Privacy Policy
Your privacy matters to us. This policy explains exactly what data Aalulu collects, why we collect it, how we use it, and the rights you have over your personal information.
🔒 The short version: We collect minimal data necessary to run the site (analytics, contact forms). We do not sell your data. You can request deletion at any time by emailing us.
Contents
1. Who We Are
Aalulu.com ("Aalulu", "we", "us", or "our") is an affiliate review website that publishes honest brand reviews, buying guides, and exclusive deals. We are the data controller for information collected through this website.
For privacy-related enquiries, contact us at: Contact Page
2. Data We Collect
Information You Provide Directly
- Contact form submissions: Name, email address, and message content when you reach out via our contact page.
- Newsletter sign-ups: Email address if you subscribe to deal alerts or content updates.
Information Collected Automatically
- Analytics data: Pages visited, time on site, referring URLs, device type, browser type, and approximate location (country/city level). This is collected in aggregate and is not linked to personally identifiable information.
- IP address: Your IP address may be logged by our hosting provider for security purposes.
- Cookies: See the Cookies section below for full details.
Information We Do NOT Collect
- We do not collect payment information (all purchases happen on partner brand websites).
- We do not create user accounts or collect passwords.
- We do not collect sensitive personal data (health, race, religion, etc.).
3. How We Use Your Data
We use the data we collect for the following purposes:
- Responding to enquiries: We use contact form data solely to respond to your message.
- Improving the site: Analytics data helps us understand which content is useful and how to improve the user experience.
- Security: IP logs and server data help us detect and prevent malicious activity.
- Legal compliance: We may process data where required by law.
We do not use your data for automated decision-making or profiling. We do not sell, rent, or share personal data with third parties for their marketing purposes.
4. Cookies & Tracking Technologies
Cookies are small text files stored on your device when you visit a website. Aalulu uses the following types of cookies:
Essential Cookies
Cookies required for the site to function (e.g., session state, security tokens). You cannot opt out of these.
Analytics Cookies
We use Google Analytics (or equivalent) to collect aggregated, anonymised data about how visitors use our site. This data does not identify you personally. You can opt out via your browser settings or browser extensions like uBlock Origin.
Affiliate Tracking Cookies
When you click an affiliate link to a partner brand, that brand may set tracking cookies to attribute your purchase to Aalulu. These cookies are governed by the brand's own privacy policy. We have no access to or control over these third-party cookies.
You can manage or delete cookies at any time through your browser settings. Disabling cookies may affect some functionality.
5. Third-Party Services
Aalulu uses the following third-party services that may process data on our behalf:
- Google Analytics: Aggregated traffic analysis. Governed by Google's Privacy Policy.
- Google Fonts: Font delivery. May log your IP. Governed by Google's Privacy Policy.
- Affiliate Networks (Snowball, brand direct programmes): Track referral clicks and purchases. Each network's own privacy policy applies.
- Web Hosting Provider: Server logs including IP addresses for security purposes.
We do not sell or share personally identifiable information with any third party.
6. Your Rights
Depending on your location, you have the following rights over your personal data:
Under GDPR (EU/EEA/UK Residents)
- Right of access: Request a copy of the data we hold about you.
- Right to rectification: Ask us to correct inaccurate data.
- Right to erasure ("right to be forgotten"): Ask us to delete your data.
- Right to data portability: Receive your data in a machine-readable format.
- Right to object: Object to processing of your data for specific purposes.
- Right to restrict processing: Ask us to limit how we use your data.
Under CCPA (California Residents)
- Right to know: Request disclosure of the categories and specific pieces of personal data we have collected.
- Right to delete: Request deletion of personal data we have collected.
- Right to opt-out of sale: We do not sell personal data, so this right is not applicable.
- Right to non-discrimination: We will not treat you differently for exercising your privacy rights.
To exercise any of these rights, contact us. We will respond within 30 days (GDPR) or 45 days (CCPA).
7. Data Retention
We retain data only for as long as necessary:
- Contact form data: deleted within 12 months of last contact.
- Analytics data: aggregated data retained for up to 26 months; individual session data is anonymised.
- Server logs: typically retained for 90 days for security purposes.
8. Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data in transit.
However, no internet transmission is 100% secure. We cannot guarantee absolute security and encourage you to contact us immediately if you believe your data has been compromised.
9. Children's Privacy
Aalulu is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of Aalulu.com after changes are published constitutes your acceptance of the revised policy.
11. Contact Us
For any privacy-related questions, requests to exercise your rights, or complaints about how we handle your data, please contact us.
If you are an EU resident and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority (DPA).