Peeksy

GDPR & Your Data Rights

Last updated: March 2025

Peeksy is committed to protecting the privacy of users in the European Economic Area (EEA) and the United Kingdom. This page explains how we comply with the General Data Protection Regulation (GDPR).

Data Controller

Peeksy (operated by Wavedidwhat studio) is the data controller for personal data processed through the platform. You can reach us at privacy@peeksy.space.

Lawful Bases for Processing

  • Contract. We process account data, link data, and analytics to provide the service you signed up for.
  • Legitimate interest. We process aggregated analytics and usage logs to maintain security, prevent abuse, and improve the product.
  • Consent. Where required (e.g., marketing emails), we obtain your explicit consent and honour opt-outs.

Your Rights

Under GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Portability — receive your data in a machine-readable format.
  • Restriction — ask us to limit how we process your data.
  • Objection — object to processing based on legitimate interest.

To exercise any right, email privacy@peeksy.space. We will respond within 30 days.

Data Transfers

Peeksy runs on Cloudflare's global edge network. Data may be processed outside the EEA. Cloudflare participates in the EU–U.S. Data Privacy Framework and maintains Standard Contractual Clauses to ensure adequate protection.

Data Retention

  • Account data — retained while your account is active; deleted within 30 days of account closure.
  • Link & analytics data — retained while the link exists; deleted when you delete the link or close your account.
  • Server logs — retained for up to 90 days for security and debugging.

Data Processing Agreements

Business-plan customers can request a Data Processing Agreement (DPA) by contacting privacy@peeksy.space.

Supervisory Authority

If you believe your rights have not been addressed, you have the right to lodge a complaint with your local data protection authority.