Privacy Policy
Introduction
Last updated: 2025-09-10
Retail Media Manager (“RMM,” “we,” “our,” or “us”) is operated by Corebuilt Labs. We are committed to protecting your privacy and handling your personal data with transparency and care.
This Privacy Policy explains how we collect, use, and safeguard personal data from:
Visitors to the Retail Media Manager website
Customers who use the Retail Media Manager SaaS platform (retailers)
Important: This policy does not apply to the individual retail media webshops created by our customers. Each retailer is responsible for its own privacy policy and compliance.
Our services are not directed at children under the age of 16, and we do not knowingly collect personal data from them.
We operate under the EU General Data Protection Regulation (GDPR) and Danish law.
Data We Collect
Website Visitors
Information you provide via contact forms (name, email, optional phone number)
Newsletter subscription details
Technical data such as IP address, browser type, operating system, and usage information collected through cookies and analytics tools
RMM Customers (Retailers)
Account information (name, business name, email, login credentials)
Billing and payment details (processed through Stripe Connected Accounts — see Stripe’s own privacy policy for details)
Communication records (onboarding, support requests, correspondence)
Platform usage data (logins, configuration actions, and related system activity)
How We Use Personal Data
We process personal data to:
Provide, operate, and maintain the RMM service
Manage customer accounts and billing
Respond to support inquiries and communicate updates about the service
Send marketing communications when you have given consent
Ensure system security and prevent fraud
Meet legal and regulatory obligations
Legal Basis for Processing
We rely on the following legal grounds to process your personal data:
Consent – e.g., when you subscribe to newsletters or accept cookies
Contractual necessity – to create and maintain your account, deliver services, and process payments
Legal obligations – to comply with tax, accounting, and regulatory requirements
Legitimate interests – for security, service improvement, and ensuring a reliable user experience
Cookies and Tracking
We use cookies and similar technologies to ensure our website functions properly, to improve performance, and to analyze how our services are used. Some cookies are essential, while others are used only with your consent.
For a detailed overview of the cookies we use and to manage your consent, please see our Cookie Policy, which is automatically updated by our compliance system.
You can change or withdraw your consent at any time by adjusting your cookie preferences in the banner or in the settings link provided on our website.
Data Sharing & Processors
We use carefully selected third-party service providers to deliver our services, including:
Stripe – payment processing (subject to Stripe’s privacy policy)
Email and CRM providers – for account management and communications
Hosting and infrastructure providers – for secure platform operation
We do not sell or rent personal data to third parties.
Data Storage & Retention
Personal data is stored within the EU or in jurisdictions that provide adequate protection under GDPR.
We retain data for as long as your account is active or as required by applicable law.
After termination or inactivity, data may be archived or deleted in line with our retention policies.
Your Rights
Under GDPR, you have the right to:
Access and obtain a copy of your personal data
Correct or update inaccurate information
Request deletion of your data
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time (where processing is based on consent)
To exercise these rights, please contact us at [email protected].
Security
We use technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. This includes encryption, access controls, and monitoring.
International Data Transfers
If personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or other circumstances. Updates will be published on this page with a revised “Last updated” date.
Contact
If you have questions or concerns about this Privacy Policy or how we process your personal data, please contact us:
Corebuilt Labs
Email: [email protected]
Address: Tjørnekrogen 7, 2820 Gentofte, Denmark.
