Paylock LTD Privacy Policy

Last updated: April 18, 2025

Paylock LTD ("Paylock", "we", "us") operates a pay‑per‑download content platform at paylock.co. Uploaders register, upload digital files, and set a price. Downloaders pay to access and download those files. This Privacy Policy explains how we collect, use, disclose, protect, and retain your personal data.

Registered office: 71‑75 Shelton Street, Covent Garden, London, WC2H 9JQ (Company No. 12345678). For privacy inquiries, email contact@paylock.co.

Scope and applicability

  • Uploaders: Individuals who register and upload files for pay‑per‑download.
  • Downloaders: Individuals who purchase and download files.
  • Visitors: Unregistered users browsing public areas of the site.

1. Definitions

  • Account: Your registered profile secured by email and password.
  • File: Any digital asset (document, image, video, etc.) uploaded by an Uploader.
  • Download page: A unique URL where a Downloader pays and retrieves a file.
  • Personal data: Information relating to an identified or identifiable individual.
  • Payment processor: Third‑party services (Stripe, PayPal) used to handle transactions.

2. Personal data we collect

We collect personal data when you register, upload, purchase, or otherwise interact with the platform:

  • Registration: Name, email address, password.
  • Profile and contact: Profile photo, optional bio.
  • Transaction data: Payment method details, amounts, dates, payout records.
  • File metadata: Upload timestamps, file names, sizes, types.
  • Usage and device: IP address, browser type, device identifiers, session duration, pages visited.
  • Communications: Support messages, email notifications.
  • Cookies and tracking: Session cookies, analytics identifiers (Google Analytics, Mixpanel).

3. How we use your data

  • Account management: Create, secure, and administer your account.
  • Payment processing: Facilitate purchases, payouts, refunds, and dispute handling.
  • Content delivery: Generate secure download links and monitor file access.
  • Communication: Send transactional emails, support replies, and service notices.
  • Fraud prevention: Detect suspicious activity, enforce our Terms of Use, and protect platform integrity.
  • Analytics and improvement: Analyse usage trends to enhance the platform.
  • Legal compliance: Meet tax, accounting, anti‑money‑laundering, and other legal obligations.

4. Legal basis for processing

Under GDPR and the UK DPA we process your personal data on these grounds:

  • Performance of a contract (payments, downloads, payouts).
  • Compliance with legal obligations (tax reporting, dispute resolution).
  • Legitimate interests (fraud prevention, platform security, service improvement).
  • Consent (marketing communications where you opt in).

5. Data sharing and disclosure

  • Payment processors to complete transactions and issue refunds.
  • Hosting and CDN providers (AWS, Cloudflare) for secure file storage and delivery.
  • Analytics providers for aggregated, anonymised insights.
  • Law enforcement or courts when required by legal process.
  • Potential buyers or investors under non‑disclosure agreements in a merger or acquisition.

6. International data transfers

Personal data is mainly stored in the United Kingdom and the European Union. Transfers outside these areas are protected with EU‑approved Standard Contractual Clauses or equivalent safeguards.

7. Data retention

We keep personal data only as long as necessary:

  • Account data until you delete your account.
  • Transaction records for at least 10 years (tax and audit requirements).
  • Anonymised analytics data indefinitely.

8. Your rights

You may access, correct, erase, restrict, or port your data, and withdraw consent. Email contact@paylock.co to exercise any right.

9. Cookies and tracking

We use essential cookies for login and download security, plus optional cookies for analytics and marketing. Adjust preferences via our cookie banner or your browser settings.

10. Security measures

We secure data with TLS in transit, AES‑256 at rest, two‑factor authentication, regular security audits, and strict role‑based access controls.

11. Data breach notification

If a breach occurs we will notify affected users within 72 hours and report to the UK Supervisory Authority when required.

12. Changes to this policy

We may update this policy. When we do, we will post the new version here and update the “Last updated” date. Continued use of the platform means you accept the changes.

Contact us

Paylock LTD
71‑75 Shelton Street, Covent Garden, London, WC2H 9JQ
contact@paylock.co