Privacy Policy | OnlyLinks

What does OnlyLinks do?

OnlyLinks is a link-in-bio platform that enables creators, businesses, and agencies to connect their audiences with their most important content. Our website (located at https://onlylinks.com) and related digital properties (together, the “Platform”) allow individuals and businesses to sign up as OnlyLinks users (to create a personalised, customisable profile page), as subscribers (to follow OnlyLinks users), or as general visitors (together, the “OnlyLinks Services”).

The profile pages that OnlyLinks users create are referred to in this Privacy Notice as “User Profiles.” User Profiles are accessible by the public. For more information about OnlyLinks, please see the About section of our website at https://onlylinks.com/about.

How does this Privacy Notice apply to me?

This Privacy Notice applies to personal information we collect as a controller from:

visitors to our Platform (“Platform Visitors”);
individuals, representatives of individuals, or companies that sign up to use our OnlyLinks Services via a paid plan (“Paid Plan Users”) or free plan (“Free Plan Users”), together our “OnlyLinks Users”;
individuals that sign up to subscribe to and/or follow User Profiles (“Subscribers”);
individuals that visit and interact with User Profiles (“Profile Visitors”);
individuals who respond to our surveys, marketing materials, or participate in promotions or competitions that we may run from time to time.

This Privacy Notice applies to the processing of personal information by OnlyLinks as a controller. When we talk about OnlyLinks acting as a “controller,” we mean that OnlyLinks determines the purpose and the means of the processing (i.e., we make decisions about how we will handle your personal information). Because of the nature of our services, we can also act as a “processor” on behalf of OnlyLinks Users. This means that, when instructed by an OnlyLinks User, we can facilitate processing of Profile Visitors’ and Subscribers’ personal information on behalf of that OnlyLinks User (“Processor Services”). This Privacy Notice does not address Processor Services. If you are a Profile Visitor or Subscriber and want to know how an OnlyLinks User handles your personal information, please get in touch with the OnlyLinks User directly and/or refer to any privacy notice on the relevant User Profile.

If you provide us with information about another person (if, for example, you are a representative of an individual), you must provide them with a copy of this Privacy Notice and let that other person know that we use their personal information in the ways set out in this Privacy Notice.

What personal information do we collect?

The personal information that we may collect about you broadly falls into the following categories:

Information you provide voluntarily

When you sign up to become an OnlyLinks User, a Subscriber, use or interact with our OnlyLinks Services or staff, visit our Platform, visit a User Profile, respond to a survey, or participate in a promotion, we may ask you to provide personal information voluntarily. For example, if you are a Free Plan User we will ask you to provide your email address, name, username, and marketing preferences. If you are a Paid Plan User we will also ask for your full name, billing email address, billing address, and payment method in order to facilitate billing. If you are a Subscriber, we may ask you to provide your email address.

To opt out of marketing communications we send you at any time, you can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we may send you. You may also provide us with your personal data when you submit queries or make a report to us (such as an Intellectual Property Report or Counter Notice). For example, we may ask you to provide your name and email address so that we can respond to your queries.

If you are a Profile Visitor, a User might request that you provide your email address, date of birth, age, or other personal information in order to access elements of a User Profile (such as age-gated content). We may use the results of such access (i.e., successful or unsuccessful access attempts) to produce aggregated statistics for our own internal purposes and to improve the OnlyLinks Services.

Information that we collect automatically

When you visit our Platform, use our OnlyLinks Services, or interact with a User Profile, we collect certain information automatically from your device. In some countries, including countries in the European Economic Area and UK, this information may be considered personal information under applicable data protection laws. Specifically, the information we collect automatically may include your IP address, device type, unique device identification numbers, browser type, broad geographic location (e.g., country or city-level location), time zone, usage data, diagnostic data, and other technical information. We may also collect information about how your device has interacted with our Platform or User Profiles, including the pages accessed and links clicked.

