Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Reely Media Ltd ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website reely-media.com (the "Site") and purchase digital content from us. We are committed to protecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

  • Reely Media Ltd
  • Company Number: 16460844
  • Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
  • Email: privacy@reely-media.com

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account.
  • Payment Information: Payment card details, PayPal account information, or cryptocurrency wallet addresses. Payment card data is processed directly by our payment processors (Stripe, PayPal, Coinbase Commerce) and is never stored on our servers.
  • Communications: Any information you provide when contacting us for support.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, time spent, clicks, referring URLs, and search queries.
  • Device Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
  • Cookies: Essential cookies for authentication and session management. See our Cookie Policy below.

3. How We Use Your Information

We process your personal data for the following purposes and legal bases:

  • Contract Performance: To process your purchases, deliver digital content, manage your account, and provide download access.
  • Legitimate Interest: To improve our Site, analyse usage patterns, prevent fraud, and ensure security.
  • Legal Obligation: To comply with tax, accounting, and regulatory requirements.
  • Consent: To send marketing communications (only with your explicit opt-in consent, which you can withdraw at any time).

4. Payment Processing

We use the following third-party payment processors:

Your payment information is transmitted directly to these processors via encrypted connections. We receive only a transaction reference, amount, and confirmation status — never your full card number or bank details.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Payment Processors: Stripe, PayPal, and Coinbase Commerce for transaction processing.
  • Hosting Providers: Vercel (website hosting) and Cloudflare (CDN and security).
  • Email Provider: Resend (transactional emails such as purchase confirmations).
  • Analytics: Privacy-focused analytics to understand site usage (no personal profiling).
  • Legal Requirements: Where required by law, regulation, or legal process.

6. International Transfers

Some of our service providers are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or adequacy decisions.

7. Data Retention

  • Account Data: Retained for as long as your account is active, plus 6 years after account deletion for tax and legal compliance.
  • Transaction Records: Retained for 6 years as required by HMRC.
  • Usage Data: Retained for up to 26 months, then anonymised or deleted.
  • Marketing Preferences: Until you withdraw consent.

8. Your Rights (UK GDPR)

Under the UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten") where applicable
  • Restrict processing in certain circumstances
  • Data Portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent at any time, without affecting lawfulness of prior processing

To exercise any of these rights, contact us at privacy@reely-media.com. We will respond within 30 days.

9. Cookies

We use the following types of cookies:

  • Strictly Necessary: Authentication tokens, session management, CSRF protection. These cannot be disabled.
  • Functional: Preferences such as currency and language settings.
  • Analytics: Privacy-focused analytics to understand usage patterns. No personal profiling.

We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • TLS/SSL encryption for all data in transit
  • Encrypted storage for sensitive data at rest
  • Row-Level Security (RLS) on our database
  • Regular security audits and vulnerability assessments
  • Access controls limiting data access to authorised personnel only

11. Children's Privacy

Our Site is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Site after changes constitutes acceptance.

13. Contact & Complaints

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):