Last updated: 8 October 2026
This Privacy Notice explains how Affpinions ("we", "us", "our") collects and uses personal data when you visit affpinions.com (the "Site"), contact us, subscribe to our newsletter or buy one of our services. We are committed to protecting your privacy and handling your data openly and lawfully, in line with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations ("PECR"). Where the EU GDPR applies to you, this notice is intended to meet its requirements too.
The short version
- We collect only what we need: mainly what you type into our forms.
- We do not sell your personal data, and we do not run advertising or cross-site tracking cookies.
- The Site uses essential browser storage to remember preferences such as your cookie choice and compare list.
- You can ask to see, correct or delete your data at any time.
1. Who we are
Affpinions is the data controller for personal data processed through the Site. We are based in the United Kingdom.
- Website: https://affpinions.com
- Email: [email protected] (general enquiries: [email protected])
- Contact form: affpinions.com/contact
We are a small organisation and are not required to appoint a Data Protection Officer, but privacy enquiries are handled directly by the site owner.
2. What personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact data | Name, email address, company name, website URL | You, via the contact or order form |
| Message content | The subject and content of your enquiry, edit suggestions, listing submissions | You |
| Newsletter data | Email address, date of subscription, confirmation status | You, via the newsletter form |
| Service & billing data | Billing name and address, VAT number, services purchased, invoices, correspondence | You, and our payment provider |
| Technical data | IP address, browser type, device information and request logs recorded by our hosting provider for security | Your browser, automatically |
| Preference data | Cookie choice, compare list, last-used tool inputs stored in your own browser | Your browser (stored locally, not sent to us) |
We do not intentionally collect special category data (such as health, political opinions or religious beliefs). Please do not include such information in messages to us. We do not knowingly collect data from anyone under 18.
3. How we use your data and our lawful bases
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Responding to enquiries and edit/listing suggestions | Legitimate interests (running the directory and helping users), or steps prior to a contract |
| Sending the newsletter | Consent — you can withdraw at any time using the unsubscribe link |
| Providing paid services, invoicing and accounting | Performance of a contract; legal obligation (tax and accounting records) |
| Keeping the Site secure, preventing spam and abuse | Legitimate interests (security and integrity of the Site) |
| Improving the Site and content based on feedback | Legitimate interests |
| Complying with legal requests and protecting our rights | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and expectations. You can ask us for details of that assessment.
4. Marketing
We only send marketing emails (our newsletter) if you have opted in. Each email contains an unsubscribe link, and you can also unsubscribe by contacting us. We never share your email address with networks or advertisers for their own marketing.
5. Who we share data with
We share personal data only where necessary, with:
- Service providers (processors) who help us run the Site and business — for example web hosting, email delivery, newsletter software, payment processing and accounting software. They may only use your data on our instructions and must keep it secure.
- Professional advisers such as accountants or lawyers, where needed.
- Authorities where we are legally required to, or to protect our rights, property or safety, or that of others.
- A buyer or successor if Affpinions is sold or restructured, subject to equivalent privacy protections.
When you click a link to an affiliate network or merchant, you leave our Site. That third party may collect data about you (for example via its own tracking) under its own privacy policy. We do not pass your name or email to them.
6. International transfers
Some of our service providers may process data outside the UK. Where this happens we make sure an appropriate safeguard is in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep data
| Data | Retention |
|---|---|
| General enquiries and suggestions | Up to 24 months after our last correspondence |
| Newsletter subscription | Until you unsubscribe, then a suppression record so we don't email you again |
| Client and invoice records | 6 years after the end of the financial year, as required for tax purposes |
| Server security logs | Typically up to 30 days, as set by our hosting provider |
| Browser storage on your device | Until you clear it; you control this |
8. How we protect your data
The Site is served over HTTPS. We limit access to personal data to people who need it, use reputable providers with strong security practices, use multi-factor authentication on our accounts and keep software up to date. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Information Commissioner's Office and, where required, you.
9. Cookies and browser storage
The Site does not use advertising, analytics or social-media tracking cookies. We use essential local browser storage to remember your choices. Full details are in our Cookies Notice.
10. Your rights
Under data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you;
- Rectification — ask us to correct inaccurate or incomplete data;
- Erasure — ask us to delete your data in certain circumstances;
- Restriction — ask us to limit how we use your data in certain circumstances;
- Objection — object to processing based on legitimate interests, and to direct marketing at any time;
- Portability — receive data you provided to us in a machine-readable format, where processing is based on consent or contract;
- Withdraw consent — at any time, where we rely on consent;
- not to be subject to decisions based solely on automated processing that significantly affect you (we do not make such decisions).
To exercise your rights, email [email protected] or use the contact form. We will respond within one month and may need to verify your identity. There is normally no fee.
11. Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you live in the EU or EEA, you can contact your local data protection authority.
12. Information for US residents
We do not sell or share personal information for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act (as amended) and similar US state laws. You may request access to or deletion of your personal information using the contact details above.
13. Changes to this notice
We may update this Privacy Notice from time to time. The "Last updated" date shows the latest version. Significant changes will be highlighted on the Site or, where appropriate, notified to you by email.