Privacy policy

How Celebrity Link collects, uses and protects personal information across the website and the campaigns we coordinate.

Last updated: 10th October, 2026

Overview

[Company name] (trading as CelebrityLink; "Celebrity Link", "we", "us") runs celebrity-led Instagram giveaways, PR and social media campaigns for brands, and publishes this website at celeblink.com. We are the controller of the personal information described on this page.

This page explains what personal information we collect, why we collect it, who we share it with, how long we keep it and the rights you have. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our registered details are [Company name], company number [company number], registered office [registered office address]. Our registration with the Information Commissioner's Office (ICO) is [ICO registration number].

What this covers

This website

Pages, forms and enquiry routes published on celeblink.com, including campaign enquiries and contact requests, and any account area we offer.

Campaigns we coordinate

Information about the people who enter a giveaway we coordinate, the brands that take part, and the celebrities, creators and representatives we work with. Each giveaway also publishes its own official rules, which apply alongside this page and the Giveaway terms.

What it does not cover

Instagram and the other platforms a campaign runs on have their own privacy policies, and so do the websites we link to. We do not control how they use your information.

Information we collect

Information you give us

Your name, work email address, telephone number and the brand or organisation you represent, when you send an enquiry or open an account.
If you create an account: your first and last name, work email address and phone number, whether you would like marketing updates, and your password. We never keep the password itself, only a scrambled version of it (a hash) that cannot be turned back into the password.
Details of the campaign you are interested in, your goals and the messages you send us.
Billing details for a campaign you book: the invoicing name and address, a VAT number and the record of what you paid. Card details are taken by our payment provider and are not stored by us.
If you enter a giveaway: your Instagram username and the public details of your account, your entry and, if you win, the name, address and contact details needed to deliver the prize.

Information collected when you use the website

Technical information such as your IP address, browser and device, the pages you visit and the address of the site that referred you.
Security and operational logs needed to deliver, protect and troubleshoot the website, including the records our hosting provider keeps to block abusive traffic.
Usage information from analytics, where you have agreed to it. See the Cookie policy.
If you have an account, your sign-in history: when the account was created, when you last signed in, whether your email address has been verified, the sessions you are signed in to (each with a scrambled form of the IP address and browser it started from), recent failed sign-in attempts, and a record of account events such as sign-ins, password resets and deletions.

Information from other sources

Public information from Instagram about an account that enters a giveaway: whether the account is public, follows the accounts named in the entry steps and meets the eligibility rules.
If you sign in with Google or Microsoft: your name, your email address, a reference for your Google or Microsoft account and, from Google, whether it has verified that email address. See Your account.
Information from the brands, celebrities and partners in a campaign that is needed to run it, such as a prize delivery confirmation.
Business contact details from public sources, such as a company website or a professional networking page, when we approach a brand or partner about working together.

How we use information

Category	Examples	Why we use it	How long we keep it
Contact details	Name, work email, telephone, organisation	To reply to your enquiry and manage our relationship	24 months after our last contact
Account details	Name, work email, phone, password hash, sign-in history	To give you an account and keep it secure	While the account is open; then as for contact details
Campaign details	Instagram handle, brand, order history, campaign reports	To plan, deliver and report on your campaign	6 years after the campaign ends, for our accounting records
Giveaway entries	Instagram username, the entry, the winner's delivery details	To verify entries, run the draw and deliver prizes	6 months after the giveaway closes; the winner's record 6 years
Payment records	Invoice amount and date, the last four digits of a card	Invoicing, refunds and tax records	6 years from the end of the financial year
Website usage	Pages viewed, device, approximate location	To keep the website secure and improve it	Up to 13 months for analytics; 30 days for security logs

We also use information to send service messages about a campaign you have booked, to answer requests about your rights and, where the law allows, to tell you about campaigns and services you may be interested in. You can opt out of marketing at any time.

Our lawful bases

UK GDPR requires a lawful basis for each use of personal information. Ours are:

Contract: to respond to your enquiry, prepare a quote, deliver a campaign you book, deliver a prize you win and provide the account you open.
Legitimate interests: to run and secure the website and your account (including limiting repeated sign-in attempts), to run giveaways fairly, to approach brands and partners about working together and to keep business records. We balance these interests against your rights, and you can object at any time.
Consent: for analytics cookies, and for marketing emails to anyone who is not an existing business client. You can withdraw consent at any time.
Legal obligation: to keep accounting and tax records and to respond to lawful requests from regulators and authorities.

