Privacy Policy – Settr
Last Updated: November 21, 2025
This Privacy Policy explains how Settr (“we”, “us”, “our”) collects, uses, and protects personal data of influencers who collaborate with brands through our platform and services (“Services”). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. If you do not agree with this policy, please do not use our Services.
1. Who We Are (Data Controller)
Settr
Email: support@settr.com
Address: Birger Jarlsgatan 93 A, 113 56 Stockholm, Sweden
We act as the Data Controller for all personal data processed in connection with our influencer collaboration services.
2. Personal Data We Collect
A. Information you provide directly
- Email address (used for communication and identifying your unique access link)
- Shipping address (to send products you request)
- Birth date (to send birthday wishes)
- Product preferences and collaboration selections
- Any information you send to us voluntarily (e.g., email replies, customer support messages)
B. Information collected from public sources
Publicly available email addresses listed on your social media profiles or websites, where you intentionally publish them for contact purposes.
C. Automatically collected information
Basic technical data (IP address, browser type) through cookies and analytics tools. A cookie consent banner is shown to all European users.
3. How We Use Personal Data (Purpose & Lawful Basis)
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Sending products to you | Shipping address | Contract (performance of influencer collaboration) |
| Identifying you and providing access via unique links | Email address | Legitimate Interest (secure authentication without accounts) |
| Communicating with you about campaigns | Email address | Contract / Legitimate Interest |
| Sending birthday greetings | Birth date | Consent |
| Re-contacting you for future campaigns | Email address, shipping address, public contact email, collaboration history | Legitimate Interest |
| Compliance with tax, fraud, and legal obligations | All personal data as needed | Legal Obligation |
4. Data Retention
- Shipping address & birth date → retained indefinitely to reconnect with you for future collaborations, unless you request deletion.
- Email address & communication history → kept indefinitely for operational purposes.
- Cookie and analytics data → as defined in our cookie tool's retention schedule.
You may request deletion at any time (see Section 9).
5. Who We Share Data With
- Shipping & logistics partners (to deliver products)
- Email service providers (to send unique access links & communications)
- Analytics providers (cookie-based, with consent when required)
- Brand partners only when necessary for collaboration tracking (never your full personal data unless explicitly required)
We do not sell personal data.
6. International Data Transfers
If we transfer data outside the EEA/UK (e.g., to US-based service providers), we use Standard Contractual Clauses (SCCs) and additional safeguards where required.
7. Cookies & Tracking Technologies
We use essential cookies and, with your consent, analytics and marketing cookies. You can customize or withdraw your consent using our cookie banner at any time.
8. Security Measures
We implement appropriate technical and organizational measures including encrypted data transmission, access control and staff confidentiality agreements, secure hosting and infrastructure monitoring, and vendor compliance checks. However, no online data transmission is entirely secure.
9. Your Rights Under GDPR
As an EU/UK data subject, you have the right to:
- Access your data – Request a copy of all personal data we hold about you.
- Rectification – Request corrections to inaccurate or incomplete data.
- Erasure (“Right to be Forgotten”) – Request that we delete your data. We will delete all personal data except that required for legal obligations.
- Restriction of processing – Request that we limit how we use your data.
- Data portability – Receive your data in a structured, commonly used format.
- Objection – Object to processing based on our legitimate interests.
- Withdrawal of consent – If you have given consent (e.g., birth date use), you may withdraw it at any time.
How to exercise your rights
Simply email: support@settr.com
We will respond within 30 days.
You must contact us from the same email address associated with your influencer collaboration so we can verify your identity.
10. Contacting Us
For privacy-related requests or questions: support@settr.com
For EU residents, you may also lodge a complaint with your local Data Protection Authority (DPA).