Media contact privacy notice

For journalists, editors, producers, podcasters and creators whose professional details we hold. This is the notice Article 14 of the GDPR and UK GDPR says we owe you, written so you can actually read it.1

Who we are

Mainlore, Inc., . We are a publicity and reputation agency. Our clients are founders, creators, brands and small practices. We contact journalists on their behalf, one at a time, under the limits in our Journalist Promise. For anything about your data, write to privacy@mainlore.com.

What we hold about you

Professional fields only: your name, the outlet or outlets you write for, your beat and topics, your work email or the public contact you have chosen, your professional social profiles where public, links to your published work, and a record of any contact between us, including your preferences and any opt-out. We do not hold personal contact details, anything about your private life, or any special-category data, and we do not infer protected characteristics.

Where we got it

From publicly available sources: your bylines, your outlet's masthead and contact pages, your professional social profiles, media databases we license, and anything you have told us directly or set in the preference centre. We do not scrape behind logins or in breach of a platform's terms.

Why we are allowed to

Our lawful basis is legitimate interest (Article 6(1)(f)).2 Our interest is helping clients bring relevant stories to the journalists who cover them. Your interest is in not being bothered, and in your work being read and responded to. We have weighed these and concluded that limited, relevant, one-to-one contact under published limits is reasonable, and that anything beyond it is not; those limits (one pitch and one follow-up, a seven-day cooldown, verified contacts, quiet hours, instant opt-out) are enforced in our systems, not left to good intentions. Our balancing test is documented and available on request.

Profiling

We tag your beat and topics, from your public work, so that we pitch you about fewer things, not more. That is profiling in the legal sense. You have the right to object to it, and if you do we will stop and keep only your contact preferences.

Who sees it

Our staff, and our clients' approved users, under contract, inside our system, for the purpose of pitching you within our limits. Clients cannot export our contact records. We do not sell, rent or share your details with anyone else. Our sub-processors (hosting, model provider, email delivery) process data on our instructions and are listed in our privacy policy.

How long we keep it

We review your record every 12 months. We delete it 24 months after the last time we confirmed it was current. If you opt out or ask to be deleted, we delete your record and keep only a one-way hash of your address, indefinitely, so that we cannot add you again by accident. That hash cannot be turned back into your address.

Your rights

You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, give you a copy, and you can object at any time to being contacted; that objection is absolute and we act on it immediately.3 Use the preference centre at mainlore.com/prefs (no account needed; the link in any email from us opens it) or write to privacy@mainlore.com. You can complain to the Information Commissioner's Office in the UK, to your national data protection authority in the EU, or to your state attorney general in the US.

Where we send it

Some of our sub-processors are in the United States. Transfers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the Data Privacy Framework where the recipient is certified.4

First contact

The first time we write to you, the email tells you how we got your details and links here, and it has a separate, prominent line for objecting to any further contact. That is not us being polite; it is Article 14(3) and Article 21(4), and we have built it into the template so it cannot be left out.5

Questions

privacy@mainlore.com. A person, within 30 days, usually much faster.