Privacy Policy

1. Who we are

amapei (amapei.com) is a promotional publishing site operated by Amapei Media. For the purposes of UK data protection law we are the data controller for the personal data described below. Postal address: Amapei Media, 31-33 Chapel Hill, Huddersfield HD1 3ED, United Kingdom. Company registration number: GB 790 0261 47. Telephone: +44 1484 421319. Data protection enquiries: [email protected].

2. What we collect

• Technical and usage data — IP address (truncated where our analytics provider supports it), device and browser type, operating system, screen size, referring URL, pages viewed, time on page, scroll depth and clicks on outbound product links.
• Consent data — the choice you make in our cookie banner and the date it was given, stored in your browser and, where applicable, in our consent log.
• Correspondence — your name, email address and message if you contact us, plus any attachments you send.
• Testimonial submissions — where a reader volunteers a product experience, the name, location and content they supply, and their written permission to publish.

We do not ask for, and do not want, special category data (health, beliefs, biometrics) and we do not knowingly collect data from children under 13. We do not operate a checkout, so we never see or store your payment card details — those are handled entirely by the retailer.

3. Why we use it, and our lawful basis

• To deliver and secure the site — legitimate interests (running a safe, functioning website and preventing fraud or abuse).
• To measure how our advertorial content performs, including attributing outbound clicks and conversions to a campaign — consent, given through the cookie banner.
• To show and optimise advertising on third-party networks such as Outbrain, Taboola, Meta or Google — consent.
• To answer your enquiries — legitimate interests, or performance of a contract where relevant.
• To publish a testimonial you sent us — consent, which you may withdraw at any time.
• To meet legal and advertising-code obligations, including record-keeping for the CAP Code and tax rules — legal obligation and legitimate interests.

4. Cookies and similar technologies

Non-essential cookies and pixels are only set after you accept them. Full detail of each category, the providers involved and how to change your mind is in our Cookie Policy. Withdrawing consent is as easy as giving it: clear this site's data in your browser and choose "Essential only" when the banner reappears.

5. Who we share data with

We share limited data with service providers acting on our instructions or as independent controllers of their own advertising data:

• Hosting, CDN and security providers;
• Web analytics providers;
• Native advertising and social advertising networks, and affiliate tracking platforms, which use click identifiers to credit a referral;
• Email and helpdesk providers used to answer your messages;
• Professional advisers, insurers, or authorities where we are legally required to disclose.

We never sell your personal data. When you click through to a retailer you leave our site and that retailer's own privacy notice governs everything you do there, including your order.

6. International transfers

Some providers are based outside the UK, principally in the United States and the EEA. Where data leaves the UK we rely on UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with additional technical safeguards such as encryption in transit and at rest.

7. How long we keep it

• Server and security logs — up to 12 months.
• Analytics data — up to 14 months, then aggregated or deleted.
• Consent records — up to 24 months from the last interaction.
• Email correspondence — up to 24 months after the matter is closed.
• Testimonial permissions — for as long as the testimonial is published, plus 6 years to evidence compliance.

8. Your rights

You have the right to be informed; to access a copy of your data; to rectification; to erasure; to restrict processing; to data portability; to object to processing based on legitimate interests; to withdraw consent at any time; and not to be subject to solely automated decision-making with legal or similarly significant effects (we do not carry out such decision-making). You can also object to direct marketing at any time and we must stop.

To exercise any right, email [email protected] with enough detail to identify your data. We respond within one month and will tell you if we need longer for a complex request. There is no charge for a normal request.

9. Security

The site is served over HTTPS. Access to our accounts is limited to named individuals with multi-factor authentication, and we keep the amount of personal data we hold deliberately minimal. No transmission over the internet can be guaranteed completely secure; if a breach is likely to result in a risk to your rights we will notify the ICO within 72 hours and inform you where required.

10. Complaints

Please raise any concern with us first. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, helpline 0303 123 1113, ico.org.uk.

11. Changes

We update this notice when our practices or the law change and record the revision date at the top of the page. Material changes will be signposted on the site.