privacy
policy.

1. who we are

opdrop is a subscription-based email service delivering curated brand opportunities to content creators, operated by opdrop.

we are committed to protecting your personal data and processing it in accordance with the uk general data protection regulation (uk gdpr), the data protection act 2018, and all other applicable uk data protection legislation.

if you have any questions about this policy or how we handle your data, please contact us at hello@opdrop.co.uk.

2. what data we collect

we collect and process the following categories of personal data:

data you provide directly

• full name
• email address
• address
• telephone number
• social media handles and platform information
• follower counts, engagement rates, niche and content category
• audience demographics and creator statistics
• payment information (processed securely by stripe — we do not store card details directly)

data collected automatically

• ip address and device information
• browser type and operating system
• pages visited on our website and time spent
• email open rates and click-through data via klaviyo
• cookies and similar tracking technologies (see section 8)

3. how we use your data

we use your personal data for the following purposes:

• to provide and manage your opdrop subscription
• to send you weekly brand opportunity emails via klaviyo
• to process payments securely via stripe
• to match you with relevant brand opportunities based on your niche and social media profile
• to communicate with you regarding your account, subscription, or any enquiries
• to improve our service and understand how our emails are used
• to comply with our legal obligations under uk law

we will not use your data for any purpose incompatible with the purposes listed above without first obtaining your consent.

4. our lawful basis for processing

under uk gdpr, we rely on the following lawful bases for processing your personal data:

• contract: processing your name, email address and payment information is necessary to fulfil your subscription contract with us
• legitimate interests: we process email engagement data and website analytics to improve our service, where this does not override your rights
• legal obligation: we may process data where required to comply with applicable uk law

5. third party processors

we share your data with the following trusted third-party processors, each of whom processes data only as instructed by us and in accordance with their own privacy policies:

squarespace

our website is hosted on squarespace. squarespace collects certain website analytics data. you can view squarespace's privacy policy at squarespace.com/privacy.

stripe

all subscription payments are processed by stripe. stripe is pci-dss compliant and processes your payment data securely. we do not store your full card details. you can view stripe's privacy policy at stripe.com/gb/privacy.

klaviyo

we use klaviyo to send and manage our weekly email drops. klaviyo stores your email address and tracks open and click data to help us improve our emails. you can view klaviyo's privacy policy at klaviyo.com/legal/privacy-notice.

we do not sell your personal data to any third parties.

6. your rights under uk gdpr

you have the following rights in relation to your personal data:

• right of access: you can request a copy of the personal data we hold about you
• right to rectification: you can ask us to correct any inaccurate or incomplete data
• right to erasure: you can ask us to delete your personal data in certain circumstances
• right to restrict processing: you can ask us to limit how we use your data in certain circumstances
• right to data portability: you can ask us to provide your data in a portable format
• right to object: you can object to processing based on legitimate interests
• right to withdraw consent: where processing is based on consent, you can withdraw it at any time

to exercise any of these rights, please contact us at hello@opdrop.co.uk. we will respond within one calendar month as required by uk gdpr.

if you are unhappy with how we handle your data, you have the right to lodge a complaint with the information commissioner's office (ico) at ico.org.uk.

7. data retention

we retain your personal data for as long as your subscription is active and for a reasonable period thereafter in accordance with our legal obligations. specifically:

• subscription and account data is retained for the duration of your subscription plus six years for legal and accounting purposes
• email marketing data is retained until you unsubscribe or request deletion
• payment records are retained for six years in accordance with hmrc requirements

when data is no longer required, we will securely delete or anonymise it.

8. cookies

our website uses cookies and similar tracking technologies. cookies are small text files stored on your device that help us understand how you use our website.

we use the following types of cookies:

• essential cookies: required for the website to function correctly
• analytics cookies: help us understand how visitors use our website (via squarespace analytics)
• marketing cookies: used by klaviyo to track email engagement

you can manage your cookie preferences through your browser settings. please note that disabling certain cookies may affect the functionality of our website.

9. data security

we take the security of your personal data seriously. we implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. these include secure hosting via squarespace, encrypted payment processing via stripe, and restricted access to personal data within our team.

while we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. if you have any concerns about data security, please contact us immediately at hello@opdrop.co.uk.

10. changes to this policy

we may update this privacy policy from time to time to reflect changes in our practices or applicable law. when we make significant changes, we will notify you by email. the date at the top of this page will always reflect the most recent update.

your continued use of our service after any changes constitutes acceptance of the updated policy.

11. contact us

if you have any questions, concerns or requests relating to this privacy policy or our data practices, please contact us at:

email: hello@opdrop.co.uk