AffiliatrAffiliatr← Back to site

Privacy Policy

Last updated: 12 June 2026

This Privacy Policy explains how Slyck Ltd(“Affiliatr”, “we”, “us”), company no. 12964827, registered in England and Wales with its registered office at 71–75 Shelton Street, London WC2H 9JQ, handles personal data in connection with the Affiliatr platform (the “Service”).

We act in two different roles. For the accounts of merchants who subscribe to Affiliatr, we are the data controller. For the data a merchant collects through the Service about their own partners and customers (such as partner records, clicks, and conversions), the merchant is the controller and we act as their data processor. If you are a partner or a customer and have questions about that data, please contact the merchant whose programme you took part in.

1. The data we collect

Merchant account data

  • name, email address, company name, and sign-in identifiers;
  • billing details, processed by Stripe — we store your Stripe customer ID and subscription status, not your full card number;
  • the settings and content you create (commission rules, partner records, coupon codes).

Partner data

  • name, email address, and any website or social profile and application notes provided;
  • payout and identity details, collected directly by Stripe when a partner sets up a Stripe Express account; we store the partner’s Stripe account ID, onboarding status, and country, not their full bank details;
  • commission, click, and conversion totals within a programme.

Usage and device data

  • when someone follows a referral link or the tracking pixel fires, we record the click or conversion together with the IP address, browser user-agent, referring page, and a first-party cookie identifier;
  • order references and sale amounts for conversions attributed to a partner;
  • standard server logs and security/anti-abuse data such as rate-limit counters.

We use IP addresses for attribution, security, and abuse prevention. We do not use them to build a location profile of visitors. The only location data we hold is the country a partner provides to Stripe when setting up payouts, which merchants use for analytics about where their partners are based.

2. Cookies and tracking

Referral links set first-party cookies (prefixed _aff_) to attribute a later purchase to the partner who referred it, and the optional conversion pixel a merchant installs on their own website reports completed sales back to the Service. These are used for affiliate attribution, not for advertising, and we do not use third-party advertising or cross-site tracking cookies. Where a merchant deploys the pixel on their site, the merchant is responsible for any cookie notice or consent its visitors require.

3. How we use data and our legal bases

  • To provide the Service — creating accounts, tracking referrals, calculating commissions, and facilitating payouts (performance of a contract).
  • To operate and improve the platform, keep it secure, and prevent fraud and abuse (our legitimate interests).
  • To communicate with you about your account, invitations, and service notices (contract and legitimate interests).
  • To meet legal obligations, such as tax, accounting, and responding to lawful requests (legal obligation).

Where we process partner or customer data as a processor, we do so on the merchant’s documented instructions through their use of the Service.

4. Who we share data with

We share personal data only as needed to run the Service, with providers including:

  • Stripe — subscription billing and partner payouts;
  • Google Firebase — authentication, database, and hosting;
  • Resend — transactional email (invitations and notifications);
  • professional advisers or authorities where required by law, and a buyer in connection with a business sale or reorganisation.

We do not sell personal data.

5. International transfers

Some of our providers process data outside the UK. Where we transfer personal data abroad, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

6. Retention

We keep personal data for as long as needed to provide the Service and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution requirements, after which it is deleted or anonymised. Merchants can delete much of their data from within the Service.

7. Your rights

Subject to UK data protection law, you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. To exercise these rights over data we hold as a controller, contact us using the details below. For data held by a merchant as controller, contact that merchant. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. If we make material changes we will give reasonable notice, for example by email or in-app.

10. Contact

For any privacy question or request, email us at hello@slyck.app or write to Slyck Ltd at the registered office above.

Affiliatr is operated by Slyck Ltd (company no. 12964827), a company registered in England and Wales, with registered office at 71–75 Shelton Street, London WC2H 9JQ. Questions about these terms? hello@slyck.app.