Privacy Notice

1. Who we are

EditURLink is operated by Sweet Images Ltd. For the purposes of data protection law, Sweet Images Ltd is the data controller for the personal data described in this notice.

2. What we collect

• Account data — your name, email address and login credentials, used to create and secure your account.
• Service data — the destination URLs, short names and UTM parameters you create, used to provide the link-shortening service.
• Usage and analytics data — click timestamps, referrer, device type, approximate country and a hashed IP address, used to provide click analytics and to prevent fraud and abuse.
• Support messages — if you contact us, we keep your message and email address so we can respond.

Payment details are collected and processed directly by Paddle (our Merchant of Record); we never see or store your card details.

3. Legal bases

• Contract performance — to create your account and provide the service you've signed up for.
• Legitimate interests — to keep the service secure, prevent fraud and abuse, and improve the product.
• Legal obligation — where we must retain records for tax or legal reasons.
• Consent — where we ask for it, for example for optional marketing emails; you can withdraw consent at any time.

4. Who we share data with

• Service providers — hosting, database and analytics providers who help us run the service.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Professional advisers — such as lawyers and accountants, where needed.
• Authorities — where we are required to do so by law.

5. International transfers

Some of our service providers process data outside the UK/EEA. Where this happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses, to protect your data.

6. Retention

We keep personal data only for as long as needed to provide the service and meet legal obligations. When data is no longer needed it is deleted or anonymised. You can delete individual links at any time from your dashboard.

7. Your rights

Under UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to processing, data portability, and to withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office (ICO). We respond to requests within one month. To exercise any of these rights, contact us using the details on our website.

8. Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.

9. Cookies

We use essential cookies and browser storage to keep you signed in and make the service work. We do not use marketing cookies. You can control or delete cookies through your browser settings, but essential features may stop working if you block them.

10. Changes

We may update this notice from time to time. The latest version will always be published on this page with its updated date.