Incident #56289E · 30 JUN 2026minor
Infolinks rewrites EU privacy policy: adds UK scope, breach notice, security list, under-16 rule
Infolinks reorganised and condensed its EU privacy policy, extending it to UK residents and adding commitments such as 72-hour breach notification, listed security measures, a no-sale statement for EU/UK residents, and deletion of data from children under 16. Most data collection, use and sharing descriptions are reworded rather than changed. The diff is truncated, so the rights, legal-basis and EEA consent sections are not fully visible and may have been moved or rewritten.
Taken from you
- Some detail removed from device and ad-data descriptions, such as app-version information and purchase tracking wording
- Specific fraud-prevention wording about protecting the security of the Ad Services was shortened
Won back
- Policy now explicitly covers UK residents and UK GDPR
- Commitment to notify authorities within 72 hours of high-risk data breaches and affected individuals without undue delay
- Statement that EU/UK residents' personal data is not sold
- Listed security measures including encryption, access controls and penetration testing
- Commitment to delete data knowingly collected from children under 16 without parental consent
- Third-party recipients stated to be bound by data processing agreements
Evidence · 4 of 4 quotes matched in source
In the event of a personal data breach that is likely to result in a high risk to individuals, we will notify the relevant supervisory authority within 72 hours+ inserted · ✓ matched in source
We do not sell personal data of EU or UK residents as defined under applicable privacy laws.+ inserted · ✓ matched in source
If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will promptly delete such data.+ inserted · ✓ matched in source
Archived version ↗ · 9,424 words changed · comparison truncated