Privacy Policy.

AffinityAds is an advertising agency for peptide and research-chemical brands. For the personal data described on this page, AffinityAds is the data controller. You can reach us about anything in this policy at hello@affinityads.com.

Audit request form: your name, phone number, business email address, the revenue stage you select, and the ad budget range you select. Alongside the submission we record your browser identifier (user agent string), and your IP address is checked at submission time to prevent automated abuse of the form. Legal basis for those two: our legitimate interest in keeping the form usable (GDPR Art. 6(1)(f)).

Hosting logs: our hosting provider records standard request data such as IP address, browser type, and the pages requested, for security and delivery.

We do not collect payment details, we do not buy data about you, and this site runs no analytics or advertising trackers.

Audit requests: to prepare and deliver the audit you asked for and to reply to you. Legal basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).

Hosting logs: to keep the site secure and available. Legal basis: our legitimate interest in running a working, defended website (Art. 6(1)(f)).

Vercel Inc. (United States, with EU edge infrastructure) hosts this site and holds the request logs described above. Vercel publishes its own privacy policy at vercel.com/legal/privacy-policy.

Supabase Inc. (United States, project hosted on managed cloud infrastructure) stores audit request submissions in our database and provides authentication for our private admin area. Supabase processes this data under its data processing addendum, published at supabase.com/legal/dpa.

Replies to your inquiry go through our business mailbox and mail infrastructure. If we adopt a new processor for either, we will name it on this page before it handles your data.

Audit inquiries: while we work your request and for 12 months after our last exchange, then deleted.

Hosting logs: retained by Vercel on a rolling short-term window, typically under 30 days.

Hosting, database, and email infrastructure operate in the United States and the EU. Where personal data of EU or UK residents is transferred to the United States, the transfer relies on the providers' Standard Contractual Clauses or an adequacy framework certification.

Under the GDPR and UK GDPR you can ask for access, correction, deletion, portability, or restriction of your data, object to processing based on legitimate interest, and withdraw consent at any time. California residents hold equivalent access, deletion, and non-discrimination rights under the CCPA/CPRA; we do not sell or share personal information as those laws define it.

To exercise any of these, email hello@affinityads.com. We respond within 30 days. EU and UK residents can also lodge a complaint with their local supervisory authority.

This site sets no advertising, analytics, or tracking cookies for visitors. The only exception is a strictly necessary session cookie set when our own staff sign in to the private admin area; no cookie is set for anyone browsing the site. That is why you do not see a cookie banner here: there is nothing to consent to.

If we ever add analytics or marketing tools that use cookies, this section will change first and a consent banner with equal-weight accept and reject choices will appear before any such cookie is set.

This site is a business service and is not directed at children under 16. We do not knowingly collect data from them.

The site is served over TLS. Form data reaches us through encrypted channels. If a breach ever affects your personal data, we will notify the relevant authority within 72 hours as GDPR Art. 33 requires, and affected people without undue delay.

Material changes get a notice on this site before they take effect; the date below always reflects the current version.

hello@affinityads.com. The controlling entity's registered company name and postal address are published here at launch and available on request.