1. Who We Are
CommissionRoom ("we", "us", "our") is a performance acquisition agency specialising in lead generation, affiliate management, and media buying for regulated financial and iGaming brands. Our website is commissionroom.com.
For any privacy-related enquiries, contact us at: hello@commissionroom.com
2. Data We Collect
We collect the following categories of personal data:
- Contact information: name, email address, company name, phone number
- Business information: industry vertical, monthly acquisition budget, current challenges
- Technical data: IP address, browser type, device information, pages visited
- Marketing data: UTM parameters, referral source, campaign information
- Communications: messages submitted through our contact or enquiry forms
3. How We Use Your Data
We use your personal data to:
- Respond to your enquiries and schedule strategy calls
- Assess whether our services are a fit for your business
- Send relevant communications about our services (with your consent)
- Improve our website and marketing effectiveness
- Comply with legal obligations
- Detect and prevent spam and fraudulent submissions
4. Legal Basis for Processing
We process your data on the following legal bases under GDPR:
- Consent: when you submit a form and explicitly agree to our privacy policy
- Legitimate interests: for analytics, fraud prevention, and improving our services
- Legal obligation: where required by applicable law
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Service providers: email delivery (Resend), analytics (Google Analytics), bot protection (Cloudflare Turnstile), database hosting (Neon)
- CRM tools: HubSpot, for managing client relationships
- Legal authorities: where required by law or regulation
All third-party processors are bound by data processing agreements and operate under appropriate legal frameworks.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described above, or as required by law. Enquiry data is typically retained for 24 months. You may request deletion at any time.
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at hello@commissionroom.com.
8. Cookies
We use cookies and similar tracking technologies. For full details, please see our Cookie Policy.
9. International Transfers
Some of our service providers are based outside the EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.
11. Contact
For any questions about this Privacy Policy or how we handle your data: