1. OPENING STATEMENT

When you apply to our affiliate network, you accept the terms of this Privacy Notice.

This document outlines our practices for gathering, using, handling, and revealing your personal data.

The "Controller" of data is the legal entity deciding the goals and methods of managing personal data under this Data Policy.

Mad Men Ltd functions as the data controller as defined by EU Regulation 2016/67, determining the reasons and tools used to manage your data.

For clarity, references to "we", "us", or "our" in this notice apply to the entity accountable for your data within this Data Policy.

Refer to Section 7 for the Controller’s contact information.

2. DATA WE GATHER

When joining as an Affiliate, we require details like your username, website URL, email, country, and preferred currency.

Once approved, we collect your full name, address, birth date, contact number, and occasionally your Skype handle.

3. HOW WE USE COLLECTED DATA

Your information is necessary to uphold the contract between you and us, especially to apply our User Agreement and notify you of updates.

We may also use your data to:

• Reach out regarding offers, services or products of interest— only if you’ve opted in for such updates.

• Conduct user profiling to refine and personalize our promotional messages and improve communication relevance.

These uses are based on our legitimate business aim to promote products or services aligned with your interests. You may opt out by adjusting your settings or following unsubscribe links in our emails.

4. INFORMATION SHARING

4.1. LEGAL COMPLIANCE, REQUESTS, PREVENTION OF HARM AND RIGHTS PROTECTION.

Your personal data may be shared with authorities, courts, or relevant third parties if required by law, or to (i) meet our legal duties, (ii) comply with legal procedures or respond to claims, (iii) assist in investigations of unlawful acts or avoid liability exposure for you or us.

Our legal basis for such sharing is our right to protect ourselves and enforce legal claims.

4.2. EXTERNAL SERVICE PROVIDERS

We may engage external providers to support delivery of affiliate services. These providers may operate in or outside the European Economic Area (EEA).

Such providers have controlled access to your data and must follow strict contractual obligations to handle data only for designated purposes in line with this policy.

We share data with providers only to fulfill our service duties, satisfy legal requirements, or support our legitimate interests. Consent is requested when necessary.

To get a full list of providers handling your data, contact us.

4.3. CORPORATE GROUP

We may share your personal data with our parent companies, branches, and subsidiaries when necessary and legally justified.

4.4. COMPANY CHANGES

In case of mergers, asset sales, restructuring, or insolvency events, we may transfer personal data as part of the transaction. You will be informed before any change in data governance occurs.

5. USER DATA RIGHTS

The GDPR grants you rights such as access, correction, deletion, restriction, and portability of your data. Whether we can fulfill these rights depends on data type, reason for collection, and legal obligations.

To invoke these rights, email [email protected]. We may need to verify your identity first.

Please note your rights are not unconditional—we might deny or partially fulfill requests based on legal grounds.

5.1. DATA MANAGEMENT

You can review or update some data via your account settings. It’s your duty to ensure your data remains current.

5.2. RECTIFYING ERRORS

You can ask us to correct or complete inaccurate data you can’t edit through your account.

5.3. ACCESS AND PORTABILITY

You may request a copy of your data in a structured digital format and ask us to transmit it to another provider, where feasible.

5.4. STORAGE AND DELETION

We retain data as long as required to meet our agreement and legal duties. Data no longer needed will be erased unless we are legally required to retain it longer.

You can request deletion if processing is unnecessary, consent was withdrawn, you objected, processing was unlawful, or deletion is legally required.

Please consider:

a. We can retain data as needed to fulfill legal duties.

b. We may keep information for security, fraud prevention, or similar business needs.

c. We may preserve your data longer when involved in legal cases or government investigations, or to prevent harm.

5.5. CONSENT REVOCATION AND LIMITATIONS

If our data use depends on your consent and no other basis applies, you can withdraw consent at any time via settings or by emailing [email protected] with details. Withdrawal doesn't affect prior lawful uses.

You may also limit data use if: (i) data accuracy is disputed, (ii) processing is unlawful and you request restriction, (iii) you require the data for legal matters, or (iv) you object and await resolution.

5.6. RIGHT TO OBJECT

You may object if processing is based on our legitimate interests. We may still continue processing if valid legal grounds apply.

You may always object to direct marketing, either via settings or by using the opt-out link. You can also oppose marketing-based profiling.

5.7. FILING COMPLAINTS

You can lodge a complaint with your regional data protection authority if you believe your rights are violated. See Section 7 for help.

6. CROSS-BORDER DATA HANDLING

To support global operations, we may share or move data within our corporate group or with partners based outside Europe.

We ensure that data sent outside the EEA is protected under GDPR-compliant safeguards like standard clauses or other lawful protections.

You may request a list of our non-EEA data handlers at any time.

7. GET IN TOUCH

Questions about this policy or your rights under GDPR? Contact our Data Protection Officer at [email protected].

The designated Data Controller is Mad Men Ltd, company no. C 77905, based at 97, Windsor Street, Sliema, Malta.

8. HOW TO FILE A COMPLAINT

If unhappy with our handling of your data, you are entitled to lodge a complaint with your National Data Protection Authority .