Privacy Policy
Last updated: 22 May 2026
At Affinui, we are committed to protecting your privacy and handling your personal data with transparency, care, and respect. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Who we are
Affinui is a global affiliate network and performance marketing agency. Our registered office is located in Warsaw, Poland.
For the purposes of EU data protection law (GDPR), Affinui acts as the data controller for personal data collected through this website.
If you have any questions about this policy or about how we handle your data, please contact our Data Protection team at: privacy@affinui.com.
2. What data we collect and why
We collect personal data in the following situations:
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, company name | Responding to enquiries submitted via our contact form | Legitimate interest / Contract performance |
| Email address (newsletter) | Sending marketing emails where you have opted in | Consent |
| IP address, browser type, pages visited | Analytics and website performance monitoring | Legitimate interest |
| Cookie identifiers | Remembering your preferences and measuring site usage | Consent (non-essential) / Legitimate interest (essential) |
| Name, payment details, tax information | Onboarding and paying publishers; billing advertisers | Contract performance / Legal obligation |
3. Cookies
We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device that help us operate the site, remember your preferences, and understand how visitors use our content.
Essential cookies
These are necessary for the website to function. They include session management and security tokens. These cannot be disabled.
Analytics cookies
We use analytics tools to understand how visitors interact with our site (pages visited, time on site, traffic sources). These are only set with your consent.
Managing cookies
You can manage or withdraw your cookie consent at any time by clearing your browser's local storage or using your browser's cookie settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. How long we keep your data
We retain personal data only for as long as necessary for the purposes described in this policy:
- Contact enquiry data - 2 years from last contact
- Publisher and advertiser account data - duration of the business relationship plus 6 years (legal obligation)
- Analytics data - 26 months (aggregated, anonymised after this period)
- Email marketing data - until you unsubscribe or withdraw consent
5. Who we share your data with
We do not sell your personal data. We share data only where necessary:
- Service providers - cloud hosting, email delivery, payment processors - who process data on our behalf under data processing agreements
- Advertisers and publishers - only the data necessary to facilitate a specific campaign relationship (e.g. click and conversion data)
- Regulatory authorities - where required by law (e.g. tax authorities in Poland and the UK)
- Successors - in the event of a merger, acquisition, or sale of assets, subject to the same data protection obligations
Where data is transferred outside the European Economic Area (EEA) or UK, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
6. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access - Request a copy of the personal data we hold about you
- Right to rectification - Ask us to correct inaccurate or incomplete data
- Right to erasure - Ask us to delete your data ('right to be forgotten'), subject to legal obligations
- Right to restrict processing - Ask us to limit how we use your data in certain circumstances
- Right to data portability - Receive your data in a structured, machine-readable format
- Right to object - Object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent - Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at privacy@affinui.com. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority - UODO (uodo.gov.pl).
7. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
8. Links to other websites
Our website contains links to third-party websites, including advertiser and publisher platforms. This privacy policy applies only to the Affinui website. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be highlighted on this page with an updated "last updated" date. We encourage you to review this policy periodically.
10. Contact us
For any questions, requests, or concerns relating to this policy or your personal data, please contact:
Email: privacy@affinui.com
Address: Branickiego 15, 02-972 Warsaw, Poland
