Privacy Notice

We respect the privacy of users of our website and web application and recognise that when you choose to provide us with information about yourself, you trust us to act in a responsible manner with that information. This privacy notice contains important information about how we use your personal information.

WPP (“our”, “we”, or “us”), having its registered address at Sea Containers House, 18 Upper Ground, London, SE1 9GL, United Kingdom, is the data controller for the purposes of applicable data protection laws and regulations, including the UK General Data Protection Regulation (GDPR).

This website and associated web application are run by us to provide you with the services.

Our website allows you to access a web application that, when you consent to grant us access to your email, can scan your email for specific codes provided to us by participating partners to identify expired promotional emails. You are responsible for reviewing all identified emails prior to confirming their deletion.

When you visit this website we may collect and process information about the device used to access our website (including IP address, mobile device ID, browser type).

When you use our web application, you consent to grant us access to your email. Related to each use of the web application we will collect the following information:

• Your email account log-in credentials
• Your email
• The number of emails deleted by you during a given occurrence/use
• The date and time of each use
• Device information (including non-precise location based on IP address, mobile device ID, and browser type)

If you contact us, we will also collect and process any information you give us to enable us to respond to your request or query which may include your name and contact information.

The above personal information is collected directly from you or during your use of our website or web application.

Our primary purpose for using your personal information is to enable you to delete expired promotional emails from your email inbox. To do this, we scan your email for specific codes provided to us by participating partners to identify expired promotional emails. Once this scan is complete, we present the list of identified emails to you for review. Finally, we carry out the deletion of any emails that you mark for deletion. Our “legal basis for processing” your personal information is consent – we only use your personal information for this purpose if you have asked us to do so. Your consent for our processing activity will expire one hour from the time it was granted unless you access the web-application again and re-consent to additional processing. While we may only scan and delete emails within the above one-hour window, we will retain your email address and a count of the number of emails that were deleted upon each occurrence of your use of the application. In addition, we may process your personal information for the following purposes:

How we will use your personal information	Our legal basis for processing
to respond to your enquiries e.g., if you send us an email	Consent – we only use your personal information for this purpose if you have asked us to do so. You can withdraw your consent at any time.
to protect the security of the website and its users and the compliance with our Terms & Conditions as well as detecting and preventing fraud.	Legitimate interests – we process your data in the interests of our company, in conducting our business in a way you would reasonably expect and which does not materially impact your rights, freedom or interests.
to process personal information in connection with legal claims and compliance purposes.	Compliance with a legal obligation – we would only process your data for this purpose where there is a legal obligation, which could include disclosure of such information in connection with legal processes or litigation.

We may send your personal information to other group companies, affiliates and third parties to help us process your personal information for the purposes set out in this notice. We will not sell your personal data to any third parties.

We may disclose your personal information if we or any of our assets are the subject of a sale or similar corporate transaction. We will ensure that the third parties who receive your personal information are required to keep it confidential.

We may disclose personal information to third parties when we reasonably believe we are required by law, and in order to investigate, prevent, or take action regarding suspected or actual unlawful or otherwise prohibited activities, including, but not limited to, fraud.

We may transfer personal information to countries outside the UK or the European Economic Area ("EEA"). These countries may have different data protection standards to those which apply in the UK or EEA. Any transfer of your data outside the UK or EEA is covered by appropriate safeguards compliant with applicable data protection legislation.

When we collect or process your personal information, we will only keep it for as long as is necessary for the purpose for which it was collected and subject to legal regulations with regard retention. At the end of the retention period, your data will either be deleted or anonymised, which may include aggregation with other data so that it can be used in a non-identifiable way for business analysis and planning. For clarity, the credentials that you provide to us in order to access your email are only retained for an hour after you access the web application.

You are entitled to ask:

• for a copy of the personal information we hold about you, and details about how we are processing your personal information.
• to have any inaccuracies in your personal information corrected.
• if we are processing your personal information by automated means and on the basis of your consent, for us to provide your personal information to you in a structured, commonly-used and machine-readable format. You can also ask us to provide your personal information directly to a third party in this format, and, if technically feasible, we will do so.
• to have your personal information erased, or for our use of it to be restricted (for example, if your preferences change, or if you don’t want us to send you the information you have requested).

Please contact us using the details set out below if you would like to exercise any of these rights.

Please note, these rights may be limited in some situations (for example, where we can demonstrate that we have a legal requirement to process your data).

You also have the right to make a complaint to the supervisory authority if you’re not happy with how we’ve handled your personal information. In the UK, the supervisory authority is the Information Commissioner’s Office (http://www.ico.org.uk).

In order to respond to your request, we may need to ask you to provide proof of identity or additional information.

If you wish to exercise any of your rights in relation to your personal information or if you have any queries about how we use your personal information, please let us know by contacting us at the following address: WPP, Sea Containers House, 18 Upper Ground, London, SE1 9GL, United Kingdom, or by email at contact@vanishingemails.com.

If you are a California resident, additional information and rights apply to you. Please click here.

We review this privacy notice on a regular basis to ensure that it is up-to-date with our use of your personal information, and compliant with applicable data protection laws.

We reserve the right, at our discretion, to revise this privacy notice at any time. The updated privacy notice will be posted on this website. You are encouraged to review this privacy notice from time to time.