Privacy Policy

Who is responsible for your information

The service operator identified in the Legal operator details block at the bottom of this page is the controller for the personal information described in this policy.

My Contact Profile is a hosted professional contact-profile service. It lets account holders create public profiles, share permanent links by QR or NFC, offer vCard contact saving, and optionally add a profile to Google Wallet.

Information we handle

• Account and membership information, such as your account email, username or display name, membership status, profile allowance and account-security settings.
• Profile information you choose to add, such as your public display name, professional title, company, location, contact details, biography, profession, profile image, logo, cover image and professional links.
• Public addressing and sharing information, including your chosen public ID, permanent share identity and the QR, NFC, vCard and Wallet destinations connected to it.
• Payment and membership records, such as the plan selected, transaction references, payment status, renewal, cancellation and refund status. Payment credentials are handled by the payment provider rather than stored by My Contact Profile.
• Support and account communications you send to us and the information needed to respond.
• Technical and security information that may be processed by the web server, hosting, CDN or security services to deliver requests, protect accounts, prevent abuse and investigate faults.

Guest Builder drafts

Before checkout, the guest Profile Builder keeps the working draft and selected draft images in the browser so you can build and preview a profile before creating an account. The draft is transferred into the paid account flow only when you choose to continue.

Public profiles and search engines

When you publish a profile, the information you chose for that profile is intentionally made available on the public internet. Anyone with the profile address, permanent QR or NFC link may be able to open it.

Search-engine indexing is a separate profile setting and is off by default. Direct links, QR, NFC, Save Contact and Google Wallet can still work while indexing is off. If information has already been indexed or cached by a third party, removal from that third party may not be immediate.

Why we use personal information

• To provide the service you request, including account access, profile hosting, Builder features, public sharing, membership administration and support. This processing is necessary for the contract with you.
• To process and maintain payment, renewal, cancellation and transaction records needed to administer the service and meet legal or accounting obligations.
• To secure the service, prevent abuse, diagnose faults and protect users and infrastructure. We rely on legitimate interests where appropriate for these operational and security purposes.
• To provide privacy-first aggregate profile analytics and improve the reliability of the product. The analytics system is designed to avoid building visitor-level tracking profiles.
• Where an optional feature genuinely requires consent, we will ask for it separately and you may withdraw that consent for future processing.

Privacy-first profile analytics

Public-profile analytics store aggregate daily counters for events such as profile views, permanent-link opens, Save Contact downloads and selected profile-link interactions.

The My Contact Profile analytics store does not save visitor IP addresses, visitor cookies, browser fingerprints, request referrers or user-agent strings. A user-agent may be inspected in memory to exclude common crawler or link-preview traffic and is then discarded.

Cookies and browser storage

The site may use cookies or browser storage where needed for sign-in, membership state, security, preferences such as light or dark mode, and the guest Builder draft. These are used to operate the requested service rather than to create advertising profiles.

If a future feature introduces non-essential cookies or similar technologies that require consent, the site will request that consent before using them.

Who information may be shared with

• Infrastructure, hosting, CDN and security providers that help deliver and protect the service, including Cloudflare for network delivery and security.
• Payment providers, including PayPal, when you purchase or renew a membership.
• Email or communications providers used to deliver account, service or support messages.
• Google when you choose to use the Google Wallet feature. Google processes the Wallet interaction under its own terms and privacy information.
• Professional advisers, regulators, courts, law-enforcement bodies or other recipients where disclosure is required by law or reasonably necessary to establish, exercise or defend legal rights.
• Visitors to your public profile, but only for the profile information and links you chose to publish.

International processing

Some service providers may process information in countries outside the United Kingdom. Where data-protection law requires safeguards for an international transfer, appropriate transfer mechanisms or other lawful protections are used.

How long information is kept

• Account and profile data is kept while it is needed to provide the account and service, unless a longer period is required for legal, security, dispute or record-keeping purposes.
• If paid profile access ends, public profile access is suspended. My Contact Profile-owned profile media is retained for a 30-day grace period and is purged if qualifying access has not been restored when that period ends.
• When the owning WordPress account is deleted, My Contact Profile-owned profile media is purged and the profile is made non-public. Limited transaction, accounting, fraud-prevention or legal records may still need to be retained.
• Operational and security records are kept only for periods reasonably needed for security, troubleshooting, legal obligations and dispute handling.

Your data-protection rights

Depending on the circumstances and the lawful basis used, you may have rights to access, correct, erase or restrict personal information, receive certain information in a portable format, object to processing, and withdraw consent where processing is based on consent.

To exercise a right, use the legal contact details shown at the bottom of this page. We may need to verify your identity before acting on a request.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you believe your personal information has been handled unlawfully.

Changes to this policy

We may update this policy when the service, providers or legal requirements change. The current version and its update date will remain available on this page.