Privacy policy

Last updated 20 August 2026

1. Who is responsible

The data controller for this website and for AffiliateRail is James Jonathan Barkway, trading as AffiliateRail (a sole trader established in England and Wales), Affiliate Rail, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom. Contact: support@affiliaterail.com.

2. Analytics

We do not currently run any analytics or tracking tool on this site. We do not set cookies, collect no data about how you browse, and there is nothing to opt out of. If that changes, we will update this policy and add a cookie banner first if the tool we choose requires one.

3. What we collect, and why

• When you reserve a seat: your name, email address, company name and the plan you chose, sent to us by Stripe when you complete checkout. We use this to hold your seat, email you about launch and billing, and create your account. Legal basis: performance of a contract.
• When you email us or use the contact form: whatever you send, so we can reply. Legal basis: legitimate interest in answering you.
• When you ask to be notified at launch: your email address. We use it for that purpose only until you unsubscribe. Legal basis: consent.
• Basic server logs: our hosting provider records IP address, browser type and the pages requested, for security and to keep the site running. Legal basis: legitimate interest.

We do not use advertising cookies or cross-site trackers on this site. Fonts are loaded from Google Fonts, which receives your IP address when the font file is fetched.

4. Payment data

Card details are entered directly into Stripe's checkout and are stored by Stripe, Inc. under its own privacy policy. We receive a confirmation and the last four digits of the card, never the full number.

5. Who we share data with

• Stripe (payments and customer portal)
• Our email and hosting providers, acting on our instructions
• Formspree or an equivalent form processor, if you use the contact or launch-notification form

We do not sell personal data. We share it only with the processors above, or if the law requires.

6. Once the product is live

When you run an affiliate program through AffiliateRail, the service will process data about your affiliates and referred customers on your behalf. You are the controller of that data and we are your processor. The details will be set out in a data processing addendum available before launch, and this policy will be updated to describe the product's own data practices.

7. International transfers

Some of our processors (for example Stripe and Google) are based in the United States. Transfers are covered by their standard contractual clauses or equivalent safeguards.

8. How long we keep data

Reservation and account data: for as long as you have a reservation or account, and then for up to six years for tax and accounting records. Contact and notification emails: until you ask us to delete them or unsubscribe. Server logs: 30 days.

9. Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and withdraw consent where that is the basis. Email support@affiliaterail.com; we respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

10. Changes

We will post any changes here and update the date at the top. For material changes we will email you.