Privacy Policy

1. Introduction & Scope

NegativePublicRelations.com ("we," "us," or "our") provides online reputation management, negative PR defense, crisis communications, and AI-search reputation protection services. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, submit a confidential inquiry, or engage our services.

We are committed to transparency and to complying with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other applicable privacy laws. This policy applies to all visitors, prospective clients, and active clients.

2. Information We Collect

We collect only the minimum information necessary to respond to inquiries, deliver services, and operate the site securely. We do not sell your personal information.

• Contact data you provide: name, email address, phone number, and organization, submitted via inquiry forms, email, or Telegram.
• Reputation concern details: the nature of the reputation issue, URLs or platforms involved, and related context you share so we can assess your matter.
• Account credentials: if you are granted access to a client portal, the minimum authentication data needed to secure your account.
• Technical data: IP address, browser type, device information, pages visited, and referral source, collected via standard server logs and analytics.
• Communications: records of correspondence (emails, messages) so we can provide continuity of service and support.

3. How We Use Your Information

We process personal information for the following specific, lawful purposes:

• To respond to your confidential inquiry and assess whether we can assist with your reputation matter.
• To deliver and manage the reputation management services you engage, including monitoring, reporting, and remediation coordination.
• To communicate with you about your matter, provide updates, and send service-related notices.
• To maintain security, prevent fraud, and comply with legal obligations.
• To improve our website, services, and content (using aggregated, de-identified analytics).
• With your explicit consent, for any other purpose you authorize.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process personal data only on one of the following lawful bases:

• Consent: where you have given clear, affirmative consent (e.g., submitting an inquiry or subscribing).
• Contract performance: processing necessary to take steps before entering a service agreement and to perform it once engaged.
• Legitimate interests: our legitimate business interests in operating the site securely and responding to inquiries, balanced against your rights.
• Legal obligation: where we are required to retain or disclose data under applicable law.

5. Cookies & Tracking Technologies

We use essential cookies required for site operation and security. We may use analytics cookies to understand aggregate usage in a privacy-preserving way. We do not use cookies to sell your data or build cross-site advertising profiles.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect site functionality.

6. Data Sharing & Disclosure

We do not sell your personal data. We share data only in limited circumstances:

• Service providers: trusted processors (e.g., hosting, email delivery, analytics) under written agreements requiring confidentiality and GDPR/CCPA-compliant handling.
• Legal compliance: where required by law, court order, or to protect rights, safety, or property.
• Legal coordination: where you engage us to coordinate removal with external counsel or platforms, we share only the minimum necessary and under confidentiality.
• Business transfers: in the event of a merger or asset sale, data may transfer subject to this policy and legal requirements.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described here, comply with legal obligations, resolve disputes, and enforce agreements. Inactive inquiry data is typically deleted or de-identified within 24 months. Client matter data is retained for the duration of the engagement plus a reasonable archival period required for legal and professional accountability, then securely deleted or anonymized.

8. Data Security

Reputation matters are inherently sensitive. We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls limited to authorized personnel on a need-to-know basis, and secure handling of confidential client information.

No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures and to respond promptly to any security incident.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure (Right to Be Forgotten): request deletion of your data where legally applicable.
• Restriction & Objection: restrict or object to certain processing.
• Data Portability: receive your data in a structured, machine-readable format (GDPR).
• Opt-out: opt out of the sale or sharing of personal data (CCPA/CPRA). We do not sell data.
• Withdraw consent: at any time, without affecting prior lawful processing.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us for prompt deletion.

11. International Data Transfers

We may process data across borders (e.g., where hosting or service providers are located outside your country). Where the GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses, and we transfer only data necessary for the purposes described here.

12. Third-Party Links & Content

Our site may link to external sources (e.g., government archives, news outlets). We are not responsible for the privacy practices or content of third-party sites. We encourage reviewing their policies.

13. Changes to This Policy

We may update this Privacy Policy to reflect legal, operational, or service changes. Material changes will be posted on this page with an updated revision date. Continued use of the site after changes constitutes acceptance of the revised policy.

14. Contact & Data Protection Inquiries

For privacy questions, data requests, or to exercise your rights, contact us at info@digitalbankvault.com. We will respond within the timeframe required by applicable law and acknowledge all legitimate requests within 48 hours.