This Privacy Policy (the "Policy") explains when and why we collect personal information about people who visit our website, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

We may update this policy from time to time, so please check this page occasionally to ensure you are happy with any changes. We will notify you via email when this policy is updated.

Any questions regarding this Policy and our privacy practices should be sent by email to support@shown.io. Alternatively, you can contact our Data Protection Officer (DPO) by email to privacy@shown.io.

Who Are We?

We are Instaon SRL, a limited liability company incorporated in Chaumont-Gistoux, Belgium. Our main websites are:

• https://shown.io/

• https://app.shown.io/

You can contact us at support@shown.io, or reach our DPO at privacy@shown.io

How Do We Collect Information From You?

We collect information about you when you:

1. Create an online account.

2. Subscribe to our newsletter.

3. Use third-party applications integrated with Shown.

What Type of Information Do We Collect?

The personal information we collect may include:

1. First and last name, email address, business address and business phone number.

2. IP address and information about pages accessed and when.

3. When you choose to link your Google, Microsoft, Meta, Twitter, TikTok & LinkedIn advertiser accounts, we collect account information in order to be able to provide our services of optimising advertising campaigns

4. Payment details collected through our third-party payment processors (Stripe & PayPal). These providers securely handle your payment data; we do not store credit or debit card information.

How Is Your Information Used?

We use your information to:

1. Optimize your advertising campaigns on the different third-party advertising networks.

2. Fulfill contractual obligations.

3. Seek your feedback on our services.

4. Notify you of changes to our services.

5. Share information that may interest you, including promotions and updates. (if consent given)

6. Process grants or job applications.

7. For advertising and analytical purposes

8. Improve our business, website, and advertising strategies.

9. Comply with legal rights and obligations.

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.

Who Has Access to Your Information?

1. We Do Not Sell Your Data: We do not sell or rent your information to third parties.

2. Third-Party Service Providers: We may share your information with third-party service providers to perform tasks or provide services on our behalf (e.g., create advertising audiences). These providers are contractually obligated to protect your data and not use it for marketing purposes other than intended by you.

3. Legal Obligations: We may disclose your data if we are required by legal authorities to do so.

4. Business Transfers: Your data may be shared as part of a business restructuring, sale, or transfer of assets.

Your Choices

You can choose to receive marketing communications from us by:

1. Ticking the relevant box when providing your information. We will not contact you for marketing purposes by email unless you have given your prior consent.

You can change your preferences at any time by contacting us at privacy@shown.io

Your Rights Under GDPR

As a data subject, you have the following rights:

1. Access: Request access to your personal data.

2. Rectification: Correct inaccurate or incomplete data.

3. Erasure: Request deletion of your data.

4. Restriction: Limit processing of your data.

5. Objection: Object to data processing.

6. Data Portability: Request your data in a portable format.

7. Withdraw Consent: Withdraw consent for data processing.

8. Complain: Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@shown.io.


Supervisory Authority Contact: If you have concerns, you may contact the Belgian Data Protection Authority:

Data Security

1. We take reasonable steps to protect your data, including encryption and secure storage.

2. Sensitive information (e.g., payment details) is encrypted and transmitted securely. Complete payment details such as credit card numbers are never stored in our databases.

GDPR Compliance and Lawful Basis for Processing

1. Lawful Basis:
   • Contractual Necessity: To fulfill our obligations to you as per our agreement.
   • Legitimate Interest: To improve our services and provide a better user experience.
   • Consent: For specific purposes, such as sending marketing emails.

2. Data Processing Agreement (DPA): Where applicable, we ensure agreements with third-party processors comply with GDPR.

3. Record of Processing Activities (ROPA): We maintain detailed documentation of data processing activities.

4. Data Transfers: Transfers outside the EU are conducted under appropriate safeguards, such as Standard Contractual Clauses.

Use of Cookies

Cookies are small pieces of data stored on your device to enhance your experience on our site. They:

1. Collect statistical data about browsing actions.

2. Do not identify you as an individual.

You can disable cookies in your browser settings; however, this may reduce functionality.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies.

Children Under 16

We do not knowingly collect data from children under 16. If you are under 16, please obtain parental consent before providing personal information.

Website Recording

We may use website recording services to improve usability. These recordings exclude all sensitive personal data (which are greyed out) and are used for internal purposes only.

Data Breach Notifications

In the event of a data breach, we will:

1. Notify affected users within 72 hours if the breach poses a risk to your rights and freedoms.

2. Report the breach to the Belgian Data Protection Authority (APD/GBA) if required.

Review of This Policy

We review this Policy regularly. Updates will be communicated via email and available on our website.

For further questions, contact us at privacy@shown.io