Privacy Policy
Last updated: 3 May 2025
This policy applies to affordablething.com and all content published on it.
Table of contents
- Who we are and how to contact us
- What personal data we collect and why
- Legal basis for processing (UK/EU visitors)
- Third-party services and data processors
- Cookies and similar tracking technologies
- How long we keep your data
- Your rights
- International data transfers
- Children’s privacy
- Security
- Changes to this policy
- How to exercise your rights or complain
Plain-language summary: We collect contact form submissions when you write to us and use analytics tools to understand how our content is read. We use Google AdSense to serve ads and participate in the AliExpress affiliate programme. We do not sell your data. We do not send marketing emails. Most of our data collection is handled by the third-party tools listed in Section 4.
1. Who we are and how to contact us
AffordableThing is an independent consumer information website operating at affordablething.com. We publish buying guides, troubleshooting articles, and product information primarily relating to AliExpress and cross-border online shopping.
We operate as an AliExpress affiliate and display Google AdSense advertisements. We are not affiliated with AliExpress, Alibaba Group, or any product manufacturer.
For all privacy-related queries, including data subject rights requests, contact us via our Contact page. We aim to respond within 30 calendar days as required by applicable data protection law.
Where UK GDPR or EU GDPR applies, AffordableThing acts as the data controller for personal data processed in connection with this website.
2. What personal data we collect and why
2.1 Data you provide voluntarily
Contact form submissions (Fluent Forms)
When you use our contact form, we collect your name, email address, country, message subject, the content of your message, and any optional fields you choose to complete (such as an article URL). This data is stored in our WordPress database, hosted on our secure web server.
Purpose: To respond to your enquiry. We do not use this data for marketing, do not add you to mailing lists, and do not share it with third parties except where required by law.
Legal basis: Legitimate interests (responding to your message); contract performance (where your request relates to our services).
2.2 Data collected automatically
Analytics data
We collect aggregated data about how visitors use our site through Google Analytics (via the Site Kit by Google plugin) and Microsoft Clarity. This includes:
- Pages viewed, time on page, scroll depth, and exit pages
- How you arrived at our site (search engine, referring site, direct)
- General geographic location (country, city-level, not street address)
- Device type, browser, and operating system
- Session and interaction data (clicks, navigation paths)
Microsoft Clarity specifically may capture anonymised session recordings and heatmaps showing how visitors interact with our pages. These recordings do not capture passwords, payment details, or contact form contents.
Purpose: To understand which guides are helpful, where readers encounter problems, and how to improve the site.
Legal basis: Legitimate interests (site improvement and analytics); consent where required by cookie law.
Advertising data
Google AdSense uses cookies and pixel tags to serve advertisements on our site. It may collect data about your browsing behaviour across participating websites to serve personalised advertisements. We do not receive identifiable data about individual ad viewers.
Purpose: Revenue generation to sustain the site; serving relevant advertising.
Legal basis: Legitimate interests; consent where required.
Affiliate tracking data
When you click an AliExpress affiliate link on our site, AliExpress may set cookies to track the referral. We receive aggregated commission reports but do not receive data that identifies which specific individual made a purchase.
Purpose: Tracking affiliate commissions.
Legal basis: Legitimate interests; consent where required.
Technical and server data
Our web server automatically logs IP addresses, request timestamps, page URLs accessed, HTTP status codes, and browser user-agent strings. This data is used for security monitoring, debugging, and server performance management.
Purpose: Security, fraud prevention, server maintenance.
Legal basis: Legitimate interests.
3. Legal basis for processing (UK/EU visitors)
Where the UK GDPR (General Data Protection Regulation) or EU GDPR applies to our processing of your personal data, we rely on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Responding to contact form submissions | Legitimate interests / Contract performance |
| Analytics and site improvement | Legitimate interests / Consent (for non-essential cookies) |
| Displaying advertisements (Google AdSense) | Legitimate interests / Consent (for personalised ads) |
| Affiliate link tracking (AliExpress) | Legitimate interests / Consent |
| Security and server logging | Legitimate interests |
| Complying with legal obligations | Legal obligation |
Where we rely on legitimate interests, you have the right to object. See Section 7 for details of your rights.
4. Third-party services and data processors
We use the following third-party tools and services. Each acts as a data processor (they process data on our behalf) or as an independent data controller (they process data for their own purposes under their own privacy policies). We have listed the relevant privacy policy links for each.
