CounterPress Media

Privacy Policy

CounterPress Media Ltd is the data controller for the platform and all affiliated outlet services. We are committed to protecting your privacy and complying with UK data protection laws.

Contact details

Email: [email protected]

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery:

  • Names and contact details
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Information relating to loyalty programmes
  • Website user information (including user journeys and cookie tracking)
  • Information relating to compliments or complaints
  • Information relating to sponsorship

We collect or use the following information for the operation of customer accounts and guarantees:

  • Names and contact details
  • Payment details
  • Purchase history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences

We collect or use the following information for service updates or marketing purposes:

  • Names and contact details
  • Marketing preferences

Lawful bases

Our lawful bases for collecting or using personal information to provide services and goods are:

  • Contract
  • Legal obligation

Our lawful bases for collecting or using personal information for the operation of customer accounts and guarantees are:

  • Consent
  • Contract
  • Legal obligation

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent

Where we get personal information from

People directly, or via third-party login providers such as Google OAuth (via Supabase).

Authentication & data storage

Authentication and user account data are securely stored and managed by our authentication provider Supabase.

  • Secure encrypted storage of user data
  • Session management and automatic expiration
  • Authentication tokens and audit logging

More info: Supabase Security and Supabase Privacy

How long we keep information

We retain user and account information for active accounts. Inactive accounts are retained for up to seven years unless otherwise requested by the user. This is necessary for customer service, legal, and audit purposes.

Who we share information with

  • Supabase Inc. – authentication and storage provider
  • Outlet publishers hosted on our platform

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access
  • Your right to rectification
  • Your right to erasure
  • Your right to restriction of processing
  • Your right to object to processing
  • Your right to data portability
  • Your right to withdraw consent

You don’t usually have to pay a fee to exercise your rights. We will respond within one calendar month.

How to complain

If you have concerns about our use of your personal data, contact us at the email above.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

Last updated: 30/06/2025