Giveaways and your entry

When you enter a giveaway we coordinate, we process your Instagram username and the public details of your account to check that your entry is valid, to pick the winner at random from the valid entries and to announce the result. The promoter of each giveaway is named in its official rules; where the promoter is a participating brand, we process entries on its behalf and under its instructions.

If you win, we ask for the details needed to deliver the prize and share them with the brand or supplier delivering it. Where the celebrity or creator fronting the campaign delivers the prize, their team receives the same details. We may publish the winner's Instagram username; the Giveaway terms say what we publish and how to object.

We do not use giveaway entries for marketing unless you choose to follow a participating account or opt in separately.

Your account

You can create an account on celeblink.com to book and follow your campaigns. We use the details you give us to run the account, to keep it secure and to contact you about it.

Signing in

You sign in with your email address and password, or with Google or Microsoft. If you choose Google or Microsoft, that company checks who you are and tells us your name, your email address and a reference for your Google or Microsoft account; Google also tells us whether it has verified the email address. We never see your Google or Microsoft password. Your use of their sign-in is covered by their own policies: Google and Microsoft.

To protect your account we keep your sign-in history, as described above, and briefly lock an account after several failed sign-in attempts in a row. A small number of cookies keep you signed in; the Cookie policy lists them.

Emails about your account

We email you a link to verify your email address when you create an account, and a link to reset your password when you ask for one. These emails are sent by Twilio SendGrid, which processes your name and email address on our instructions only to deliver them. Each link works once and expires: a reset link after one hour, a verification link after 48 hours.

Your account and our contact records

Your account is linked to a contact record in our customer records, the same record that holds any enquiries you have sent us, so our team can help you with both. If you ask for marketing updates when you create the account, that choice is recorded there too, and you can ask us to change it at any time.

Closing your account

You can delete your account at any time while signed in. Deleting it signs you out on every device, ends any links we have emailed you, removes any Google or Microsoft sign-in and closes the account so it can no longer be used. Our team can also close an account at your request. We keep the record of a closed account and our contact record of you for the periods in the table above; if you want them erased sooner, ask us (see Your rights).

Sign-in sessions end when you sign out, after 12 hours, or after 30 days if you chose "Keep me signed in". We delete the records of ended sessions 30 days after they end, and used or expired email links soon after.

Brands and partners in a campaign: the campaign details and reports they need, and the entry and winner details described above.
Celebrities, creators and their representatives: what they need to run their part of a campaign, such as the posting schedule and the winner's username.
Service providers who process information on our instructions: website hosting and security, email and document tools (including Twilio SendGrid, which delivers account emails), our payment provider, analytics providers, and our accountants and professional advisers.
Google and Microsoft, only when you choose to sign in with them: they receive the request to sign you in to celeblink.com.
Authorities and regulators where the law requires it, including the Advertising Standards Authority if a promotion is investigated.
A buyer or successor if the business is sold or restructured, under the same protections.

We do not sell personal information.

International transfers

Our service providers may process information outside the UK, including in the United States. Where they do, we rely on the UK's adequacy regulations or on the International Data Transfer Agreement or Addendum approved by the ICO, and we check that the provider gives the information equivalent protection.

How long we keep information

The table above gives the periods we work to. When a period ends we delete or anonymise the information, unless a legal claim or an investigation requires us to keep it for longer. Where you ask us to delete information earlier and we are able to, we will.

Security

We protect information with access controls, encryption in transit and the security tools of our hosting provider. Only the people who need information to do their jobs can see it. No website is free of risk; if a breach puts your rights at risk we will tell you and the ICO as the law requires.

Your rights

Under UK GDPR you can:

Ask for a copy of the personal information we hold about you.
Ask for information to be corrected or deleted.
Ask us to restrict how we use it, or object to a use that relies on our legitimate interests.
Receive the information you gave us in a portable format.
Withdraw consent where we rely on it.
Complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

How we handle a request

You send a request through the contact page or by email.
We confirm your identity so we only share information with the right person.
We respond within one month, or tell you if we need more time and why.
If you are unhappy with our reply, you can ask us to review it, or complain to the ICO.

Children

Our services are for businesses and for adults. Giveaways we coordinate are open to people aged 18 or over unless the official rules say otherwise, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Changes to this page

Material changes are published on this page with a revised date. Earlier versions are available on request.

Contact

Questions about this page or your information can be sent to help@celeblink.com or through the contact page. Write to [registered office address] if you prefer post.