Privacy Policy
Last updated 31 August 2026.
Who is responsible for your information?
A Million Good Reasons operates this service. Privacy enquiries can be sent to privacy@amilliongoodreasons.co.uk. Legal-entity and postal details will be added to this policy before commercial public launch where required.
What we collect
When an advertiser uses the site we may collect display/organisation name, advertiser type, contact name, email, phone, website or social link, search keywords, selected Canvas/package/position, artwork, public wording, booking/payment status and account preferences. Advertisers can be businesses, organisations, creators or individuals.
Why we use it
We use information to provide reservations and bookings, administer payments, review and publish approved artwork, provide advertiser accounts, link paid booking history to a verified account, operate optional buyer charity votes, send requested transactional messages, respond to enquiries, maintain records, protect the service and comply with law.
Marketing preferences
Buying advertising does not automatically subscribe you to marketing. New-Canvas alerts are optional. You can change those preferences in your advertiser account or unsubscribe from future marketing messages.
Our lawful bases
Depending on the interaction, we expect to rely on steps taken at your request before entering a contract, performance of a contract, legitimate interests for proportionate administration/security, consent for optional marketing, and legal obligation where records must be retained.
Artwork uploads
Advertiser artwork is stored privately while being reviewed. Upload only material required for your advert. Do not upload identity documents, payment information, customer lists, special-category data or other unnecessary sensitive information.
Service providers
We use specialist providers including Netlify for website hosting/server functions, Supabase for database/authentication/storage, Resend and/or configured mail providers for email, and Stripe for payment processing. Card details are entered directly into Stripe checkout and are not stored by A Million Good Reasons.
How long we keep information
Temporary holds and abandoned draft data are retained only as long as reasonably necessary to complete, troubleshoot or protect the booking journey. Confirmed booking, advertiser, artwork, communication, voting and accounting records may be retained as needed to operate the Canvas, preserve the archive, show an advertiser's history and meet legal obligations.
Sharing
We do not sell personal information. We share it only where needed to operate the service, fulfil a booking, process payment/email, protect the service or comply with law. Bulk advertiser communications are prepared so recipients do not see other advertisers' email addresses.
Your rights
UK data-protection law may give you rights including access, correction, erasure, restriction, portability and objection. Contact privacy@amilliongoodreasons.co.uk. You may also complain to the UK Information Commissioner's Office.
Browser storage and analytics
Essential browser storage is used for active reservations and secure authentication. Non-essential advertising/tracking technologies will not be enabled without appropriate notice or consent controls where required.
Security
We use HTTPS, separated public/server credentials, access controls and reasonable technical and organisational safeguards. No online service can guarantee absolute security, so we minimise the personal and sensitive information requested.