Home / GDPR
Last updated: 2026-10-11
How WireAds complies with the EU and UK General Data Protection Regulation — our role, your rights, our safeguards and our Data Protection Officer.
WireAds acts as a controller when it determines the purposes of processing: this website, our business contacts and CRM, marketing communications, account administration and our own fraud and security operations. WireAds acts as a processor when it processes personal data on behalf of a publisher or advertiser to deliver the Services — for example end-user identifiers in bid requests served under the customer's instructions. In that role the customer is the controller (or an intermediary processor for its own end users) and our Data Processing Agreement applies. For the real-time exchange of bid data we may also be an independent controller for limited fraud-prevention purposes.
Questions about this section: dpo@wireads.com
For business contacts: name, business email, company, role, correspondence and account records. For end users on monetised inventory: online identifiers (cookie IDs, mobile advertising IDs), IP addresses, device and browser characteristics, coarse location from IP, page context, and ad interaction data, as described in the Privacy Policy. We do not collect special-category data, and we ask partners not to send it to us.
Questions about this section: dpo@wireads.com
Contract: providing the website, platform, accounts, support and billing. Legitimate interests: securing our infrastructure, detecting invalid traffic, measuring and improving the Services, business development with existing contacts, and establishing or defending legal claims — after balancing against your reasonable expectations. Consent: non-essential cookies and personalised advertising on EEA and UK inventory, collected through consent management tooling under the IAB Transparency and Consent Framework and honoured throughout the auction. Legal obligation: tax, accounting and disclosure duties.
Questions about this section: dpo@wireads.com
You have the right to access your personal data and receive a copy; to rectify inaccurate data; to erase data ("right to be forgotten"); to restrict processing; to data portability where processing is based on consent or contract and carried out automatically; to object to processing based on legitimate interests, including profiling for direct marketing, which we then stop unless we have compelling grounds; and to withdraw consent at any time without affecting prior processing.
Write to dpo@wireads.com. We respond within one month of a verified request, extendable by two further months for complex cases with notice. If you believe our processing infringes the GDPR, you may complain to your national supervisory authority — in the US context we will cooperate with the lead authority where relevant. We do not charge for requests and will not refuse unreasonably.
Questions about this section: dpo@wireads.com
Personal data may move to the United States and other countries. Transfers out of the EEA, UK and Switzerland rely on adequacy decisions where available, and otherwise on the Standard Contractual Clauses approved by the European Commission, together with the UK International Data Transfer Addendum (or IDTA) and Swiss adaptations where applicable. We carry out transfer impact assessments and supplement the clauses with measures such as TLS encryption, strict access controls and data minimisation. Copies of the relevant clauses for platform data are available through the DPA.
Questions about this section: dpo@wireads.com
We use vetted processors under Article 28 contracts: hosting and CDN (including Cloudflare), transactional email (including Resend), analytics, billing and accounting tools, and advertising demand and measurement partners engaged in delivering the auction on publisher inventory. Each is bound to process data only on documented instructions with confidentiality and security obligations that flow down. Our current sub-processor list is available on request to dpo@wireads.com; customers are notified of additions in advance and may object as described in the DPA.
Questions about this section: dpo@wireads.com
We apply encryption in transit (TLS) and at rest for stored business data; role-based access control on least-privilege principles; multi-factor authentication for internal systems; centralised logging and anomaly monitoring; segregation of environments; dependency patching; and periodic security reviews of code and infrastructure. Measures are proportionate to the risk and are described in more detail in the DPA.
Questions about this section: dpo@wireads.com
If a personal data breach occurs, we record it, assess risk to affected individuals and notify the competent supervisory authority without undue delay and no later than 72 hours after becoming aware, unless the breach is unlikely to result in a risk. Where a breach affects data we process on a customer's behalf, we notify that customer without undue delay with the details available — nature of the breach, categories and approximate numbers affected, likely consequences and measures taken — and support their own notification duties.
Questions about this section: dpo@wireads.com
We maintain records of processing under Article 30 for our own operations and support customers with theirs. Where a new feature or integration is likely to result in high risk to individuals, we carry out a data protection impact assessment. Platform customers can request the information they need to complete their own DPIAs — data flows, retention periods, transfer mechanisms — by writing to dpo@wireads.com.
Questions about this section: dpo@wireads.com
Personalised advertising on EEA and UK inventory runs on consent. Publishers collect consent through a consent management platform supporting IAB TCF v2.2, and the resulting Transparency and Consent String travels with every bid request so that WireAds, demand partners and measurement vendors process data only for purposes and vendors the user has accepted. Where consent is withheld for personalisation, we serve contextual advertising only; where no consent is signalled, we treat non-essential cookies as off.
Questions about this section: dpo@wireads.com
You can reach our Data Protection Officer at dpo@wireads.com for anything GDPR-related: rights requests, transfer documentation, sub-processor lists, DPIA support or complaints about our handling of your data. Postal: WireAds, 944 N King St, Wilmington, DE 19801, US.
Questions about this section: dpo@wireads.com
The GDPR gives stronger protection to children's data. Our services are business-facing and not directed to children; we do not knowingly process children's data, and publisher contracts require tags to be configured appropriately on child-directed properties so that no personal information is collected from children without a valid legal basis.
Questions about this section: dpo@wireads.com
Talk to us first: dpo@wireads.com. You also have the right to complain to your local supervisory authority; a list of EEA authorities is published by the European Data Protection Board, and the UK authority is the Information Commissioner's Office. General privacy questions: privacy@wireads.com.
Questions about this section: dpo@wireads.com
