Privacy Policy

Who we are

Postivo is a trading name of Adsation Marketing. We provide monthly social media content subscriptions to businesses in the United Kingdom, and we are the data controller for the personal data described in this policy.

You can contact us about anything in this policy at support@postivo.co.uk or via the contact form on this website.

Information we collect

• Account details: your name, business name, email address, phone number and password (stored only in encrypted form).
• Onboarding details: your website, social media handles, industry, brand preferences, tone of voice and target audience.
• Brand assets: logos, imagery, files and any other material you upload for content creation.
• Billing details: your plan, payment status and payment references. Bank and card details are collected and processed by our payment provider — we never see or store your full bank or card details.
• Support and correspondence: messages you send us by email, WhatsApp or our contact form.
• Technical data: browser type, device, pages visited and approximate location, collected through essential cookies and privacy-friendly analytics.

How we use your information

We do not sell your personal data, and we do not share it with third parties for their own marketing.

• To create, deliver and revise your monthly social media content.
• To set up and manage your account, subscription and billing.
• To provide customer support and respond to your enquiries.
• To send service messages about your account, orders and content reviews.
• To improve our website and service using aggregated, non-identifying analytics.
• To meet our legal, accounting and tax obligations.

Lawful bases for processing

Under UK GDPR we process your data on the following bases: performance of our contract with you (delivering your subscription), our legitimate interests (running and improving our service and keeping it secure), compliance with legal obligations (accounting and tax records), and, where applicable, your consent (for optional marketing communications, which you can withdraw at any time).

Payments

Payments are processed by GoCardless Ltd via Direct Debit. When you set up a Direct Debit, your bank details are provided directly to GoCardless under their own privacy policy. Postivo stores only your payment status and GoCardless references, never your full bank account details.

Who we share data with

We share data only with the providers needed to run the service: our payment provider (GoCardless), our secure hosting and database provider, and email delivery services. Each provider processes data only on our instructions and under appropriate safeguards.

Data retention

We keep your account and content data for as long as your subscription is active. If you cancel, we keep the records we need for legal, accounting and tax purposes (typically up to 6 years) and then delete or anonymise the rest. You can ask us to delete your data sooner where the law allows.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request deletion of your data where we have no legal reason to keep it.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

Exercising your rights

To exercise any of these rights, email support@postivo.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data.

Security

We use industry-standard safeguards including encrypted connections (HTTPS), encrypted storage of credentials, and access controls that limit account data to the account owner and authorised team members.

Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, and we will notify active customers of material changes.