IRefer Club Global Privacy Policy

1. Introduction & Accountability

IRefer Club ("we," "us," or "our") is committed to protecting the privacy of our small business clients and our Affiliate Champions. We act as the Data Controller for the information collected through our website and platform.

Contact Information:
Privacy Officer: [email protected]
Address: Innisfil, Ontario, Canada

2. Information We Collect

We collect only the minimum data necessary to provide SEO services and manage our affiliate ecosystem:

• Account Data: Name, business name, email, and phone number.
• Affiliate Data: Social media handles (for verification), tax IDs (where required for payouts), and referral history.
• Payment Data: Processed via Stripe and/or other credit card processors. We do not store full credit card numbers on our servers.
• Technical Data: IP addresses and browser types collected via secure tracking for commission accuracy.

3. Lawful Basis for Processing (GDPR/PIPEDA)

We process your data under the following legal bases:

1. Contractual Necessity: To provide the SEO services you purchased or to pay affiliate commissions.
2. Consent: For marketing communications (which you can withdraw at any time).
3. Legitimate Interests: To prevent fraud and ensure the security of the IRefer ecosystem.

4. Global Data Rights

Regardless of where you live, IRefer Club grants you the following rights:

• Right to Access: Request a copy of the data we hold about you.
• Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data.
• Right to Rectification: Correct any inaccurate information.
• Right to Opt-Out (CCPA/CPRA): We do not sell or rent your data. However, you may opt-out of any "sharing" for cross-contextual advertising.
• Data Portability: Request your data in a machine-readable format.

5. Tracking, Cookies & GEO

To ensure our "Get Found, Get Chosen" mission and accurate multi-tier payouts:

• Essential Cookies: Required for login and secure payments.
• Affiliate Tracking: We use secure tokens to link businesses to the correct Champion. This tracking is strictly for commission attribution.
• GEO & AI Training: We may use anonymized business data to improve our Generative Engine Optimization (GEO) algorithms. No personally identifiable information (PII) is used for this purpose.

6. Third-Party Data Transfers

We share data only with trusted partners necessary for our operations:

• Affiliate platform providers: For managing the affiliate hierarchy and payouts.
• Stripe and other payment processors: For secure payment processing.
• Hosting and automation providers: For website hosting and workflow automation.
• Cross-Border Transfer: Data for users outside the US/Canada may be processed on North American servers. We use Standard Contractual Clauses (SCCs) to ensure equivalent protection.

7. Data Retention

We retain your data only as long as your account is active. Financial records are kept for 7 years to comply with Canadian and US tax regulations.

8. Security Measures

We implement industry-standard encryption (SSL/TLS) and restricted access controls. In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by law.

9. Children’s Privacy

IRefer Club is a B2B platform. We do not knowingly collect data from individuals under the age of 18.