Privacy notice

Who we are

Gold Label Media is the controller of the personal information described here. Email us at the address published on this site to raise anything in this notice, including a rights request.

What we collect

• Information you type into the case review form: the matter type, platform, handle or profile URL, your description of what happened, urgency, the value band you select, your name, your chosen contact channel and your handle or number on it.
• The case reference we generate for you, and the date and time of submission.
• Standard server request information generated by our hosting provider, such as IP address and user agent, retained briefly for security and abuse prevention.
• Cookieless page load timings, measured at the network edge by our hosting provider. These set nothing on your device and identify nobody.
• If, and only if, you accept measurement when asked: analytics and advertising measurement data described in the Cookie Notice, which records which pages you saw and whether you started or completed a case review.
• We do not run session recording, we do not fingerprint your device, and we do not buy data about you from anyone.

Sensitive information

We do not ask for and do not want special category or sensitive personal information. Do not send health information, financial account numbers, government identity numbers, biometric data, or information about your race, religion, politics, sexual orientation or union membership through this site. Where an official platform submission genuinely requires an identity document, we tell you at that point and handle it for that submission only. We do not use sensitive personal information to infer characteristics about you, which is the use that US state privacy laws give you a right to limit.

Our legal bases, if you are in the UK or the EEA

• Contract, and steps taken at your request before entering one, for assessing your matter, scoping it and doing the work.
• Legitimate interests, for keeping the site secure, preventing abuse of the form, keeping a record of what was agreed and declined, and understanding at an aggregate level whether the site is fast and usable. We have weighed these against your interests and you can object at any time.
• Consent, and only consent, for analytics and advertising measurement. You are asked before anything loads and you can withdraw at any time from the footer control, as easily as you gave it.
• Legal obligation, where we are required to retain or disclose something.

What never goes through this form

Never type a password, a two factor code, a backup code, a recovery code or a session token into the case review form. We do not ask for them here and the form is not built to receive them — and we do not ask for them anywhere else either, at any stage of any matter. Some routes do genuinely require access to your account. Where one does, we ask to be added as a delegated user you grant and revoke yourself, raised inside a matter already open with you, by email from the desk address, after telling you in writing which access the route needs and why. You can decline at that point. The same applies to identity documents and financial details: do not send them through this form, and where an official platform submission genuinely requires one, we will tell you then how to provide it.

How you arrived, if you submit an enquiry

If you reach this site from an advertisement or a campaign link, the address carries a click identifier and campaign tags. Where one is present we keep it in your browser's own session storage for the length of that visit, and if — and only if — you go on to submit an enquiry, it is attached to that enquiry so we can tell which advertising produced real work rather than guessing. It is not a cookie, it is not shared with anyone, it never leaves your browser unless you submit the form, and it is gone when you close the tab. If you never submit, no record of your visit exists on our side. We do this outside the measurement consent question because it is not measurement of you: it is context on an enquiry you chose to send, in the same way the page you sent it from is. If you would rather it were not attached, say so in your message and we will strip it from the record.

Why we use it

• To assess the matter you raised and tell you whether a route exists.
• To contact you on the channel you selected about that matter.
• To keep a record of the engagement, including what was scoped and what was declined.
• To keep the site secure and to prevent abuse of the form.

We do not market to you

We do not operate an email marketing list, we do not send newsletters, and we do not send promotional messages. Submitting the form is a request for a review of a specific matter, and we contact you about that matter only. There is no list to unsubscribe from because there is no list.

Sharing

• With the independent specialists, publicists or publishers engaged on your matter, and only with what they need to do the work, and only after you have agreed the scope.
• With the service providers listed on our Sub-processors page, each of which processes data on our documented instructions and nothing more. That page names every one of them, what they do, and where they are.
• In connection with a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy notice.
• Where we are legally required to, for example in response to a valid legal process. We will notify you unless we are prohibited from doing so.
• We do not sell personal information, and we do not share it for cross context behavioural advertising, as those terms are defined by US state privacy laws. We have never done so, including in the twelve months before the date of this notice.

International transfers

We are based in the United States and our infrastructure is served from a global edge network, so your information may be processed in the United States and at the edge location nearest you. Where you are in the UK or the European Economic Area, transfers to our US service providers rely on the European Commission's standard contractual clauses together with the UK Addendum, supported by the technical measures described in our security notice. You can ask us for the details of the mechanism relied on for any specific provider.

Automated decisions

No decision about your matter is made by a machine. A person reads every enquiry and a person decides whether a route exists. We do not carry out profiling that produces legal or similarly significant effects for you.

Retention

Enquiry records are kept for up to 24 months from your last contact with us, so that we can recognise a returning matter and evidence what was agreed and declined. Server request logs are kept for a much shorter period. Our Data Retention Schedule sets out the period for every category we hold and the reason for it. You can ask us to delete your record sooner and we will, unless we are required to keep it.

Your rights

Depending on where you live, you may have the right to know what we hold, to obtain a copy, to correct it, to delete it, to limit the use of sensitive information, to opt out of sale or sharing and of profiling, and not to be treated differently for exercising any of these. We do not sell or share personal information, so there is nothing to opt out of, but the request will be honoured and acknowledged either way.

How to make a request

Email us at the address published on this site with the words privacy request and your case reference if you have one. We will verify that the request comes from you or an authorised agent, and respond within the period the applicable law allows. We do not require you to create an account to make a request.

Global Privacy Control

We honour opt out preference signals, including Global Privacy Control and Do Not Track, and we do so automatically. If your browser or an extension broadcasts either signal, we treat it as a decline of measurement, we never load a measurement tag, and we do not show you the consent question at all, because you have already answered it. A signal switched on later overrides an earlier acceptance. Because we do not sell or share personal information, the signal changes nothing else about how we handle your data, but it is respected regardless.

Cookies and measurement

This site asks you once, before anything loads, whether you accept analytics and advertising measurement. Accept and Decline carry equal weight and declining is one click. Until you answer, no measurement tag runs and no identifier is set. Strictly necessary cookies are set by our hosting and delivery provider to route requests and protect the site, and cookieless page load timings are measured at the network edge. The Cookie Notice names every cookie, who sets it and how long it lasts, and the footer control on every page lets you change your answer at any time.

Children

This site and these services are for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has sent us information, tell us and we will delete it.

International visitors

The site is served from a global edge network, which means your request may be handled in a location near you and data may be processed in the United States. If you are contacting us from outside the United States, you are asking us to handle your enquiry on that basis.

Changes

If this notice changes materially, the updated date at the top changes with it and the new version applies from the date shown.