Privacy Policy

Lemonwater Digital Solutions Limited is the controller of your personal data for the purposes of the GDPR.

Contact details:
Lemonwater Digital Solutions Limited
Registered address: 3 Odyssea Antroutsou, 2413 Egkomi, Nicosia, Cyprus
Email: info@canaryspill.com

If applicable, contact details for our Data Protection Officer: info@canaryspill.com.

• Account data, such as email address, username, password hash, and profile settings.
• Review data, such as ratings, text submissions, and employer-related information.
• Technical data, such as IP address, device identifiers, browser type, operating system, and log data.
• Usage data, such as pages viewed, clicks, session data, and feature usage.
• Subscription and payment data, if you use Pro features.
• Communication data, such as messages sent to support.
• Cookie and similar technology data, where applicable.

We use personal data to:

• Create and manage user accounts.
• Publish and moderate reviews.
• Verify authenticity and detect false or abusive submissions.
• Provide analytics, trends, scores, and premium features.
• Operate, secure, and improve the Service.
• Send service-related communications.
• Comply with legal obligations and enforce our Terms.

We process personal data to review and investigate reports, moderate content, prevent fraud and abuse, maintain the security of the Service, and produce aggregated or anonymised analytics and trend insights. Where possible, we use anonymised or pseudonymised data and we do not use personal data for purposes incompatible with those described in this Policy.

We process personal data only where we have a lawful basis to do so, including:

• Performance of a contract, where processing is necessary to provide the Service.
• Legitimate interests, including fraud prevention, moderation, analytics, security, and service improvement.
• Consent, where required for optional cookies, marketing, or other specific uses.
• Legal obligation, where we must comply with applicable laws or lawful requests.

We may create aggregated, anonymised, or pseudonymised datasets from user activity and reviews. We use this data to identify trends, generate employer insights, and improve our products. Where data has been anonymised, we do not attempt to re-identify individuals.

Because the Service relies on user-generated content, we may process reviews to detect fake, duplicated, unlawful, harmful, or low-quality submissions. We may also process content to protect the rights and safety of users, employers, and the platform.

We may share personal data with:

• Hosting, cloud, security, analytics, and payment providers.
• Professional advisers such as lawyers, auditors, and insurers.
• Regulatory authorities, courts, or law enforcement where required.
• Purchasers or investors in connection with a business transaction, subject to confidentiality safeguards.

We do not sell your personal data.

Advertising and analytics partners (opt-out). We do not sell your personal data. We may, however, share limited information with analytics and advertising partners to personalise and measure the performance of our services and any job or firm recommendations, in compliance with our Cookies Policy and applicable law. Where required by law, you may object to or opt out of the use of your data for behavioural or targeted advertising through the cookie settings on the Service or by using any applicable browser or device privacy controls; doing so will not affect access to core features but may reduce personalisation.

If we transfer personal data outside the European Economic Area, we will rely on an approved transfer mechanism, such as an adequacy decision or standard contractual clauses, where required.

We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law.

We may retain reviews for as long as they remain relevant to the Service, unless they are removed, anonymised, or deleted earlier for legal, safety, or moderation reasons.

Subject to the GDPR and applicable exceptions, you may have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your personal data.
• Restrict processing.
• Object to processing based on legitimate interests.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

We may use automated tools to detect suspicious activity, spam, or policy violations. These tools are used for moderation and security purposes and do not produce legal or similarly significant effects unless explicitly stated.

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, logging, monitoring, and restricted internal access.

We will never contact you via SMS, WhatsApp, Telegram or similar messaging services to ask for your passwords, payment details or other sensitive information, and we will not ask you to transfer money or share one-time codes outside our official website or apps. If you receive any message purporting to be from CanarySpill via those channels, do not respond and please report it to us using the contact details in this Policy.

The Service is not intended for children under 18, and we do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service.

Questions or requests regarding privacy should be sent to info@canaryspill.com.