Privacy Policy

1. Identity of the Data Controller

The data controller responsible for personal information processed through this website is Reelzpebblerank Retail Intelligence Ltd (Company Registration #09847120), with its registered European bureau at 14 Haussmann Arcade, 75009 Paris, France and UK office at 82 Farringdon Road, London EC1M 3LN. For inquiries regarding our data handling, contact our Data Protection Officer at [email protected].

2. Data We Collect and Processing Purposes

Reelzpebblerank operates on a strict data-minimization principle. Depending on how you interact with our publication, we may collect:

• Directly Provided Data: When you submit an inquiry through our contact form, we collect your full name, email address, topic interest, and message content to respond to your specific editorial query.
• Technical and Device Logs: Server connection logs capturing IP addresses (truncated where possible), browser user agents, operating system parameters, and timestamps to maintain infrastructure security and prevent denial-of-service abuse.
• Aggregated Analytical Telemetry: Anonymized metrics on article dwell time, page view paths, and referral URLs to evaluate editorial interest in retail case studies.

3. Legal Bases for Processing under GDPR & UK GDPR

We process personal data only when an authorized legal basis applies under Article 6 of the General Data Protection Regulation (GDPR):

• Legitimate Interests (Art. 6(1)(f)): For maintaining server integrity, diagnosing operational errors, protecting against fraud, and managing editorial correspondence.
• Consent (Art. 6(1)(a)): For non-essential analytical cookies and measurement pixels, which are deployed solely after your explicit affirmative consent through our cookie choice interface.
• Legal Obligations (Art. 6(1)(c)): Where data retention is required by French or UK statutory commercial record-keeping regulations.

4. Third-Party Processors and International Transfers

Reelzpebblerank does not trade, rent, or sell your personal information. Data may be shared with trusted technical sub-processors under contractual Data Processing Agreements (DPAs) strictly compliant with GDPR standards:

• Hosting and Infrastructure: Secure European data centers located within the EU/EEA boundaries adhering to ISO 27001 standards.
• Transactional Email Delivery: Secure mail relay providers ensuring delivery of inquiry responses.

Where transfer of technical logs occurs outside the European Economic Area, we implement EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreements (IDTAs) to guarantee equivalent data protection levels.

5. Retention Periods

Contact form submissions are retained for up to twenty-four (24) months to facilitate continuity in editorial correspondence, after which they are purged. Technical server logs are held for ninety (90) days for security auditing before automated overwriting. Cookie consent records stored in your local browser storage persist for twelve (12) months unless cleared manually.

6. Data Subject Rights under GDPR and CCPA

As a European or California data subject, you possess enforceable statutory rights regarding your personal records:

• Right of Access (Art. 15 GDPR): The right to obtain confirmation and copies of personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): The right to correct erroneous or incomplete records.
• Right to Erasure (Art. 17 GDPR): The right to request deletion of personal information ("Right to be Forgotten") where processing grounds no longer exist.
• Right to Restrict Processing (Art. 18 GDPR): The right to limit data processing under specific dispute circumstances.
• Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.
• California Consumer Rights (CCPA/CPRA): California residents hold the right to know what personal categories are collected, request deletion, and remain free from discrimination for exercising privacy rights. Reelzpebblerank does not "sell" or "share" personal information as defined under CCPA.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. We address verified requests within thirty (30) calendar days without fee.

7. Supervisory Authority Recourse

If you believe our processing of your personal data infringes applicable data protection law, you have the right to lodge a formal complaint with the relevant European supervisory body (such as the CNIL in France, at cnil.fr, or the Information Commissioner's Office in the United Kingdom, at ico.org.uk).