GDPR and UK Data Rights
Last updated: October 28, 2026
This notice supplements the Privacy Policy for visitors in the European Economic Area, the United Kingdom and Switzerland. Where the two differ on a point of EU or UK law, this notice applies.
Who the controller is
Innovate E-com Solutions LLC, at 30 N Gould St Ste R Sheridan, WY 82801 USA, is the controller for the personal data described here. Data-protection correspondence goes to [email protected].
What we process, and on what basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Serving and securing the page | IP address, user agent, request logs | Legitimate interests, Art. 6(1)(f) |
| Remembering video position and unlocked-offer state | Local storage on your device | Strictly necessary, or consent where required |
| Analytics and advertising measurement | Usage events, referrer, campaign identifier | Consent, Art. 6(1)(a) |
| Answering your messages | Email address, message content | Legitimate interests, Art. 6(1)(f) |
| Record-keeping and legal compliance | Correspondence, consent records | Legal obligation, Art. 6(1)(c) |
We process no special-category data under Art. 9 and we ask you not to send any.
Your rights
- Access — a copy of your data and confirmation of how it is used (Art. 15).
- Rectification — correction of inaccurate or incomplete data (Art. 16).
- Erasure — deletion where there is no overriding ground to keep it (Art. 17).
- Restriction — a pause on processing while a dispute is resolved (Art. 18).
- Portability — a machine-readable copy of data you gave us (Art. 20).
- Objection — to processing based on legitimate interests, and at any time to direct marketing (Art. 21).
- Withdrawal of consent — at any time, without affecting what was lawful before (Art. 7(3)).
Making a request
Email [email protected] with the right you wish to exercise. We reply within one month and may extend that by two further months for a complex request, telling you why. There is no charge unless a request is manifestly excessive or repetitive. We may ask a question to confirm that the request is genuinely yours, and we will not ask for more identification than that needs.
How long data is held
Request logs up to 24 months, correspondence up to 36 months, consent records for as long as needed to evidence the consent and for a limitation period afterwards. Local storage on your device expires on its own terms or when you clear your browser.
Transfers outside the EEA and UK
Hosting, content delivery and analytics providers we use may process data in the United States and elsewhere. Those transfers rely on the European Commission's standard contractual clauses, the UK International Data Transfer Addendum where the UK is involved, or an applicable adequacy decision, together with technical measures including encryption in transit. A copy of the relevant safeguards is available on request.
Automated decisions
We do not carry out automated decision-making or profiling that produces legal effects for you under Art. 22.
Complaints
Please raise a concern with us first, at [email protected]. You keep the right to complain to a supervisory authority — the data-protection authority of your country of residence or workplace in the EEA, the Information Commissioner's Office in the United Kingdom, or the Federal Data Protection and Information Commissioner in Switzerland.