Introduction and Who We Are

Important: This policy is a template prepared for AuthorityLinks and must be reviewed and approved by a qualified lawyer in [Jurisdiction] before publication. Bracketed items such as [Company Legal Name] must be completed with accurate details.

This Privacy Policy explains how [Company Legal Name] ("AuthorityLinks", "we", "us"), with its registered address at [Registered Address], collects, uses, shares and protects personal data when you visit https://authoritylinks.net, create an account, place an order or contact us.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we are the data controller of the personal data described in this policy. You can contact us about privacy matters at [Privacy Email]. [If applicable: Our EU representative is [EU Representative Details] and our UK representative is [UK Representative Details]. Our Data Protection Officer can be reached at [DPO Contact].]

Personal Data We Collect

We collect the following categories of personal data:

• Identity and contact data: name, company name, email address, phone number and billing address.
• Account data: username, encrypted password and account preferences.
• Order data: services purchased, target URLs, anchor text, content briefs, order history and communications about your orders.
• Payment data: transaction identifiers, amounts, currency and payment status. Full card numbers are processed by our payment providers and are not stored on our website.
• Technical data: IP address, browser type, device information, pages visited and referring URLs, collected through cookies and similar technologies.
• Communications: messages you send us by email, contact forms or live chat, and your marketing preferences.

How We Use Your Data and Our Legal Bases

We use personal data only where we have a lawful basis to do so:

• To create and manage your account and fulfil orders, based on performance of a contract.
• To process payments, prevent fraud and keep records required by tax and accounting laws, based on legal obligation and legitimate interests.
• To respond to enquiries and provide customer support, based on contract or legitimate interests.
• To improve our website and services through analytics, based on consent where required by law.
• To send marketing emails, based on consent or, where permitted, legitimate interests for existing customers. You can opt out at any time.
• To protect our legal rights and enforce our terms, based on legitimate interests.

Cookies, WooCommerce and Analytics

Our website is built on WordPress and uses WooCommerce for the shop, cart and checkout. WooCommerce sets essential cookies to keep your cart contents, session and login state working. These are strictly necessary and do not require consent.

With your consent, we use analytics tools such as [Analytics Provider, for example Google Analytics 4] to understand how visitors use the site, and we may use marketing or advertising cookies. You can accept, reject or change non-essential cookies through our cookie banner at any time. Full details are in our Cookie Policy.

How We Share Personal Data

We do not sell personal data for money. We share data only as needed with:

• Publishers and content partners, limited to order details needed to place your content, such as target URL, anchor text and article content. We do not share your contact details with publishers unless you ask us to.
• Payment providers such as PayPal and our card processor [Card Processor], which process payments under their own privacy policies.
• Hosting, email, analytics, customer support and IT service providers acting on our instructions.
• Professional advisers, auditors and insurers where necessary.
• Authorities, courts or regulators where required by law, or a buyer in the event of a merger or sale of our business.

International Data Transfers

Our customers, service providers and publishers are located in many countries. Where personal data is transferred outside the European Economic Area or the United Kingdom to a country without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on another lawful mechanism.

Data Retention

We keep personal data only as long as needed for the purposes described here. Account and order data is generally kept for the life of your account and for [Number] years afterward to meet tax, accounting and legal requirements. Marketing data is kept until you unsubscribe. Analytics data is retained according to the settings of our analytics provider, currently [Retention Period].

Your Rights Under GDPR and UK GDPR

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data where there is no overriding reason to keep it.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting earlier processing.
• Lodge a complaint with your local data protection authority or, in the UK, the Information Commissioner's Office.

Your Rights Under the CCPA and US State Laws

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect, use and disclose; to request deletion and correction; to opt out of the sale or sharing of personal information for cross-context behavioral advertising; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

We do not sell personal information. If we use advertising cookies that may count as "sharing" under the CCPA, you can opt out through our cookie settings or the [Do Not Sell or Share My Personal Information] link, and we honor Global Privacy Control signals. Residents of other US states with similar laws may have comparable rights. To exercise them, email [Privacy Email]. We will verify your identity before responding.

How We Protect Your Data

We use reasonable technical and organizational measures to protect personal data, including encrypted HTTPS connections, access controls, regular software updates and the use of PCI DSS compliant payment providers so that card data is not stored on our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy and Contact Details

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page or sent to you by email. Effective date: [Effective Date].

Contact: [Company Legal Name], [Registered Address], [Privacy Email].