Privacy policy
Last updated: April 28, 2026.
What we collect
We collect the minimum needed to run an affiliate site:
- Account data if you register: name, email, hashed password.
- Click data when you tap a Buy Now button: product, IP address (truncated for analytics), user-agent string, country (when supplied by Cloudflare), and the referring page on this site. We use this to attribute commission and to spot which kits people care about.
- Newsletter data if you subscribe: email address and the timestamp at which you ticked the consent box.
- Cookie consent state: which categories you accepted (necessary / analytics / marketing).
What we do not collect
We do not collect payment data — checkout always happens on the merchant's site. We do not sell your data. We do not run ad-network pixels in the necessary category.
Affiliate links
When you click a Buy Now button, we redirect you to the merchant via the affiliate network (Impact, CJ, Awin, Rakuten, or Mavely). The network sets its own cookie on the merchant's domain so it can attribute the sale back to PeakNora. You can read each network's policy on their site. See also our Affiliate disclosure.
Cookies
We use three categories: necessary (session, auth token, consent state), analytics (Google Analytics 4 with IP anonymisation), and marketing (affiliate-network attribution). Analytics and marketing only fire after you accept them in the consent banner.
Your rights (GDPR + UK GDPR + CCPA)
- Access, export, or delete your account data — email legal@peaknora.com.
- Withdraw newsletter consent — use the unsubscribe link in any email.
- Withdraw cookie consent — open the banner from the "Cookie preferences" link in our footer.
- File a complaint with your data-protection authority.
Data retention
Click data is retained for 24 months for commission reconciliation, then aggregated. Account data is kept until you delete your account. Newsletter records are kept until you unsubscribe.
Contact
Questions? Email legal@peaknora.com.