Collecting this information enables us to better understand you, where you come from, and what content is of interest to you. We use this information for our internal analytics purposes, to improve the quality and relevance of our Platform and OnlyLinks Services, and to provide insights and recommendations to our OnlyLinks Users. Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading “How do we use cookies and similar tracking technology” below.

We may undertake automatic scanning of User Profiles and links to determine whether content warnings should be applied and presented to Profile Visitors, and to determine if any content should be removed or any User Profiles should be suspended in line with our Terms of Service.

Information that we obtain from third-party sources

From time to time, we may receive personal information about you from third-party sources (including from service providers that help us run marketing campaigns and our partners who help us provide our OnlyLinks Services). When you connect a third-party account (such as Google, Apple, Instagram, TikTok, X/Twitter, YouTube, or Twitch) to OnlyLinks, we receive profile information from those services as described in the “Third-Party Platform Data” section below. In all cases, we will only receive such data where these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us.

Children's data

Our services are not intended for use by children under the age of 18 (the “Age Limit”). If you are under the Age Limit, please do not use the OnlyLinks Services and do not provide us with your personal information. If you are a parent or guardian and you are aware that an individual under the Age Limit has provided us with personal information, please contact us. We will, upon notice or discovery, take all reasonable efforts to erase or destroy any personal information that may have been collected or stored by us about that individual.

Why do we collect your personal information?

In general, we will use the information we collect for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal information. These include:

To provide and deliver the OnlyLinks Services and to assess, maintain, and improve the performance and functionality of the OnlyLinks Services.
To ensure the OnlyLinks Services are relevant to you and your device, to notify you about changes to the OnlyLinks Services, and to deliver targeted and/or localised content based on your user data, location, and preferences.
For consumer research and to allow you to participate in surveys or interactive features of the OnlyLinks Services when you choose to do so.
To provide customer support and to process and respond to a request, complaint, or Intellectual Property Report or Counter Notice that you may have made.
To monitor the usage of the OnlyLinks Services and to detect, prevent, and address technical issues.
To process payments for Paid Plan Users.
To conduct business planning, reporting, and forecasting.
To deliver promotional materials, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or enquired about, unless you have opted out of receiving such information.
For the administration of our business including fulfilling and exercising our obligations and rights, exercising or defending legal claims, complying with our legal obligations and law enforcement requests, and managing the relationship with you.
To verify your identity and to detect fraud and potential fraud, including fraudulent payments and fraudulent use of the OnlyLinks Services.
To inform our algorithms so we can deliver the most relevant recommendations to you, including User Profiles that you may be interested in.

Legal basis for processing personal information

Our legal basis for collecting and using personal information described above will depend on the personal information concerned and the specific circumstances in which we collect it.

However, we will normally collect personal information from you only where we have your consent, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). As indicated above, we require certain personal information to enter into a contract with you as an OnlyLinks User. Without your personal information, we will be unable to provide you with OnlyLinks Services available to OnlyLinks Users.

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to develop and improve the OnlyLinks Services, to provide additional functionality, to ensure appropriate security, or to implement content moderation. We may have other legitimate interests, and if appropriate, we will make clear to you at the relevant time what those legitimate interests are.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact Us” heading below.

Who may we disclose your personal information to?

We may disclose your personal information to the following categories of recipients:

To our group companies, third-party service providers (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Platform or OnlyLinks Services), or who otherwise process personal information for purposes that are described in this Privacy Notice or notified to you when we collect your personal information. We also facilitate third-party payment processing as set out in more detail below.
To the extent we utilise social media integrations (such as Google, Apple, Instagram, TikTok, X/Twitter, YouTube, or Twitch), we may share limited data with the relevant social media provider to facilitate authentication and profile connectivity.
To any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish, or defend our legal rights, or (iii) to protect your vital interests or those of any other person.
To an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger, or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice.
To any other person with your consent to the disclosure.

