or entry is active and for a reasonable period afterwards; briefs, offers and messages while they are needed by the people involved and for our records; payment records for as long as tax law requires; usage measurement in pseudonymous or aggregate form. If you ask us not to contact you, we keep your address on a suppression list so we can honour that.

7. Cookies and similar storage

We use only cookies and browser storage needed to run the service: keeping you signed in, security, remembering choices you make, and saving a form you are filling in so it is not lost if you leave the page. Publishers' dashboards set a cookie so that their own visits to their entry are not counted in their statistics. We do not use advertising or cross-site tracking cookies. Our bot checks, and our payment provider's checkout pages, may use their own storage for security and to complete payment.

8. If we list your website or contact you

Entries describe websites and the businesses behind them, compiled from public information. If we hold business contact details for your website, they came from your website or a public source. You can claim your entry to correct it, tell us not to contact you, or ask for the entry to be removed through the removal form.

9. Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to its use (including objecting to direct marketing at any time), or transfer it, and you can withdraw any consent you have given. Email hello@pressmark.org; we may need to confirm your identity. Some rights have exceptions, for example where we must keep records by law. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to help first.

Pressmark is for businesses and is not intended for anyone under 18.

10. Security and changes

We use technical and organisational measures appropriate to the data we hold, including encryption in transit and storing sign-in tokens in hashed form. No system is completely secure. We may update this policy; the date above shows the latest version, and we will give notice of significant changes where appropriate.