Privacy Policy

Effective date: 12 July 2025

This Privacy Policy outlines how your personal data is collected, used, and protected when you visit this website, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
We operate an affiliate website focused on helping UK small and medium enterprises (SMEs) discover useful digital and AI tools. We are the Data Controller for the purposes of UK GDPR.
Contact: [email protected]

2. What Personal Data We Collect
We may collect and process the following data:

- Name and email address (when you sign up for a newsletter or download a resource)
- IP address and device/browser data
- Referral/affiliate link tracking
- Behavioural and analytics data (via cookies)
- Any messages you send us directly

3. How We Use Your Information
We use your data for:

- Sending emails and downloadable content you’ve requested
- Improving website performance and user experience
- Delivering affiliate links and tracking purchases (to earn commissions)
- Complying with legal and regulatory obligations

4. Legal Basis for Processing
We rely on the following lawful bases:

- Consent (for email marketing and analytics cookies)
- Legitimate interests (e.g., for affiliate tracking and improving services)
- Legal obligation (if required to disclose data to regulators)

5. How We Store and Protect Your Data
Your data is stored securely using third-party providers such as email marketing platforms (e.g., ConvertKit or MailerLite) and website hosting services. Access is limited and encrypted where possible.

6. How Long We Keep Your Data
We only retain your data for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting requirements. You may unsubscribe or request deletion at any time.

7. Sharing of Personal Data
We do not sell your personal data. However, we may share it with:

- Email service providers (to send newsletters)
- Analytics and advertising platforms (e.g. Google Analytics, Facebook)
- Affiliate networks (for commission tracking)
- All third parties are GDPR-compliant and only process data as instructed.

8. International Transfers
Some of our partners (like analytics or affiliate platforms) may process your data outside the UK. In such cases, we ensure that adequate safeguards are in place (e.g. Standard Contractual Clauses or UK adequacy decisions).

9. Your Rights Under UK GDPR
You have the right to:

- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent at any time

To exercise these rights, contact: [email protected]