Baseplate Technologies Ltd, trading as Bonzino ("Bonzino", "we", "us"), company number 17333932, 66 Paul Street, London, EC2A 4NA, United Kingdom, runs bonzino.com, the Bonzino app at app.bonzino.com, and the short links at bnz.sh. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and what you can do about it. It applies to visitors to our websites, to everyone with a Bonzino login, and to people whose information reaches us through a merchant's programme. We are registered with the Information Commissioner's Office, the UK's data protection regulator, under registration number ZC279278.
1.1 We decide how information is used (we are the "controller") for: visitors to our websites; everyone with a Bonzino login, whether they are on a merchant's team, an affiliate, or both; and members of Bonzino's own affiliate programme.
1.2 A merchant decides, and we act for them (we are their "processor") for the information their affiliate programme collects about their own website visitors and customers: who clicked an affiliate's link, and which purchases followed. The merchant is responsible for telling their visitors and customers about this, and the data processing agreement in our Merchant Terms governs what we do with it. If you are a merchant's customer and want to know how your information is used, ask the merchant.
1.3 Merchants and affiliates see some of each other's information through Bonzino: a merchant sees the names, email addresses and results of the affiliates in their programme; an affiliate sees the merchant's business name, programme rules and what they have earned. Each uses it for the programme they share, under their own responsibility.
| Who | What | Why, and our lawful basis |
|---|---|---|
| Anyone who visits our websites | Pages visited and basic technical data; nothing is stored on your device beyond what section 4 lists | To run the site and understand how it is used. Our legitimate interest in running a website. |
| Anyone who follows a bnz.sh short link | The link, the time, the page you came from, your browser's name and language, and a one-way hash of your IP address (the address itself is not kept) | To credit the sale to the right affiliate and to detect fake clicks. Our legitimate interest in running the programme honestly; for a merchant's programme, their instructions. |
| Everyone with a login | Email address, password (stored hashed), the names on your profiles, two-step sign-in settings, when you signed in, which terms you accepted and when | To give you the account you asked for. Performance of our contract with you. |
| Merchant team members | Your role at each merchant, what you changed and when | To run the merchant's programme and keep a record of who did what. Contract, and the merchant's legitimate interest in an audit trail. |
| Affiliates | Your payment details (encrypted; see section 6), your earnings and payouts, the links and codes you use, and the notes and tags a merchant keeps about you | To work out and pay what you are owed and to run the programme. Contract; for notes and tags, the merchant's legitimate interest. |
| Merchants' customers (as processor) | Click identifier, hashed IP address, the email address and payment details Stripe sends us when a sale completes, refunds and disputes | To credit sales to affiliates and work out commission, on the merchant's instructions. |
| Businesses referred to Bonzino | The click that brought them, which merchant or affiliate referred them, and what they pay us | To pay referral commission and credit. Our legitimate interest in running our own programme. |
| Everyone we bill or pay | Invoices, payments, payouts and the records the law requires us to keep | Legal obligation (tax and accounting law) and contract. |
| Everyone we write to | The emails we send you and whether they were delivered | To run your account: receipts, notices about your terms, security notices, payout notices. Contract and legal obligation. We do not send marketing email. |
We do not collect special-category information, and we do not knowingly collect information about anyone under 18. Bonzino is a business tool for adults.
Bonzino credits sales to affiliates and works out commission automatically, from the rules a merchant sets. A click filter ignores known crawlers so they do not count as visitors. No decision with legal or similarly significant effects on you is made without a person: a merchant decides whether a commission is held, reversed or paid, and we decide whether a login is suspended.
4.1 On a merchant's website. A merchant who installs our tracking snippet sets a cookie on their own domain, named _us_<their tracking key>_id, holding only a random click identifier, for as long as the click window the merchant chooses (up to 90 days). The cookie is shared across the subdomains of the merchant's own websites (such as www. and app. of the same domain), and links from one of the merchant's websites to another they list carry the same identifier, so that site sets the same cookie. It exists only to credit a later purchase to an affiliate. The merchant sets it, is responsible for telling you about it and for any consent the law requires, and is the controller of it.
4.2 On app.bonzino.com. Cookies that are strictly necessary to keep you signed in and to remember which merchant or programme you were working in: the sign-in cookies set by our authentication provider; active_merchant_tenant_id and active_affiliate_tenant_id (30 days); and last_mode, which remembers whether you last used the merchant side or the affiliate side (90 days). Your theme choice is stored in your browser's local storage, not a cookie. We do not set advertising or cross-site tracking cookies anywhere.
4.3 Bonzino's own programme. bonzino.com and our sign-up pages carry the same snippet as a merchant's site, so a business that arrives through a Bonzino affiliate's link gets a cookie named _us_<Bonzino's key>_id on bonzino.com and app.bonzino.com, shared between the two, for up to 90 days, used only to credit the referral. A notice on those pages says so; on bonzino.com it is shown only to a visitor who arrived through such a link, because nobody else gets the cookie. We rely on our legitimate interest in running our own programme.
