Legal
Privacy policy
How we collect, use, retain, and protect personal data โ including UK/EEA lawful basis and California-style rights.
See also Cookie policy.
Last updated: 28 May 2026 ยท Effective: 28 May 2026
1. Who we are (data controller)
Best Essay Services (best-essay-services.com) is operated by the operator of best-essay-services.com ("we", "us", "our"). For privacy matters, contact privacy@best-essay-services.com. We act as the data controller for personal data collected through this website and related account features, except where a third-party partner processes data under its own policy after you leave our site.
2. Scope and audience
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit our site, create an account, use the match tool, click outbound links, submit cashback or protection claims, or communicate with support.
- If you are in the UK or EEA, we process data under UK GDPR and EU GDPR (where applicable), including lawful basis and data subject rights below.
- If you are in California or certain other US states, additional rights may apply (see Section 12).
- Our site is not directed at children under 16 (or 13 where local law requires). We do not knowingly collect children's data.
3. Categories of personal data we collect
- Identity & account: email address, display name (if provided), hashed password, referral code, tier status.
- Usage & technical: IP address, browser/device type, pages viewed, timestamps, referral URLs, session identifiers, approximate region from IP.
- Attribution & clicks: internal click IDs (e.g. bes_* sub_id stored in our database), service slug clicked, affiliate redirect events โ we do not append our tracking IDs to partner URLs.
- Claims & support: order references, service name, amounts, work type, messages in support tickets, evidence you upload for cashback or order protection.
- Communications: content of emails or forms you send to us.
- Cookies & similar technologies: see our Cookie Policy at /cookies.
We do not intentionally collect special category data (e.g. health, political opinions). Do not submit such data in support messages or claim forms.
4. Sources of data
- Directly from you (registration, dashboard, claim forms, contact).
- Automatically from your device when you use the site (logs, cookies).
- From partner postbacks/webhooks where configured (order verification signals linked via sub_id).
- From public review platforms (aggregated scores and counts โ not your personal Trustpilot/Sitejabber profiles unless you provide them).
5. Purposes of processing
- Operate and secure the website, accounts, and dashboards.
- Provide rankings, match results, reviews, and editorial content.
- Record affiliate clicks and attribute cashback/protection eligibility where applicable.
- Process cashback and order-protection claims and prevent fraud.
- Respond to support, legal, and data subject requests.
- Analyze aggregated usage to improve product quality and methodology.
- Comply with legal obligations and enforce our Terms.
6. Lawful basis (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on the following lawful bases:
- Contract (Art. 6(1)(b)): account features, cashback/protection workflows you request, fulfilling support related to your account.
- Legitimate interests (Art. 6(1)(f)): site security, fraud prevention, analytics, affiliate click logging, improving rankings methodology โ balanced against your rights; you may object (see Section 11).
- Consent (Art. 6(1)(a)): non-essential cookies and optional marketing where we request consent; withdraw anytime via cookie settings or browser controls.
- Legal obligation (Art. 6(1)(c)): records required by tax, fraud, or regulatory requests.
8. Retention periods
- Account data: for the life of the account plus up to 24 months after deletion (backup and dispute resolution), unless longer retention is required by law.
- Affiliate click logs: typically 24 months from click date.
- Claim and ticket records: up to 6 years from resolution (financial and legal record-keeping).
- Server logs: typically 90 days, unless needed for security investigations.
- Cookie data: per durations in /cookies.
- Marketing consents: until withdrawal plus proof of consent for up to 3 years.
We may retain anonymized or aggregated statistics indefinitely.
9. Security
We implement technical and organizational measures appropriate to risk, including access controls, encryption in transit (HTTPS), and hashed credentials. No method of transmission or storage is 100% secure; report suspected breaches to privacy@best-essay-services.com promptly.
10. Your rights (UK / EEA)
Subject to conditions and exceptions in law, you may have the right to:
- Access โ obtain a copy of your personal data.
- Rectification โ correct inaccurate data.
- Erasure โ request deletion in certain circumstances.
- Restriction โ limit processing in certain circumstances.
- Portability โ receive data you provided in a structured, machine-readable format where processing is based on contract or consent and carried out by automated means.
- Object โ object to processing based on legitimate interests, including profiling related to those interests.
- Withdraw consent โ where processing is consent-based, without affecting prior lawful processing.
- Lodge a complaint โ with your supervisory authority (e.g. ICO in the UK, or your local EU authority).
To exercise rights, email privacy@best-essay-services.com with sufficient detail to verify your identity. We respond within one month (extendable by two months for complex requests).
11. Automated decision-making
Match rankings and trust scores use algorithmic sorting and editorial rules. These do not produce legal or similarly significant effects solely by automated means without human review. You may contact us for an explanation of how scores are generally calculated (see /methodology).
12. US state privacy notices (California and similar)
Where state law applies (e.g. California CPRA), residents may have rights to know, delete, correct, and opt out of certain sharing. We do not sell personal information as defined under CPRA. We do not share for cross-context behavioral advertising in a manner that constitutes "sale" or "sharing" without offering an opt-out where required.
- Categories collected: identifiers, internet activity, commercial information (claims), inferences (aggregated product analytics).
- Purposes: as in Section 5.
- Retention: as in Section 8.
- Rights requests: email privacy@best-essay-services.com; we will not discriminate against you for exercising rights.
- Authorized agents: permitted with verifiable authorization where required by law.
13. Changes to this policy
We may update this policy. Material changes will be posted on this page with a new "Last updated" date. Continued use after the effective date constitutes notice of the update where permitted by law.
Questions: legal@best-essay-services.com ยท Contact page