Privacy Notice

Controller and contact

ICPLeads, Inc., 300 Delaware Ave, Wilmington, DE 19801, USA. Data protection contact: hello@ppwrdeclaration.com. We offer services to customers in the European Union, so the GDPR applies to that processing.

What we collect

• Scope check and enquiry data — name, work email, company name, country, website, and the answers you give about your packaging.
• Case data — the documents you upload (packaging specifications, supplier declarations, test reports, artwork) and correspondence relating to your case.
• Payment data — handled by Stripe. We receive confirmation of payment and identifiers; we never receive or store your full card details.
• Advertising and attribution data — campaign parameters and click identifiers present in the URL when you arrive (for example utm_source, utm_campaign, gclid), so we know which campaigns generate enquiries.
• Technical data — standard server logs generated when you use the site.

Why we use it, and our legal bases

• To deliver the services you buy — performance of a contract, or steps taken at your request before entering one.
• To respond to enquiries and follow up on an applicability check — our legitimate interest in responding to business enquiries about our services.
• To keep records and meet accounting and tax obligations — legal obligation.
• To secure and improve the site — legitimate interest in operating a secure, functioning service.
• To measure advertising and analytics — your consent, given through the cookie banner and withdrawable at any time.

We do not sell personal data and we do not use uploaded documents for any purpose other than delivering your review.

Advertising, Google Ads and analytics

We promote our services through Google Ads. If you consent to advertising cookies, Google Ads conversion tracking and remarketing tags may set cookies or identifiers to measure which campaigns lead to enquiries and to limit ad repetition. If you consent to analytics, we use aggregate measurement to improve the site.

Non-essential tags do not run before consent: advertising and analytics storage are set to denied by default using Google Consent Mode v2. You can change your choice at any time — Cookie settings — or read the full Cookie Policy.

Where Google processes advertising data as an independent controller, see the Google Privacy Policy. We do not use special-category data, and we do not target advertising at children.

Processors we use

• Supabase — database, authentication and private document storage.
• Stripe — payment processing.
• Google (Ads, and analytics where enabled) — advertising and measurement.
• Our hosting and email providers, for delivering the site and correspondence.

International transfers

ICPLeads, Inc. is established in the United States and several of our providers process data there. Transfers of personal data outside the EEA rely on an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified) or on the European Commission's standard contractual clauses, together with appropriate supplementary measures.

Storage and security

Uploaded documents are stored in a private storage bucket that is not publicly accessible. Access is restricted to the specialists working on your case. Data is encrypted in transit and at rest by our infrastructure providers.

Retention

• Enquiry and applicability check data that does not become a case: up to 24 months.
• Case files and deliverables: up to 6 years after completion, to support you if an authority queries the documentation and to meet our record-keeping obligations.
• Advertising and analytics data: up to 14 months, or less where the provider allows.
• Accounting records: as required by applicable tax law.

You can ask us to delete uploaded documents earlier; we will confirm what we can remove.

Your rights

You have the right to access your personal data, to have inaccurate data corrected, to request erasure or restriction, to object to processing based on legitimate interests, to withdraw consent for cookies and advertising, and to data portability where applicable. Contact hello@ppwrdeclaration.com and we will respond within one month. You may also lodge a complaint with your local supervisory authority. California residents may request details of, or opt out of, any sharing of personal information for cross-context behavioural advertising by emailing the same address; we do not sell personal information.

Cookies

Strictly necessary cookies operate the site and complete payments. Analytics and advertising cookies run only with your consent. Details are in the Cookie Policy.

Changes

Last updated: 11 August 2026.