Privacy Policy

Effective date: October 17, 2026  ·  Last updated: October 17, 2026

QA Affiliate ("we", "us", "our") is a product-discovery website that curates deals and product recommendations from third-party merchants. This Privacy Policy explains what information we collect when you visit qa-affiliate-blush.vercel.app (the "Site"), how we use it, who we share it with, and the rights you have over your information.

If you do not agree with this policy, please do not use the Site.

1. Data controller and contact

The data controller for information collected through this Site is:

• QA Affiliate — operated by Qasim Kayani
• Contact for privacy questions: via our contact page

We will respond to privacy inquiries within 30 days.

2. Information we collect

We collect as little data as possible. The categories below cover everything we gather:

2.1 Information you provide directly

• Newsletter subscription: if you subscribe, we store your email address solely to send the newsletter you requested.
• Contact messages: when you use our contact form, we receive your name, email address and message content, used only to respond to your inquiry.

2.2 Information collected automatically

• Analytics: we use Google Analytics 4 with IP anonymization to understand aggregate usage — which pages are viewed and how visitors engage with the Site. We do not collect advertising identifiers ourselves. Analytics is only active once a measurement ID is configured.
• Affiliate click events: when you click a "View Deal" or product link, an anonymous event (product, merchant, category, timestamp) may be recorded to measure which collections perform. This contains no personal information. A copy may be stored in your browser's local storage.
• Technical and log data: our hosting provider (Vercel) automatically processes standard web-server logs, including IP address, browser type, pages requested and timestamps, for security and operational purposes.

2.3 Information we do NOT collect

• We do not create user accounts or profiles.
• We do not collect payment information — all purchases happen on the merchant's own website.
• We do not collect precise geolocation, biometric data, or sensitive personal information.
• We do not sell, rent or trade personal data.

3. How we use your information

• To operate, secure and improve the Site and its content.
• To send newsletters you subscribed to (you can unsubscribe at any time via the link in every email).
• To respond to messages you send us.
• To measure aggregate engagement and affiliate-link performance.
• To comply with legal obligations and enforce our Terms of Use.

4. Legal bases for processing (GDPR / UK GDPR)

Where the General Data Protection Regulation applies, we process personal data on these legal bases:

• Consent — newsletter subscriptions and non-essential analytics cookies.
• Legitimate interests — operating and securing the Site, measuring aggregate performance, and responding to inquiries.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

5. Cookies and similar technologies

We use a small number of cookies and browser-storage entries for analytics and core site functionality. Merchants you visit through our affiliate links set their own cookies under their own privacy policies — including cookies that attribute a resulting purchase to our referral, which is how we earn a commission at no extra cost to you. Full details are in our Cookie Notice, including how to manage your cookie preferences through your browser settings.

6. How we share information

We share information only as described below:

• Analytics provider: Google Analytics processes usage data on our behalf under Google's terms and data-processing commitments.
• Affiliate merchants: when you click through to a merchant (such as Temu or AliExpress) and make a purchase, that merchant processes your order and payment under its own privacy policy. We receive only aggregate or anonymized referral reports.
• Hosting provider: Vercel hosts the Site and processes technical log data to deliver and protect it.
• Newsletter provider: once connected, our email provider will process subscriber addresses solely to deliver the newsletter.
• Legal compliance: we may disclose information if required by law, court order, or to protect our rights and the safety of others.

We never sell your personal information, and we do not share it for cross-context behavioral advertising.

7. International data transfers

Our hosting and analytics providers may process data in countries outside your own, including the United States. Where required, transfers are safeguarded by appropriate mechanisms such as the EU Standard Contractual Clauses.

8. Data retention

• Newsletter emails: kept until you unsubscribe, then deleted from the mailing list.
• Contact messages: kept as long as needed to handle your inquiry, then deleted.
• Analytics data: retained per Google Analytics' default retention settings (currently 14 months for event data).
• Server logs: retained by our hosting provider per its standard operational periods.

9. Your privacy rights

9.1 GDPR / UK GDPR rights (EEA and UK visitors)

You have the right to access, rectify, erase, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection authority.

9.2 CCPA / CPRA rights (California residents)

You have the right to know what personal information we collect, to request deletion, to correct inaccurate data, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CCPA, so no opt-out mechanism is required; requests to know or delete will still be honored.

9.3 How to exercise your rights

Submit requests via our contact page. We will verify your identity as needed and respond within the timeframe required by applicable law (generally 30–45 days). We will not discriminate against you for exercising your rights.

10. Children's privacy

The Site is not directed at children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.

11. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no industry standard for honoring it, we do not currently alter our practices in response, but you can control cookies through your browser settings as described in our Cookie Notice.

12. Third-party links

The Site links to third-party merchants and websites. Their privacy practices are governed by their own policies, which we encourage you to read. See also our Affiliate Disclosure and Advertising Policy.

13. Changes to this policy

We may update this policy as the Site evolves. Material changes will be reflected in the "Last updated" date above, and where appropriate we will highlight the change on the Site. Continued use of the Site after changes take effect constitutes acceptance of the revised policy.

14. Contact us

Questions about this Privacy Policy or our data practices: please reach us via our contact page. We aim to respond within 30 days.