Payment Processing

In order to facilitate paid products and/or services within the OnlyLinks Service, we use third-party payment processors. We will not store or collect your payment card details. That information is provided directly to our third-party payment processor, whose use of your personal information is governed by their own privacy policy and terms of service. Our payment processor adheres to the standards set by PCI-DSS (Payment Card Industry Data Security Standards) as managed by the Payment Card Industry Security Standards Council. The payment processor we work with is:

Stripe — their privacy policy can be viewed at https://stripe.com/privacy

Disclosure of personal information to other countries

Your personal information may be transferred to, and processed in, countries other than the country in which you are a resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).

OnlyLinks may transfer personal information to the United States, Australia, and other countries in which we do business. OnlyLinks may also subcontract certain activities and share your personal information with third parties located outside of your country of residence.

However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Notice and applicable data protection laws. These include entering into data transfer agreements and implementing appropriate safeguards with our third-party service providers and partners. No transfer of your personal information will take place to an organisation or another country unless we believe there to be adequate controls in place including the security of your data and other personal information.

How do we use cookies and similar tracking technology?

We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you. Cookies are small text files stored on your device that help us provide and improve our services. We use the following types of cookies:

Essential Cookies: Required for the Platform to function properly, including authentication, session management, and security features.
Analytics Cookies: Help us understand how visitors interact with the Platform so we can improve the user experience. These collect anonymised usage data such as pages visited and links clicked.
Preference Cookies: Remember your settings and preferences (such as theme choices) so the Platform can be tailored to your needs.

Most web browsers allow you to control cookies through their settings. You can typically set your browser to refuse all cookies, accept only first-party cookies, or delete cookies when you close your browser. Please note that disabling essential cookies may prevent you from using certain features of the Platform.

How long do we retain your personal information?

We will retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Notice and in each case in accordance with applicable legal and regulatory requirements in respect of permitted or required retention periods and limitation periods relevant to legal action. When we no longer need your personal information, we will securely delete or anonymise it.

How do we secure your personal information?

We use appropriate technical and organisational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. Specific measures we use include encryption of data in transit (TLS) and at rest, regular security assessments, access controls, and secure data storage practices.

Third-Party Platform Data

OnlyLinks integrates with several third-party platforms to provide social login, profile linking, and content display features. This section explains how we handle data received from each platform.

Google & Apple (Authentication)

When you sign in using Google or Apple, we receive your name, email address, and profile picture. This data is used solely to create and authenticate your OnlyLinks account. We do not access your Google or Apple account data beyond what is needed for sign-in.

Meta (Instagram)

When you connect your Instagram account to OnlyLinks, we may receive:

Your basic profile information (name, username, profile picture, bio, and email address)
Profile statistics such as follower count, following count, and post count
Your public posts and media content that you choose to display on your OnlyLinks page
Authentication tokens that allow us to verify your identity and maintain your connection

We use data received from Meta exclusively for the following purposes:

To display your profile information, statistics, and posts on your OnlyLinks page
To pre-populate your OnlyLinks profile with your name and profile picture for your convenience
To showcase your social media presence and content to visitors of your OnlyLinks page

We do not sell, lease, or share your Meta data with third parties for advertising or marketing purposes. We do not use your Meta data for any purpose other than providing the OnlyLinks service as described above. We do not store your Instagram password. We access only the minimum data necessary to provide our service. We do not post, modify, or delete any content on your behalf without your explicit consent.

X (formerly Twitter)

When you connect your X account to OnlyLinks, we may receive:

Your basic profile information (name, username, profile picture, bio, and email address)
Profile statistics such as follower count, following count, and post count
Your public posts and media content that you choose to display on your OnlyLinks page
Authentication tokens that allow us to verify your identity and maintain your connection

We use data received from X exclusively for the following purposes:

To display your profile information, statistics, and posts on your OnlyLinks page
To pre-populate your OnlyLinks profile with your name and profile picture for your convenience
To showcase your social media presence and content to visitors of your OnlyLinks page

We do not sell, lease, or share your X data with third parties for advertising or marketing purposes. We do not use your X data for any purpose other than providing the OnlyLinks service as described above. We do not store your X password. We access only the minimum data necessary to provide our service. We do not post, modify, or delete any content on your behalf without your explicit consent.

