GDPR Compliance Policy - Fix The Grammar
General Data Protection Regulation (EU) 2016/679

GDPR Compliance Policy

Jurisdiction: European Union & EEA
Data Controller: fixthegrammar.com
DPO Contact: privacy@fixthegrammar.com

At fixthegrammar.com (“we”, “our”, or “us”), we are committed to ensuring the privacy, security, and protection of the personal data of all our users. This GDPR Compliance Policy outlines how we collect, process, store, and safeguard personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) for users located in the European Union (EU) and European Economic Area (EEA).

Section 1

1. Data Controller Identification

For the purposes of the GDPR, the Data Controller responsible for your personal data processed through this website is:

If you have questions regarding this policy or wish to exercise your data protection rights, please contact our privacy office.

Section 2

2. Principles of Data Protection Under GDPR

We process all personal data in accordance with the core principles established by the GDPR. Personal data is:

  • Lawfulness, Fairness & Transparency: Lawfully, fairly, and transparently processed.
  • Purpose Limitation: Collected for specified, explicit, and legitimate purposes and not processed further in a manner incompatible with those purposes.
  • Data Minimization: Adequate, relevant, and limited to what is necessary for the performance of our services.
  • Accuracy: Accurate and, where necessary, kept up to date.
  • Storage Limitation: Retained only for as long as necessary for the purposes for which it is processed.
  • Integrity & Confidentiality: Processed securely to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Section 3

3. Legal Bases for Data Processing

We only collect and process your personal data when we have a valid legal basis under Article 6 of the GDPR:

Art. 6(1)(a) GDPR

Consent

When you give explicit consent, such as subscribing to newsletters, accepting non-essential cookies, or using specific opt-in features.

Art. 6(1)(b) GDPR

Contractual Necessity

When processing is necessary to provide our grammar-checking, proofreading, or editing services directly to you.

Art. 6(1)(f) GDPR

Legitimate Interests

When necessary for site security, preventing automated bot fraud, and improving tool performance, without overriding your rights.

Art. 6(1)(c) GDPR

Legal Obligation

When required to comply with statutory legal requirements, court orders, or European Union member state regulations.

Section 4

4. Personal Data We Collect

We may collect and process the following categories of data:

  • Submitted Content: Text, sentences, or documents uploaded or pasted into our grammar tools for checking and editing.
  • Account Information: Name, email address, username, and authentication details (if you register an account).
  • Technical & Usage Data: IP address, browser type, operating system, device details, pages visited, time spent on site, and referrer URLs.
  • Cookies & Tracking Data: Preferences and site interactions collected via essential and analytics cookies (see Section 8).
Important Note on Text Inputs: Text submitted into our grammar checker is processed solely to perform editing, spelling, and style analysis. Content is not shared with unauthorized third parties or used to publicly identify users.
Section 5

5. Your Rights Under the GDPR

If you are located in the EU/EEA, you hold the following rights regarding your personal data:

Right of Access

Art. 15

Request a copy of the personal data we hold about you.

Right to Rectification

Art. 16

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Art. 17

("Right to be Forgotten"): Request the deletion of your personal data under certain conditions.

Right to Restrict Processing

Art. 18

Request that we restrict the processing of your data under specific circumstances.

Right to Data Portability

Art. 20

Request your data in a structured, commonly used, machine-readable format.

Right to Object

Art. 21

Object to data processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Art. 7(3)

Withdraw your consent at any time where processing relies on consent.

Right to Lodge a Complaint

DPA

Lodge a complaint with a Data Protection Authority in your EU member state if you believe our processing violates the GDPR.

To exercise any of these statutory rights, please contact our Privacy Office at privacy@fixthegrammar.com. We will respond without undue delay and at the latest within 30 days.
Section 6

6. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

  • Submitted Text Inputs: Deleted automatically or retained strictly for temporary caching during active checking sessions.
  • Account Information: Retained as long as your account remains active or as needed to provide services.
  • Analytics Data: Anonymized or pseudonymized and retained according to standard analytics retention periods.
Section 7

7. International Data Transfers

If personal data is transferred outside the EU/EEA, we ensure adequate safeguards are implemented in accordance with Chapter V of the GDPR. This includes:

  • Transferring data to countries recognized by the European Commission as providing an adequate level of data protection.
  • Executing Standard Contractual Clauses (SCCs) approved by the European Commission with third-party service providers.
Section 8

8. Cookies and Consent Management

We use cookies and similar tracking technologies to enhance user experience and analyze traffic:

  • Essential Cookies: Necessary for basic website functionality (no consent required under ePrivacy).
  • Analytics/Performance Cookies: Help us understand site traffic and usage patterns (requires explicit user consent via our cookie banner).

Users can manage or revoke cookie preferences at any time through their browser settings or via the cookie banner on our site.

Section 9

9. Data Security Measures

We employ technical and organizational measures to ensure a high level of security, including:

  • Encryption: SSL/TLS encryption for data in transit and industry-standard encryption for stored data.
  • Access Control: Restricted access to personal data, limited strictly to authorized personnel.
  • System Monitoring: Regular security reviews and vulnerability assessments to guard against unauthorized access or breaches.
Section 10

10. Data Breach Notifications

In the event of a personal data breach that poses a high risk to user rights and freedoms, we will notify the competent Data Protection Authority within 72 hours of becoming aware of the breach, and inform affected users without undue delay, as required by GDPR Articles 33 and 34.

Section 11

11. Contact Details & Data Protection Officer

If you have any questions, requests, or concerns regarding this GDPR Compliance Policy or how your data is handled, please reach out to us:

Copied to clipboard!
Scroll to Top