This Privacy Policy explains how Beagle Software ehf. (“PostBeagle”, “we”, “us” or “our”) collects, uses, discloses and protects personal data when you visit postbeagle.com, create an account, or use our email marketing platform and related services (the “Service”).
We are committed to protecting your privacy and handling personal data in accordance with the EU General Data Protection Regulation (the “GDPR”), the Icelandic Act on Data Protection and the Processing of Personal Data (No. 90/2018), and other applicable data protection laws.
1. Controller and our two roles
For the personal data of our customers and website visitors - for example your account and billing details - PostBeagle is the data controller.
When you use the Service to send email campaigns, you upload information about your own contacts and subscribers (“Contact Data”). With respect to that Contact Data, you are the controller and PostBeagle acts as a processor, processing it only on your documented instructions. Our handling of Contact Data is governed by our GDPR & Data Processing terms.
2. Information we collect
Information you provide
- Account & profile data: name, email address, password, company name, and similar details you provide when you register or update your account.
- Billing data: billing address and tax information. Card payments are processed by our payment provider; we do not store full card numbers on our systems.
- Support & communications: the content of messages you send us and records of our correspondence.
- Contact Data you upload: the recipient lists, email addresses, names and other fields you import to send campaigns. We process this as your processor (see Section 1).
Information we collect automatically
- Usage & device data: IP address, browser type, device information, pages viewed, and actions taken within the Service.
- Log data: server logs, including timestamps and diagnostic information used to operate and secure the Service.
- Cookies & similar technologies: see our Cookie Policy for details and your choices.
3. How we use personal data and our legal bases
We process personal data for the following purposes and legal bases under the GDPR:
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing, operating and maintaining the Service | Performance of a contract (Art. 6(1)(b)) |
| Billing, accounting and fraud prevention | Contract; legal obligation (Art. 6(1)(b) & (c)) |
| Securing the Service and preventing abuse | Legitimate interests (Art. 6(1)(f)) |
| Improving and developing features | Legitimate interests (Art. 6(1)(f)) |
| Sending service and (where permitted) marketing messages | Legitimate interests or consent (Art. 6(1)(f) or (a)) |
| Complying with legal and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
4. How we share personal data
We do not sell personal data. We share it only as described below:
- Sub-processors and service providers who help us run the Service (hosting, payments, analytics and email delivery). They process personal data on our behalf under contract. A current list is on our GDPR page.
- Legal and safety disclosures where required by law, to enforce our Terms of Service, or to protect the rights, property or safety of PostBeagle, our users or others.
- Business transfers in connection with a merger, acquisition or sale of assets, subject to this Policy.
5. International transfers
Some of our service providers are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so that your data continues to receive an adequate level of protection.
6. Data retention
We retain personal data only for as long as necessary for the purposes set out in this Policy, including to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. Account data is generally retained for the life of your account and for a limited period afterwards. Contact Data is retained according to your instructions and deleted or returned on termination, as described in our GDPR terms.
7. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration - including encryption in transit, access controls and monitoring. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of qualifying data breaches as required by law.
8. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. To exercise these rights, contact us at [email protected].
If your personal data is held in the Service as Contact Data of one of our customers, please direct your request to that customer (the controller); we will assist them in responding.
You also have the right to lodge a complaint with a supervisory authority - in our case the Icelandic Data Protection Authority (Persónuvernd) (www.personuvernd.is).
9. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences at any time via the cookie settings on our website.
10. Children
The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes will be communicated where required by law.
12. Contact us
For questions about this Policy or our data practices, contact us at [email protected] or by post:
Beagle Software ehf.
Bjargargata 2, 102 Reykjavik, Iceland