Privacy Policy

1. Who we are

PRFL is operated by PREMIUM. For data protection purposes, PREMIUM is responsible for personal information collected through PRFL where it decides how and why that information is used.

2. Information we collect

We may collect information you provide when creating or managing a PRFL Profile, including your name, business name, email address, phone number, billing details, Profile content and support messages.

We may also collect technical information such as IP address, browser or device information, security logs and basic usage information needed to operate and protect the service.

3. How we use your information

We use personal information to create and manage accounts, provide and host Profiles, process subscriptions, deliver QR sticker packs, provide support, keep the service secure, communicate about your account and meet legal or regulatory obligations.

4. AI assisted first setup

If you choose Help me set it up, the answers you provide are sent to our AI service provider to prepare a first draft of selected Profile text. The feature is optional and the normal manual setup remains available.

The AI setup does not publish your Profile, does not receive account credentials, and cannot take actions on your behalf. You review the proposed Profile before choosing whether to save it.

5. AI assisted support

Eligible paid accounts may use AI assisted first line support. When you use it, the service may process your support message, a limited recent conversation history and a restricted account snapshot needed to answer common PRFL questions, such as Profile status, photo allowance, domain connection status, QR availability, sticker request status and customer facing subscription status.

The support assistant is not given general access to PRFL databases, source code, infrastructure, account credentials or other customers. It cannot make privileged account changes. Issues involving billing disputes, privacy rights, security concerns or other matters requiring judgement are passed to human support.

We may retain support conversations, limited AI usage information and security events where reasonably necessary to provide support, prevent abuse and improve the safety and reliability of the service.

6. Our lawful bases

Depending on the purpose, we rely on contract, legal obligation, legitimate interests and, where required, consent.

Our legitimate interests can include operating and improving PRFL, preventing misuse, protecting the service and communicating with customers about matters relevant to their account.

7. Public Profile information

Information you choose to publish on your PRFL Profile is intended to be public. This may include your business name, phone number, email address, service areas, images, reviews, accreditations and other business information.

You should not publish personal information that you do not want members of the public or search engines to access.

8. Who we share information with

We may use trusted service providers to operate PRFL, including hosting, database, authentication, AI processing, payment, email, security and delivery providers. They may process personal information only as needed to provide those services.

We may also disclose information where required by law, to protect legal rights, or in connection with a business sale, restructuring or transfer.

9. Payments

Payments are processed by our payment provider. We do not need to store your full payment card details on PRFL systems. The payment provider will process information under its own privacy terms as well as on our instructions where applicable.

10. International transfers

Some service providers may process information outside the UK. Where this happens, we use appropriate safeguards where required by UK data protection law.

11. How long we keep information

When a subscription ends, Profile and account data may normally be retained for recovery for up to 90 days after service access ends. This allows a customer to restart without rebuilding the Profile from scratch.

A cancellation is not a request for permanent deletion. You can request permanent account deletion separately. We will verify and process that request, although records may still be retained where required for legal, accounting, tax, fraud prevention or security purposes.

Other information is kept only for as long as reasonably necessary for the purpose for which it is used.

12. Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to the use of your personal information, and to receive certain information in a portable format.

You can also withdraw consent where processing depends on consent. These rights are not absolute and may not apply in every situation.

13. Complaints

Please contact us first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office.

14. Security

We use reasonable technical and organisational measures designed to protect personal information. No internet service can guarantee absolute security.

15. Changes to this policy

We may update this policy as PRFL, our providers or applicable law changes. The latest version will be published on this page.