Privacy Policy

Effective date: June 11, 2026

This policy explains how Offer Town Limited, Miltonos 54B, Agios Spyridonas, 3050 Limassol, Cyprus (“Offertown”, “we”) processes personal data when you use offertown.net. It covers three groups of people: referrers (people with an Offertown account), referred friends (people invited through a referral link or form, who may not have an account), and partner contacts (people acting for a business that runs a program on Offertown). We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data we collect

If you have an Offertown account

  • Account data: name, email address, and sign-in credentials, managed through our authentication provider, Clerk.
  • Referral activity: the programs you join, your referral links, clicks, conversions, and rewards.
  • Wallet and payout data: your wallet balance and transaction history. To withdraw money you complete identity verification with our payment provider, Stripe; Stripe collects the verification documents and bank details, not Offertown.

If you were referred by someone

  • Referral attribution: when you click a referral link we set a cookie valid for 90 days so the referrer can be credited if you go on to make a purchase (see the Cookie Policy).
  • Lead details you submit:if you fill in a referral form on a partner’s website (our embedded widget), we receive the details you enter — typically your name and email, and where the partner’s form requests it, phone number and address.
  • Details submitted by the partner: partners may record your referral or purchase with us through their webshop integration, which can include your name, email, and order value, so that the referral can be attributed and rewarded.

Everyone

  • Technical data: IP address, browser information, and server logs used for security, rate limiting, and abuse prevention.

2. Why we process it (legal bases)

  • To provide the Service — operating referral programs, attributing conversions, paying rewards, issuing and redeeming vouchers (performance of a contract, Art. 6(1)(b) GDPR).
  • To attribute referrals of non-account holders and to let partners reward genuine recommendations (legitimate interests, Art. 6(1)(f); consent where required for cookies, see below).
  • To meet legal obligations — accounting, tax, and anti-money-laundering requirements connected to payouts (Art. 6(1)(c)).
  • To prevent fraud and abuse — detecting self-referral, fake conversions, and attacks on the platform (legitimate interests, Art. 6(1)(f)).

3. Who we share data with

  • Partners:a partner sees the referral data needed to run its program — referred friends’ submitted details and conversion status, and referrers’ names/emails connected to its program. Partners may not use this data for purposes beyond the program.
  • Processors: Clerk (authentication), Stripe (payments and payouts), Convex (database/backend), Vercel (hosting), and our email delivery provider. Each processes data under a data processing agreement.
  • Authorities: where required by law.

We do not sell personal data.

4. International transfers

Our infrastructure is hosted in the European Union where available. Some processors (for example Clerk, Stripe, and Vercel) may process data in the United States; in those cases transfers are protected by the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

5. Retention

  • Account, wallet, and transaction records: for the life of the account and thereafter as required by accounting and tax law (typically up to 10 years for financial records).
  • Referral attribution cookies: 90 days.
  • Lead submissions that never convert: deleted or anonymized once the attribution window and any audit needs have passed.
  • Security logs: short-term, then deleted or aggregated.

6. Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction of processing, portability, and you can object to processing based on legitimate interests. If processing is based on consent you can withdraw it at any time. Write to support@offertown.netand we will respond within one month. You also have the right to lodge a complaint with your supervisory authority ([SUPERVISORY AUTHORITY FOR THE CONTROLLER’S JURISDICTION]).

If you were referred by someone and don’t want your details kept, contact us at the address above — we can remove lead data that isn’t needed for completed transactions.

7. Cookies

We use a small number of cookies, described in the Cookie Policy: authentication cookies for signed-in users and a referral attribution cookie set when you follow a referral link.

8. Partners as data senders

Partner businesses that send customer data to Offertown through our WooCommerce plugin, widget, or API remain responsible for the lawfulness of that collection on their own sites (including any consent required for the tracking technologies they deploy there). The allocation of responsibilities between the partner and Offertown is set out in our partner data processing terms, available on request.

9. Changes

We will post any changes to this policy here and, for material changes, notify account holders by email.

10. Contact

Offer Town Limited, Miltonos 54B, Agios Spyridonas, 3050 Limassol, Cyprus — support@offertown.net