TikTok

When you connect your TikTok account to OnlyLinks, we may receive:

Your basic profile information (display name, username, profile picture, and bio)
Profile statistics such as follower count, following count, likes count, and video count
Your public videos and media content that you choose to display on your OnlyLinks page
Authentication tokens that allow us to verify your identity and maintain your connection

We use data received from TikTok exclusively for the following purposes:

To display your profile information, statistics, and videos on your OnlyLinks page
To pre-populate your OnlyLinks profile with your name and profile picture for your convenience
To showcase your social media presence and content to visitors of your OnlyLinks page

We do not sell, lease, or share your TikTok data with third parties for advertising or marketing purposes. We do not use your TikTok data for any purpose other than providing the OnlyLinks service as described above. We do not store your TikTok password. We access only the minimum data necessary to provide our service. We do not post, modify, or delete any content on your behalf without your explicit consent.

YouTube & Twitch

When you connect your YouTube or Twitch account to OnlyLinks, we may receive your channel name, profile picture, subscriber/follower count, and public video or stream metadata. This data is used to display your content and statistics on your OnlyLinks page. By connecting your YouTube account, you also agree to be bound by YouTube's Terms of Service and Google's Privacy Policy. You can revoke OnlyLinks' access to your YouTube data via the Google security settings page.

General data use limitations for all third-party platforms

Across all connected third-party platforms, OnlyLinks adheres to the following principles:

We do not sell, lease, or share third-party platform data with any party for advertising or marketing purposes.
We access only the minimum data necessary to provide our service.
We do not store your passwords for any connected platform.
We do not post, modify, or delete any content on any connected platform on your behalf without your explicit consent.
You may disconnect any third-party platform at any time from your OnlyLinks account settings.

Data Deletion

You have the right to request deletion of your personal data at any time. When you request data deletion, we will delete all personal information we hold about you, including any data received from connected third-party platforms (including Instagram, X, TikTok, YouTube, and Twitch), within 30 days of receiving your request.

How to request data deletion

You can request deletion of your data by:

In-app: Navigate to your account settings and select “Delete Account” to permanently remove your account and all associated data
Email: Send a deletion request to [email protected] with the subject line “Data Deletion Request”

Upon deletion, your OnlyLinks profile, all links, analytics data, and any data received from connected social media accounts will be permanently removed from our systems. This action cannot be undone.

Your data protection rights

Depending on your location, you may have the following data protection rights:

Access: You can request a copy of the personal information we hold about you.
Rectification: You can request that we correct any inaccurate or incomplete personal information.
Erasure: You can request that we delete your personal information in certain circumstances.
Restriction: You can request that we restrict the processing of your personal information in certain circumstances.
Portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format.
Objection: You can object to the processing of your personal information in certain circumstances.
Withdraw consent: Where we rely on your consent to process your personal information, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the details in the “Contact Us” section below.

Information for European Economic Area (EEA) and UK residents

If you are located in the EEA or UK, you have certain rights under the General Data Protection Regulation (GDPR) and UK GDPR respectively. In addition to the rights listed above, you have the right to lodge a complaint with your local supervisory authority if you believe that our processing of your personal information infringes applicable data protection laws. A list of EEA supervisory authorities is available at https://edpb.europa.eu. UK residents can contact the Information Commissioner's Office (ICO) at https://ico.org.uk.

Information for California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise them.

Your California privacy rights

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days.

Do Not Sell or Share My Personal Information

OnlyLinks does not sell your personal information as defined under the CCPA. OnlyLinks does not share your personal information for cross-context behavioural advertising purposes.

Information for Australian residents

If you are an Australian resident, you have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You may request access to, or correction of, any personal information we hold about you. If you are not satisfied with our handling of your personal information, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical, or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the effective date displayed at the top of this Privacy Notice.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Notice or our privacy practices, please contact us:

Email: [email protected]
Website: https://onlylinks.com

We aim to respond to all legitimate requests within 30 days. Occasionally, it may take us longer if your request is particularly complex or you have made multiple requests. In this case, we will notify you and keep you updated.