Privacy Policy

1. Roles and Responsibilities

• Page1 as data controller: We act as a data controller for the personal data of our customers and their users (e.g., account information, login credentials, billing data, usage logs). We determine how this data is processed to operate, secure, and improve the Service.
• Customer as data controller: Each customer organization acts as the data controller for the personal data of its own end-customers or contacts processed through the Service. In this context, Page1 acts as a data processor on behalf of the customer.
• This means:
  • Page1 is responsible for user data directly related to providing the Service.
  • Customers are responsible for ensuring that their processing of end-customer data through the Service complies with applicable laws (e.g., GDPR, marketing rules).

2. Information We Collect

We may collect the following types of personal data:

A. Data related to the Service

• Customer and user data: name, email, phone number, company, role, account credentials.
• Billing and subscription data: payment details, invoices, subscription plan.
• Service usage data: features used, actions taken within the Service, engagement metrics.
• Technical data: IP address, device type, browser type, operating system, cookies.

B. Data outside the Service

• Newsletter subscriber data: name and email address provided when subscribing to our newsletter, along with your marketing preferences. We use this data to send you product updates, insights, and marketing communications.
• Prospective customer and CRM data: contact details and professional information of potential customers (e.g., name, email, phone number, job title, company, LinkedIn profile, communication history). This data may come from:
  • direct interactions with you (e.g., demo requests, contact forms, event sign-ups),
  • publicly available sources (e.g., company registers, LinkedIn), or
  • trusted third-party providers.

  We use this data to manage leads, track outreach, and develop business opportunities in a B2B context.

We do not intentionally collect sensitive personal data.

3. How We Use Personal Data

We use personal data for the following purposes:

A. Data related to the Service

• To provide and operate the Service.
• To manage customer accounts, subscriptions, and billing.
• To maintain security and prevent misuse.
• To provide customer support and respond to inquiries.
• To send updates and product-related communications.
• To comply with legal obligations (e.g., tax and accounting).

B. Data outside the Service

• Newsletter subscriber data: to send you newsletters, insights, product updates, and marketing communications you have subscribed to.
• Prospective customer and CRM data: to manage and follow up on leads, engage in B2B sales outreach, and build potential customer relationships, always respecting applicable marketing laws and offering opt-out options.

4. Legal Basis for Processing

We rely on the following legal bases under GDPR:

• Performance of a contract (providing and supporting our SaaS platform).
• Consent (e.g., newsletter subscriptions and marketing communications based on opt-in).
• Legitimate interests (e.g., improving services, ensuring security, and contacting prospective customers in a B2B context where we believe there is a relevant business interest).
• Legal obligations (e.g., compliance with tax or accounting rules).

We have carried out a balancing test to make sure our legitimate interests do not unfairly impact your rights. In practice, this means:

• We only use business contact details in a B2B setting, in ways people would reasonably expect.
• We limit data collection to what is necessary and give you a clear right to opt out at any time.

5. Data Sharing and Sub-Processors

We may share data with trusted third parties who help us operate the Service, such as hosting providers, communication platforms, or analytics services.

When acting as a data processor, Page1 may also engage sub-processors to deliver parts of the Service. We maintain an up-to-date list of sub-processors, available upon request. All sub-processors are bound by contractual obligations to process data securely and in compliance with GDPR.

We never sell personal data.

6. International Transfers

We primarily process and store personal data within the EU/EEA. If transfers outside the EU/EEA occur, we implement appropriate safeguards (such as Standard Contractual Clauses) to ensure an adequate level of protection.

7. Data Retention

We retain personal data only as long as necessary for the purposes set out in this Privacy Policy or as required by law.

• Customer and user data: retained for the duration of the subscription and deleted or anonymized within a reasonable period after termination, unless longer retention period is required by law.
• End-customer data (processed on behalf of a customer): retained and deleted in accordance with the customer's instructions, as Page1 acts as a data processor in this context.
• Newsletter subscriber data: retained until you unsubscribe from the newsletter or withdraw your consent. Upon unsubscribing, your email address will be removed from our mailing list without undue delay, unless its retention is required by law.
• Prospective customer data: contact details of potential customers (e.g., leads in our CRM, contacts collected through the Page1 platform, or obtained from publicly available sources such as company registers or LinkedIn) are retained for as long as necessary to pursue legitimate business opportunities. If a prospect objects to processing or opts out of communications, their data will be removed from our active marketing systems without undue delay, while we may retain minimal information to ensure that we do not contact them again.

8. Your Rights

Under the GDPR, you have a number of rights regarding your personal data. You can exercise these rights at any time by contacting us at info@page1.com. Your rights include:

• Right of access – You can request a copy of the personal data we hold about you, together with information about how and why we process it.
• Right to rectify your data – You can ask us to correct or update inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten") – You can ask us to delete your personal data where there is no longer a valid reason for us to keep it.
• Right to restriction of processing – You can request that we temporarily stop processing your data in certain circumstances (e.g., if you contest its accuracy).
• Right to object – You can object to our processing where it is based on our legitimate interests (e.g., prospect outreach). If you object, we will stop using your data for this purpose immediately.
• Right to data portability – You can ask to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
• Right to withdraw consent – Where we rely on your consent (e.g., newsletter subscriptions), you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint – You can make a complaint with your local Data Protection Authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

If we process your personal data as a processor on behalf of another organization, please direct your request to the organization, which acts as the data controller.

9. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: