Privacy Policy
Version: 20 October 2026
Working version, 20 October 2026.
1. Controller
The controller of your personal data is EdgeWorks LLC, trading as EntityLinks, whose registered address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. Contact: [email protected].
2. Data collected
Account data (agency contact details; your business website or profile; your confirmation that you are buying for your business, with the date and the wording you agreed to; and your VAT or GST number if you give one), intake data (end-client business information supplied by the agency), payment metadata (processed by Stripe; card details never touch our servers), a record of account activity in the portal (see "What we log" below), website analytics (including recordings of how our pages are used) and advertising data, subject to your cookie choice (see "Cookies" below), a record of sign-ups and purchases that came from our ads (see "Measuring our advertising" below), and applications already received through our former founding-agency application form (name and work email address, submitted voluntarily through a form that is no longer on this site).
4. Measuring our advertising
If you reach us from one of our ads, the link carries a reference from the ad platform. This site passes that reference on in the page address when you go to open an account; it is not stored on your device. When you open an account or buy credits, our portal tells Meta that a sign-up or purchase happened. It sends that reference, the amount (for a purchase), a scrambled (hashed) copy of your email address and country, your account reference, and the IP address and browser you used, so Meta can match the event to the ad and tell us which ads work. We never send Meta your clients' details, order contents or anything you enter about your projects. Because accounts are business accounts, we do this on the basis of legitimate interest in measuring our own advertising. You can object at any time by emailing [email protected].
5. Purposes
Service delivery, billing, service notices, handling the founding-agency applications we already hold, understanding how the site is used and measuring our advertising, and, where you have consented, sending emails about the founding-agency programme and pilot.
6. Lawful bases
Contract and legitimate interest for service delivery and billing. Consent for programme emails, given via the form's consent box and withdrawable at any time by unsubscribing or contacting us. Consent for analytics and advertising cookies for visitors in the UK, the EU, the EEA and Switzerland, withdrawable at any time through Cookie settings. Elsewhere, legitimate interest, with the same Cookie settings to switch them off. Legitimate interest for reporting sign-ups and purchases to Meta (see "Measuring our advertising" above).
7. How we contact you
Account holders receive transactional emails about their orders and account. Because accounts are business accounts, we also send product and pricing updates on the basis of legitimate interest. Every such email carries an unsubscribe link, and unsubscribing never affects transactional email. To keep our customer records and send these updates, we use a customer relationship and email platform that processes data on our behalf. It holds your name, business name, email address and country, and a short summary of your account, such as when you joined, your credit balance and how many orders you have placed. It never receives details of your clients or their websites.
8. What we log
We keep a record of account activity in the portal: signing in, orders placed, credits bought or granted, downloads and messages. Sign-in records include the IP address the request came from and the browser used. All of it is kept for service, security and support purposes, for as long as the account exists and for the period set out in our data retention policy.
9. Checking EU VAT numbers
If you are in the European Union, we check your VAT number on VIES, the European Commission's VAT number validation service, when you save it and each time you buy credits. We send VIES the number and its country. VIES tells us whether the number is valid and may return the business name and address registered to it. We keep the result, and the date of each check, as our record of why no VAT was charged on your purchase. The lawful basis is our legal obligation to keep tax records and our legitimate interest in selling only to businesses.
10. Retention
Account life plus statutory periods; intake data deleted or returned on request after site expiry. Programme submission data is retained while the programme runs, or until consent is withdrawn, whichever comes first.
11. Processors
Stripe (payments), Cloudflare (hosting, and loading analytics and advertising tags through Zaraz), Railway (application infrastructure), Resend (transactional email: account verification, invitations, order and renewal notices), Google (Sheets and Apps Script), where applications received through our former founding-agency form are stored, Google (Analytics), Microsoft (Clarity, site usage analytics), Meta Platforms (advertising measurement), a customer relationship and email platform, for customer records and product and pricing updates, and the European Commission (VIES VAT number validation), for EU buyers only. International transfers under standard contractual clauses. Google, Microsoft and Meta may process data in the United States, under their standard contractual clauses or the Data Privacy Framework.
12. Your rights
UK/EU GDPR rights are listed with our contact route: [email protected].