Last updated: 1 January 2026
This GDPR statement explains how TrackBooth supports compliance with the EU General Data Protection Regulation (GDPR) and similar data-protection laws, both in how we run our own business and in how we help customers meet their obligations when they use the platform. It should be read alongside our Privacy Notice and Data Processing Addendum.
For personal data about our own customers, prospects and website visitors, TrackBooth acts as the data controller. For end-user data that customers capture and process through their tracking links and campaigns, the customer is the controller and TrackBooth acts as a processor on their behalf. The terms of that processing are set out in our Data Processing Addendum.
We aim to process personal data lawfully, fairly and transparently; to collect it for specified, legitimate purposes; to limit it to what is necessary; to keep it accurate; to retain it only as long as needed; and to protect it with appropriate security. These principles are built into how the platform is designed and operated.
Where the GDPR applies, individuals have rights to access, correct, delete and port their data, and to object to or restrict certain processing. Where TrackBooth is the controller, individuals can exercise these rights by contacting us. Where TrackBooth is the processor, we direct requests to the relevant customer and assist them in responding, as required under our Addendum.
Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses, where required by law.
We use a limited set of vetted sub-processors to operate the service, each bound by data-protection obligations consistent with the GDPR. A current list is available on request, and we provide notice of intended changes so customers can object on reasonable grounds.
We apply technical and organizational measures appropriate to the risk, including encryption in transit, role- and field-level access controls, partner data isolation and audit logging. More detail is on our Security page.
Customers who require a signed Data Processing Addendum to support their own GDPR compliance can request one during onboarding or by contacting us at the address below.
For GDPR enquiries or to exercise your rights, contact [email protected].