4.4 Analytics. We measure how the app is used with PostHog, hosted in the EU, configured to keep nothing on your device: events are tied to your login while you are signed in and are not used for advertising.
5.1 Service providers who process information for us, under contracts that bind them to our instructions and to confidentiality:
| Provider | What it does for us | What it sees | Where |
|---|---|---|---|
| Stripe | Reads merchants' sales for attribution | Sales and customer email addresses | USA and EU |
| Supabase | Database, sign-in, encrypted storage of payment details | Everything in your account | EU (Frankfurt) |
| Vercel | Hosts our websites and app | Requests to our sites, including addresses and browser data | EU (Frankfurt); short links also from the USA, and files from a global network |
| Upstash | Keeps a fast copy of each short link | The affiliate and merchant behind a link, its destination and promo code | EU (Frankfurt), with a copy in the USA |
| Resend | Sends our emails | Email addresses and the emails we send | EU (Ireland) |
| PostHog | Usage analytics | Login id, merchant id and business name, pages and actions in the app, and screen recordings with text and typing hidden | EU |
| Sentry | Error reporting from our servers | Error details with personal data removed; no request bodies, cookies or passwords | EU |
| Cloudflare | Checks that sign-ups come from people, not bots | Your IP address and browser signals | Global network |
| ExchangeRate-API | Daily exchange rates | Nothing about you | South Africa |
This table is kept current in every version of this policy, and merchants are told at least 30 days before we add or replace a provider.
5.2 Merchants and affiliates see each other's information as section 1.3 describes.
5.3 Payment providers you choose. When a merchant or Bonzino pays you by bank transfer, Wise or PayPal, the provider receives your payment details for that payment under its own privacy terms.
5.4 Stripe, as seller of our plans. Bonzino's plans are sold through Onelink, Stripe's reseller. When a merchant subscribes, Onelink receives their name, email address, billing address, VAT number and card, and uses them to take payment, issue invoices, handle tax, refunds and disputes, and answer questions about a payment, under its own privacy terms.
5.5 The law, and a sale of our business. We share information where the law requires it, to protect our rights or someone's safety, and with a buyer or successor if our business changes hands, who takes it under this policy.
We never sell personal information and never share it for advertising.
Information travels encrypted and is stored encrypted. Affiliates' payment details are kept in an encrypted vault separate from the rest of the database, and every time a person views them in full, that view is recorded with who looked and why. Access to production systems is limited to the staff who need it and is logged. We keep daily backups. If we learn of a security incident affecting your information we will tell you without undue delay, and the merchants concerned within 72 hours of confirming it.
Our systems are in the European Union. Some providers in section 5 also process information in the United States. Where information leaves the UK or the EEA we rely on the UK's adequacy regulations, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the EU–US Data Privacy Framework where the provider is certified.
| Information | How long |
|---|---|
| Your login and profiles | While you have a login. When you delete it, it is removed, except that past actions keep your name in the record of who did what. |
| A merchant's programme data (affiliates, customers, clicks, sales, commissions, payouts) | While the merchant's account is open, then 90 days so it can be reopened, then deleted, except what the next row covers. |
| Invoices, bills, payouts and other financial records | As long as tax and accounting law requires, normally six years from the end of the year they relate to, then deleted. |
| Records of which terms you accepted, and when | Kept for six years after your login or merchant account is deleted, with your email address replaced by a one-way hash, so we can show what was agreed without knowing who you are; then deleted. |
| Affiliates' payment details | While you are active in a programme; deleted 90 days after you are archived once nothing is owed to you. |
| Short-link clicks | While the merchant's account is open, for commission auditing and disputes. |
| Security and rate-limit logs on our servers | Minutes to hours; the request ledgers behind sign-up and email limits are purged automatically within two hours. |
| Error reports and usage analytics | 90 days at the provider, then deleted. |
| Emails we sent you | Kept with your account as a record of what you were told. |
9.1 You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Much of this you can do yourself: your login settings let you change your email address and password and delete your login; merchants can export their data. For anything else, email privacy@bonzino.com. We answer within one month, and tell you if we need longer.
9.2 Where we act for a merchant (section 1.2), we will pass your request to them and help them answer it.
9.3 You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or, if you are in the EU, to your own data protection authority. We would rather hear from you first.
Every version of this policy has a version number and an effective date, and previous versions stay readable on our website. We email the owners of every merchant account before a new version takes effect; everyone else can see the current version and its date at bonzino.com/privacy.
Questions about your information: privacy@bonzino.com. Anything else: hello@bonzino.com. Post: Baseplate Technologies Ltd, 66 Paul Street, London, EC2A 4NA, United Kingdom.