1. What this policy covers
This is the privacy policy for the Doctor Devify Affiliate Programme's affiliates and for anyone who applies to join. If you arrived through an affiliate's link or bought a resource, the Hub's privacy policy at tools.doctordevify.com/privacy covers you.
2. Who we are
Doctor Devify Ltd, a UK-registered company, is the data controller. We are registered with the Information Commissioner's Office under reference ZC235234. To get in touch, email hello@doctordevify.com.
3. If you apply, or you are an affiliate
When you apply we collect your name, your email address and a password (the password is held by our account provider, Supabase, and we never see it), where you post and your handle or link there, roughly how many follow you, and a line about what you make. We use these to decide your application and to run the programme.
Once you are approved we hold your code and your link, the rate you earn, a record of each sale credited to you (the resource, the amount paid and whether it was refunded) and the count of presses on your links, with nothing about who pressed. We use these to work out and pay your commission and to show them on your dashboard.
Bank details you enter on your dashboard (the name on the account, the sort code and the account number) are held so we can pay you. They are stored encrypted, and your dashboard shows only the last four digits of the account. They are opened only by the person making your payment, when they make it, and each time they are opened is recorded. We email you whenever they are changed, so you would know if anyone else changed them.
The legal basis for all of this is the agreement between us, the programme's terms, and, for payment records, the legal duty to keep them.
4. Emails
We email you when your application has been decided, through Resend. The programme sends no marketing.
5. Who else touches the data
Supabase holds our database and accounts, in the United Kingdom. Vercel hosts the site and handles requests, in the United Kingdom. Stripe issues the discount codes and processes the payments the programme tracks; Resend delivers the emails. Stripe and Resend are US companies, so a limited amount of data reaches the United States, under the standard contractual safeguards. We do not sell, rent or share your data with anyone for marketing.
If something ever put your details at risk, we would tell you, and the Information Commissioner's Office where the law requires, without delay.
6. How long we keep things
Your application and, if approved, your affiliate record stay while you are in the programme. If you leave, or your application is declined, we delete them when you ask. Your bank details are deleted once the last payment owed to you has been made after you leave. Records of the sales that counted as yours and of the payments we made to you are kept for as long as company payment records must be kept by law, which is six years, and then deleted. The count of presses on your links goes with your record.
7. Your rights
You can ask to see the personal data we hold about you, to correct it, to have it deleted, to receive it in a portable form, and to object to how we use it. Email hello@doctordevify.com and we will reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Changes
If this policy changes in a way that matters, we will tell affiliates by email and show the new date at the top of this page.
9. Contact
Doctor Devify Ltd
Email: hello@doctordevify.com