Northern Areas trips on the Pakistan board
A UK company, paying in PKRPrivacy policy
What personal data we collect, why, how long we keep it, and the rights you have over it under UK GDPR.
What we collect
Account data: your name, username, email address, country, and optionally a phone number and avatar.
Financial data: purchase and payment records. Card details are handled by Stripe and never reach our servers. Payout destinations are tokenised by our payment provider; we do not store raw bank details.
Work data: tasks you claim, submissions you upload, and review scores and feedback.
Referral data: who introduced you, who you introduced, and click records. Click records store a hashed IP address and a hashed user agent, never the raw values.
Identity data: where verification is required for payouts, the documents you supply. These are stored in a private bucket and served only through short lived signed links.
Why we process it
To provide the service under our contract with you, to calculate and pay commission accurately, to prevent fraud, and to meet our legal and tax obligations. Analytics and non essential cookies run only with your consent.
Who sees it
Members in your upline can see your display name, rank, the month you joined and whether you hold an active plan. They cannot see your email address, phone number, address or earnings.
Our processors include Stripe for payments, Supabase for database and storage hosting, Vercel for application hosting, and Resend for transactional email. We do not sell personal data to anyone.
Your rights
Under UK GDPR you can request access to your data, correction, erasure, restriction, portability, and you can object to processing. Email us and we will respond within one month.
Some records must be retained after account closure for tax and anti fraud purposes, typically six years for financial records.
If you are unhappy with how we handled your data you can complain to the Information Commissioner's Office at ico.org.uk.