Privacy Policy
A lot of companies have hard-to-read privacy policies that go on for pages and are coded in legal-ese. Privacy is at the heart of what we do, so we've endeavoured to produce a privacy policy that's easy-to-read.
That doesn't mean we can't improve. If you have a specific question on the policy, please do contact our Data Protection Officer at omar@supermarketer.co.uk or our EU representative as per Article 27, GDPR at krzysztof@supermarketer.co.uk.
We are registered with the ICO with number ZB709326.
Who we are
We are SuperMarketer Limited, we help you own your data. SuperMarketer Limited is the Data Controller for the personal data described in this policy.
The data we hold about you, and how we use it:
Setting up an account
We require specific data if you set up a SuperMarketer account. Our legitimate interest in obtaining this data is to set up an account in your name.
The specific data fields we will request are:
- First name, last name and email address: So we know who you are and can contact you
Information we process for internal verification purposes
To ensure the safety of your data and prevent fraudulent activity, we need to be able to verify your identity when necessary. Please note, this verification is internal and does not refer to the verification services we perform on behalf of your partners. To do this, we may need the following:
- Phone number or email: We may use third party services to send you a verification code through your registered email address or phone number to determine if the contact details provided are valid.
Information we collect if we communicate with you
If you contact us either via email or through our support channels, we collect the following information so we can respond:
If we contact you, it will only be to respond to a customer service query.
- Email address, contents of your email and associated attachments
- Contents of any feedback you send to us (e.g. reporting an issue or filling out a feedback form)
Information we process to understand how our products are used and make improvements
- Track usage of our products and services: We collect metrics such as launch time, IP address and hang rate to assess app performance
- Crash reporting: We monitor our products through anonymous crash reports, these may include device and hardware information.
- Improve our bot-detection: When you choose to use our verification or fraud-checking features, we may analyse patterns in the data you import into SuperMarketer (for example behavioural signals or activity trends) to improve the accuracy of these checks. This does not involve training machine-learning models on your personal data. Any improvements are made through rule-based or statistical methods to ensure that our verification and fraud-detection features work reliably for users who choose to use them. This processing is carried out under our legitimate interest in providing accurate and reliable verification and fraud-prevention services.
We use cookies on our website and app
We use cookies and similar technologies to operate the SuperMarketer website and to understand how users interact with it.
Essential cookies: These are required for the site to function (for example, keeping you logged in and supporting basic security). These do not require your consent.
Analytics cookies: We use Google Analytics and Heap Analytics to understand how people use our website and to help us improve its performance. These tools collect information such as which pages are visited, how long users stay on the site, and interactions with page elements.
Analytics cookies are optional and are only set with your consent. You can withdraw your consent at any time through your browser or cookie settings.
You can block or delete cookies by changing your browser settings, although this may affect how the site works.
Information that is processed when you request your data
If you wish and ask us to, we will request your data from data controllers such as YouTube or LinkedIn. We facilitate the secure transfer of user-selected data to our platform. We will not access this data until you authorise it.
LinkedIn Data
We enable users to request and store their LinkedIn data. To do this, we ask for your authorisation to connect with LinkedIn and transfer your data into your SuperMarketer account. We cannot access this data until you authorise it.
The categories of LinkedIn data we process may include:
- Basic profile information
- Activity or interaction information
- General account information
We never request data such as passwords or bank details and we do not share any data that identifies you with third parties for their own use.
My Google Data
We enable users to request and store their Google data. To do this, we ask for your authorisation to connect with Google and transfer your data into your SuperMarketer account. We cannot access this data until you authorise it.
The categories of data we process may include:
- Information about videos you have watched
- Timestamps associated with those views
We never request data such as passwords or bank details and we do not share any data that identifies you with third parties for their own use.
Booking.com
We enable users to request and store their Booking.com data. To do this, we ask for your authorisation to connect with your account and transfer your data into your SuperMarketer account. We cannot access this data until you authorise it.
The categories of Booking.com data we process may include:
- Booking or travel information
- General trip details
- General account information
We never request data such as passwords or bank details and we do not share any data that identifies you with third parties for their own use.
How we comply with Google’s policies
We comply with the Google API Services User Data Policy, including the Limited Use requirements. Information collected through your use of Google’s API is used solely to provide and improve the features you choose to use within the SuperMarketer platform — such as identity verification, profiling, and enabling you to participate in research projects where applicable.
Data we share with your partners and how your privacy is protected
We generate revenue by providing verification and insight services using pseudonymised data that you choose to share with approved partners.
When you choose to request your data from other data controllers (i.e. Google), we undertake the following steps:
- We share the details you submit during the request process with the relevant data controller so they can identify your data set in their records and initiate the transfer.
- Your data is then transferred to your SuperMarketer account where it is processed and pseudonymised.
- If you have consented to verify yourself or provide your data to a partner, we provide pseudonymised data to them linked to an encrypted ID that does not reveal your identity. We do not share any data that identifies you.
The pseudonymised data we generate from your requested data may include outputs such as
- Bot score (based on LinkedIn or YouTube activity)
- Verification checks (e.g., matching your name or email to platform records)
- Data enrichment (e.g., languages or endorsements).
In some cases, a partner you’ve approved may provide us with limited personal data (such as your name or email address) to help verify that the data you’ve shared with us matches their records. We compare this information to the data you’ve requested from platforms, and return pseudonymised verification outputs to the partner. These outputs are always linked to a pseudonymised ID and never include your personal data.
Who we share your data with (service providers)
We only share your data with trusted service providers who help us operate SuperMarketer — for example, cloud hosting providers. These providers can only process your data on our instructions and are not permitted to use it for their own purposes.
How do you keep my data secure?
SuperMarketer prioritises safeguarding your data from unauthorised access, alteration, disclosure or destruction including the following methods:
- Using encryption to keep your data private while in transit
- Utilising a number of distinct and separate data stores when processing your data. Each user's sensitive data retrieved from third party platforms (e.g. YouTube watch history) is always stored in a separate data store from that user's personal data (e.g. name, email).
- Maintaining robust security procedures to protect the confidentiality of your personal data. We regularly review these measures and update them where necessary to protect against unauthorised access to our systems.
Where is your data stored?
SuperMarketer servers where your data is stored are based inside the UK and EU. We do not transfer your personal information outside of the UK and the EU.
How long do you keep my data for?
We hold on to your personal data for as long as you have an account with us. If you decide to close your account, we keep your data for up to 6 months on our servers. If you decide to close your account your personal data will not be shared with anyone.
We may retain pseudonymised derived data (such as fraud-detection signals or aggregated statistics) for longer periods, as this data does not identify you.
Additionally, you have the right at any time to close your account and also stipulate that we delete your personal data. You can do so by contacting us at technical@supermarketer.co.uk.
Your rights under GDPR
As our users, you have rights and protections under GDPR, including the right to:
- access the personal data we hold about you;
- view our policies (like this one), which govern how, and why, we use your data;
- request us to rectify inaccurate data we hold about you;
- object to the processing of your data;
- withdraw your consent to processing your data;
- request us to erase data we hold about you;
- request us to transfer your personal data to a third party;
- request us to restrict how we process your data.
How to raise a concern
If, for any reason you believe there has been a violation of your rights under the GDPR, and the Data Protection Act, you have the right to lodge a complaint with the supervisory authority, in the UK, this is the Information Commissioner's Office who can be contacted at:
- Telephone: 0303 123 1113
- Website: ico.org.uk/make-a-complaint/
If you live within the EU, you may also contact our EU privacy representative as per GDPR, Article 27 at krzysztof@supermarketer.co.uk who will raise this issue with the relevant EU supervisory authority.
