Privacy Policy

CommissionBag (trading as commissionbag.com) is owned and operated by Commbag Pvt Ltd, a company registered in the United Kingdom (“we”, “our”, or “us”).

We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including publishers, creators, brands, and network partners.

This Privacy Policy explains how Commbag Pvt Ltd collects, uses, shares, and protects your information in compliance with the UK Data Protection Act 2018 and the UK GDPR.

Last updated: October 3, 2025

1. Information We Collect

  • Account Information: Name, email address, phone number, company/brand details, and payment information.
  • Usage Data: IP address, browser type, device details, login times, referral links, and activity on the platform.
  • Tracking Data: Clicks, sales, conversions, and campaign performance data.
  • Partner Data: Information shared by affiliate networks, brands, or publishers for reporting and payment purposes.

2. How We Use Your Information

  • To provide and manage your account.
  • To track, measure, and report affiliate performance.
  • To process payments and issue invoices.
  • To communicate with you about updates, campaigns, or support requests.
  • To comply with legal, tax, and regulatory obligations.
  • To improve our services, tools, and security.

We will never sell your personal data to third parties.

3. Legal Basis for Processing

  • Contractual necessity – to provide you with our affiliate network services.
  • Legitimate interest – to ensure platform security, fraud prevention, and reporting.
  • Legal obligation – to meet tax, regulatory, and compliance requirements.
  • Consent – where required (e.g. marketing emails, cookie tracking).

4. Data Sharing

  • Affiliate Networks & Brands: To track clicks, sales, and commissions.
  • Payment Providers: To process and send payments securely.
  • Service Providers: For hosting, analytics, and technical support.
  • Regulatory Authorities: Where required by law or court order.

All third-party processors engaged by Commbag Pvt Ltd are GDPR-compliant and bound by confidentiality agreements.

5. Data Retention

We retain personal data only for as long as necessary to fulfil contractual obligations and comply with legal requirements.
Affiliate tracking and reporting data may be kept for up to 7 years for tax and accounting purposes.
After this period, data is securely deleted or anonymised.

6. Your Rights (GDPR)

  • Right to access your personal data.
  • Right to rectify incorrect or incomplete information.
  • Right to request erasure (“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability.
  • Right to object to certain processing activities.
  • Right to withdraw consent (where applicable).

You can exercise these rights by contacting us at legal@commissionbag.com.

7. Security

  • Encrypted storage and secure data transfer (SSL).
  • Access controls and two-factor authentication for accounts.
  • Regular monitoring to detect unauthorised activity.

8. International Data Transfers

If we transfer your personal data outside the UK/EEA, Commbag Pvt Ltd ensures appropriate safeguards (e.g. Standard Contractual Clauses) are in place to protect your data.

9. Cookies & Tracking

  • CommissionBag uses cookies and tracking technologies to:
  • Monitor clicks, conversions, and commissions.
  • Improve user experience and campaign performance.
  • Analys traffic sources and prevent fraud.

You can manage or disable cookies via your browser settings, but this may affect functionality.

10. Network Usage Policy

  • By using CommissionBag’s platform, you agree to comply with our Network Usage Rules:
  • Publishers & Creators must follow the terms of each brand/affiliate program and may not use misleading or fraudulent traffic sources (e.g. bots, incentivised clicks, or trademark violations).
  • Brands & Advertisers must provide accurate program details, commission structures, and reporting data.
  • Affiliate Networks connected to CommissionBag must ensure GDPR-compliant tracking and transparent reporting.
  • Prohibited Activities include spamming, misleading advertising, malware, or any illegal content promotion.
  • Compliance Monitoring – Our compliance team actively monitors traffic quality and promotional activity. Breaches may result in account suspension or termination.

11. Contact Us

For questions or privacy requests, contact:
Email: legal@commissionbag.com
If you are unhappy with how we process your data, you have the right to complain to the ICO (Information Commissioner’s Office UK).

Important Privacy Notice

By using CommissionBag, you acknowledge that you have read and understood this Privacy Policy. For specific privacy concerns or to exercise your data rights, please contact our privacy team at legal@commissionbag.com.