Privacy Policy

This policy explains what CommissionBasedPromos.org ("we", "us") collects when you visit this website or work with us, why we collect it, and what you can do about it. It is written to be read, not to be survived.

1. Who we are

CommissionBasedPromos.org is a commission-only email marketing service operated by Waqar Haider. We work remotely with clients worldwide. For any privacy question, or to exercise any right described below, use the contact page.

2. What this website collects

You can read every page of this site without giving us your name. We do not run newsletter signups, gated downloads or contact forms on this site. The data below is collected automatically.

Analytics and session recording

We use two third-party tools to understand how the site is used. Both are loaded on every page.

Third-party tools used on this website

Tool	Provider	What it does
Google Analytics 4	Google	Counts visits and reports which pages and traffic sources perform. Collects a randomly generated identifier, approximate location derived from IP address, device and browser type, and pages viewed.
Microsoft Clarity	Microsoft	Records how visitors interact with pages, including mouse movement, scrolling, clicks and page navigation, and aggregates this into heatmaps and session replays. Clarity applies automatic masking to text input fields.
Cal.com booking embed	Cal.com	Loads the booking calendar. Only processes your details if you actually book — see section 3.
Google Fonts	Google	Serves the site's typefaces. Your IP address is visible to Google in order to deliver the font files. No cookie is set.

Session recording means a replay of your visit — pointer movement, scrolling and clicks — can be watched back. We use it to find layout and usability problems. We do not use it to identify individuals, and we do not attempt to link recordings to named people.

Server logs

This site is hosted on Vercel. Like any web host, Vercel processes request data including IP address, user agent and requested URL in order to serve pages and protect against abuse.

3. If you book a call

Bookings are handled by Cal.com. When you book, you provide your name, email address and any notes you choose to add, and Cal.com records the time slot and timezone. We use this solely to hold and attend the call, and to follow up about a possible engagement. We do not add people who book a call to any marketing list.

4. Client data during an engagement

This is the part most policies leave out, and it matters more than the analytics.

When we run promotions for a client, we are given access to that client's existing email platform — Klaviyo, Mailchimp, ConvertKit, ActiveCampaign or similar. That platform contains the client's subscriber data. In that relationship the client is the data controller and we act as a processor on their instructions.

• We access subscriber data only inside the client's own platform, and only as far as sending and reporting on campaigns requires.
• We do not export, copy, retain or reuse client subscriber lists.
• We do not move subscribers between clients, and we never use one client's list to promote another.
• Access is removed when the engagement ends.

5. Legal bases

Where UK or EU data protection law applies, we rely on legitimate interests for website analytics, security and understanding how the site performs; and on steps taken at your request prior to entering a contract when you book a call. Where consent is required for analytics or session recording in your jurisdiction, you can withhold it using the controls in section 7.

6. Retention

• Analytics data: retained according to Google Analytics' configured retention period.
• Clarity recordings: retained by Microsoft on a rolling basis and deleted automatically after their standard retention window.
• Booking records and correspondence: kept for as long as needed to deal with the enquiry and any resulting engagement.
• Client subscriber data: never retained by us — it stays in the client's platform.

7. Your choices

• Opt out of Google Analytics using Google's browser opt-out add-on.
• Opt out of Clarity by enabling your browser's Global Privacy Control or Do Not Track signal, or by blocking clarity.ms with a content blocker.
• Block everything — the site is fully functional with all third-party scripts blocked. Nothing on this page is gated behind analytics.

8. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict processing, and to lodge a complaint with your local data protection authority. Ask via the contact page and we will respond within one month.

If your request concerns subscriber data held by one of our clients, we will refer you to that client, who is the controller of it.

9. International transfers

Our providers — Google, Microsoft, Cal.com and Vercel — operate globally and may process data outside your country, including in the United States, under their own transfer safeguards.

10. Children

This is a business-to-business service. It is not directed at children and we do not knowingly collect data from anyone under 16.

11. Changes

If this policy changes materially we will update the date at the top of the page. This version replaces any earlier one.

12. Contact

Questions about this policy, or about anything above, go through the contact page.