Privacy Policy

Cognizance Plus is the controller of the personal data described here. You can reach us at 248-49 Jericho Turnpike, Bellerose, NY 11427, United States. If you have a question about this policy or want to exercise a right under it, email support@socialarrives.com.

Order data: the email address you provide, the public link or username you submit, the service and quantity ordered, and the amount paid.

Account data, if you create an account: your email address and a password stored only as a salted hash, never as text we can read.

Support data: the contents of messages you send us, and the order they relate to.

Payment data: we do not receive or store card numbers. Payment is processed by PayPal, who provide us with a transaction identifier and confirmation of payment. PayPal's own privacy policy governs what they collect.

Technical data: IP address, browser type and pages visited, collected in ordinary server logs and used for security, fraud prevention and aggregate traffic analysis. Where we record a failed sign-in or a failed order lookup to limit abuse, we store a one-way hash of the address rather than the address itself.

We never ask for, and have no way to receive, the password to the social media account you are promoting. There is no login step and no app to authorise.

We do not use advertising cookies, third-party tracking pixels, or cross-site profiling.

We do not buy personal data from third parties, and we do not sell yours.

To fulfil your order, which requires passing the public link and quantity to the supplier delivering it, and to contact you about that order. Legal basis: performance of a contract with you.

To prevent fraud, abuse and unauthorised access, including rate limiting and security logging. Legal basis: our legitimate interest in keeping the service and our customers safe.

To meet accounting, tax and record-keeping obligations. Legal basis: compliance with a legal obligation.

To answer support requests and improve the service. Legal basis: legitimate interest in running and improving a service you have asked to use.

Suppliers, limited to the public link and the quantity ordered. Suppliers do not receive your email address or payment details.

PayPal, for payment processing. Our hosting, database and email providers, acting as processors on our instructions and bound to protect it.

Authorities, where we are legally required to disclose, and professional advisers where necessary.

If our business is transferred, the acquirer, on the basis that this policy continues to apply.

Our providers may process data outside the country where you live. Where data leaves the UK or EEA, we rely on an adequacy decision or on standard contractual clauses with the provider.

If you would like details of the safeguards that apply to a particular transfer, ask at support@socialarrives.com.

Order and transaction records are kept for as long as required for accounting and tax purposes, then deleted or anonymised.

Support conversations are kept while they are useful for handling repeat issues, then deleted.

Server logs and abuse-prevention records are retained for a short rolling period and then discarded.

If you close your account, we delete the account and its credentials, but we retain the minimum order records we are legally required to keep.

Traffic to the site is encrypted in transit. Passwords are stored using a memory-hard hashing function with a per-user salt, so they cannot be recovered from the database.

Credentials we hold for payment and delivery providers are encrypted at rest, so that access to the database alone does not expose them.

Access to production data is limited to the people who need it to run the service.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your rights, we will notify you and the relevant authority as the law requires.

Depending on where you live, you may have the right to access the data we hold about you, to correct it, to have it deleted, to restrict or object to processing, to withdraw consent where we rely on it, and to receive a copy in portable form.

To exercise any of these, email support@socialarrives.com. We will respond within the period required by applicable law, and we will not charge you for a reasonable request. We may ask you to confirm the email address an order was placed with, so that we do not disclose data to the wrong person.

If you are in the UK or EU and are unhappy with our response, you may complain to your data protection authority. If you are in California, you may exercise the rights available to you there, including the right not to be discriminated against for doing so.

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We do not make decisions producing legal or similarly significant effects about you by automated means. Automated checks may flag an order for review, but a person decides what happens next.

We use only the cookies necessary to operate the site — a session cookie if you sign in, and security cookies. We do not use advertising cookies or third-party tracking pixels.

Because these cookies are strictly necessary to provide a service you have asked for, they do not require consent under the ePrivacy rules. You can still block cookies in your browser, but signing in will not work if you do.

We may update this policy. The date at the top of the page shows when it last changed, and material changes will be highlighted on the site.