Home Privacy Notice
Privacy Notice
Last updated 20 October 2026
How iGsenior LTD handles personal data — both the data you give us directly and the data that passes through the platform on our customers’ behalf.
Draft for review. This document has not yet been settled by a qualified lawyer in iGsenior LTD’s jurisdiction. Every value written as [square brackets] still needs filling in, and the whole text should be reviewed before the site goes live. Remove this notice once it has been.
Who is responsible for your data
iGsenior LTD, registered in [jurisdiction] under number [registration number] at [registered address], is responsible for the personal data described in this notice. Contact us at [privacy contact email].
Where the law requires a representative or a data protection officer, their details are: [representative / DPO details, or “not appointed”].
Two different roles — please read this first
We handle personal data in two distinct capacities, and your rights differ depending on which applies.
| Situation | Our role |
|---|---|
| You visit our website, request a demo, or hold an account as our customer | Controller — we decide why and how your data is used, and this notice governs it |
| Data flows through the platform because one of our customers runs their affiliate programme on it | Processor — our customer is the controller, we act on their documented instructions, and you should contact them about your rights |
If you are an affiliate partner, a media buyer or an end player in a programme hosted on iG-Senior, the operator running that programme is your point of contact. We will pass any request we receive on to them.
What we collect as controller
| Category | Examples |
|---|---|
| Enquiry details | Name, email, website, Telegram handle, WhatsApp or phone number, business type and anything you write in a demo or question form |
| Account details | Name, work email, role, programme name and team membership for people we give panel access to |
| Billing details | Company name, billing address, tax identifiers, invoices and payment records |
| Support records | Messages, tickets and call notes |
| Technical data | IP address, browser and device type, pages viewed and approximate location derived from IP |
We do not ask for special category data and you should not send it to us.
What the platform processes for our customers
The platform is built to run on anonymised and pseudonymised data. It does not require the names, email addresses or payment details of our customers’ end players, and we ask customers not to send them.
In normal operation it processes click identifiers, sub-parameters, IP address, device, browser, operating system, approximate geography derived from IP, a device fingerprint used for traffic-quality scoring, and conversion events such as registrations and deposits.
Some features involve more: partner identity verification can involve identity documents where a customer enables KYC, and payout processing involves the partner’s payment details. In each case the customer decides whether to turn the feature on.
Why we use it and on what basis
| Purpose | Lawful basis |
|---|---|
| Answering enquiries and running demonstrations | Legitimate interests — responding to a request you made |
| Providing the platform and supporting your account | Performance of our contract with you |
| Invoicing, collecting payment and keeping accounting records | Contract, and legal obligation for retention |
| Securing the service, detecting fraud and abuse | Legitimate interests — protecting our customers and our systems |
| Improving the product from aggregated usage | Legitimate interests — we use aggregated or anonymised data for this |
| Sending marketing about our own products | Consent where required, otherwise legitimate interests; you can opt out at any time |
International transfers
Our suppliers operate in several countries, so data may be transferred outside the territory where it was collected. Where it leaves the UK or EEA we rely on an adequacy decision, or on Standard Contractual Clauses together with any additional safeguards the transfer requires.
You can ask us for a copy of the safeguards that apply to a particular transfer.
How long we keep it
- Enquiry and demo records: [retention period] from the last contact
- Account records: for the life of the account and [retention period] afterwards
- Invoices and accounting records: as long as tax law requires, usually [retention period]
- Click and conversion data in a customer’s workspace: as the customer configures; deleted on termination, subject to the final export window in the Terms of Use
- Security and audit logs: [retention period]
Where we cannot delete data immediately we restrict access to it until deletion is possible.
How we protect it
- Traffic is encrypted in transit, and credentials such as third-party API keys are encrypted at rest.
- Access inside the platform is granted per action rather than per screen, and scoped to the teams, brands and offers a person is responsible for.
- API keys are scoped per role and can be revoked individually.
- We keep audit logs of administrative actions and review access periodically.
No system is perfectly secure. If a breach affects your data and the law requires it, we will notify you and the relevant authority within the applicable deadline.
Your rights
Depending on where you are, you may have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where we relied on it.
Write to [privacy contact email] and we will respond within the period the law allows, normally one month. We may need to verify your identity first.
If you are unhappy with our response you can complain to your local supervisory authority. In the UK that is the Information Commissioner’s Office; in the EEA it is the authority where you live or work.
Changes to this notice
We will update this notice when our processing changes. The date at the top shows the current version, and we will tell you directly where a change materially affects you.