Google Analytics & Site Kit by Google
Site Kit by Google connects our website to Google Analytics, Google Search Console, PageSpeed Insights, and Google AdSense, displaying consolidated performance data in our WordPress dashboard. Google Analytics collects usage data via cookies and processes it on Google’s servers. Google may transfer data internationally. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on. We have IP anonymisation enabled. Google Privacy Policy →
Google AdSense
We display advertisements served by Google AdSense. Google may use cookies, web beacons, and other tracking technologies to collect data about your browsing behaviour across the web to serve personalised ads. You can opt out of interest-based advertising at adssettings.google.com or via the Digital Advertising Alliance opt-out. Google Advertising Policies →
Microsoft Clarity
Microsoft Clarity is a behavioural analytics tool that records anonymised session replays, heatmaps, and user interaction data. It captures mouse movements, clicks, scroll behaviour, and navigation patterns. Clarity does not capture passwords, payment information, or contact form field contents. Data is processed on Microsoft’s Azure infrastructure and may be transferred internationally. You can opt out at clarity.microsoft.com/privacy. Microsoft Privacy Statement →
Fluent Forms
Fluent Forms is a WordPress plugin we use to power our contact form. Form submissions are stored in our WordPress database on our web hosting server, not on Fluent Forms’ servers. Data submitted via the contact form is retained for up to 12 months and then deleted. It is not shared with third parties unless required by law. Fluent Forms processes data within the WordPress environment on your behalf. Fluent Forms Privacy Policy →
LiteSpeed Cache
LiteSpeed Cache is a caching and performance optimisation plugin. It generates and serves cached versions of our pages to improve loading speed. It may set a small number of browser cookies for cache management and user-specific cache differentiation. It does not collect, transmit, or process personal data to external servers. All cache data is stored locally on our server. LiteSpeed Privacy Policy →
Bing IndexNow (Microsoft)
The Bing IndexNow plugin submits page URLs to Microsoft Bing automatically when we publish or update content. This allows Bing to discover and index our content more quickly. The IndexNow protocol transmits page URLs only, not any personal data. No cookies are set and no user data is transmitted in this process. Microsoft Privacy Statement →
Simple Social Buttons
We display social sharing buttons (Facebook, Twitter/X, Pinterest, WhatsApp, and others) on our articles. These buttons are configured to use privacy-safe loading: social network scripts are not loaded until you actively interact with a button. When you click a share button, that social network may set cookies and collect data in accordance with their own privacy policies. AffordableThing does not control or receive data from these interactions. Social network privacy policies: Facebook · X/Twitter · Pinterest.
AliExpress Affiliate Programme (Alibaba Group)
We participate in the AliExpress affiliate programme. When you click an affiliate link on our site, AliExpress may set a cookie to attribute the referral. If you make a qualifying purchase, we receive a commission. We receive aggregated commission data only, not individual purchaser information. AliExpress’s use of your data once you leave our site is governed entirely by their privacy policy. AliExpress Privacy Policy →
Web Hosting Provider
Our website is hosted on a third-party web hosting service. This provider stores our WordPress database (including form submissions) and server log files. They act as a data processor under our instructions and are bound by appropriate data processing terms. Server logs are retained for 30 days.
5. Cookies and similar tracking technologies
We use cookies to provide site functionality, analytics, and advertising. For a full list of the cookies we use, their purpose, provider, and retention period, see our Cookie Policy.
You can manage cookie preferences through:
- Your browser’s cookie settings (block, delete, or restrict cookies)
- Our cookie consent tool (displayed on your first visit)
- Individual opt-out links for specific services (see our Cookie Policy)
Blocking essential cookies may prevent the site from functioning correctly. Blocking analytics and advertising cookies will not affect your ability to read our content.
6. How long we keep your data
| Data type | Retention period | Notes |
|---|---|---|
| Contact form submissions | 12 months | Deleted from our WordPress database after 12 months from submission date |
| Server access logs | 30 days | Automatically overwritten by hosting provider |
| Google Analytics data | 26 months | Per Google’s default Analytics data retention setting |
| Microsoft Clarity data | 13 months | Per Microsoft’s Clarity data retention policy |
| Google AdSense cookies | Up to 13 months | Set and managed by Google |
| AliExpress affiliate cookies | 30 days | Set by AliExpress on your device when clicking affiliate links |
| LiteSpeed Cache cookies | Session / 1 day | Used for cache management only |
We may retain data for longer than the periods above where required by law, for fraud prevention, or to resolve disputes.
7. Your rights
Depending on your country of residence, you have legal rights regarding your personal data. Under UK GDPR, EU GDPR, and equivalent legislation in other jurisdictions, these rights may include:
| Right | What it means | Applies to AffordableThing |
|---|---|---|
| Access | Request a copy of the personal data we hold about you | Yes — contact us with your request |
| Rectification | Request correction of inaccurate personal data | Yes — for contact form data we hold |
| Erasure | Request deletion of your personal data (“right to be forgotten”) | Yes — subject to legal retention obligations |
| Restriction | Request that we limit how we process your data | Yes — in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format | Yes — for data you have provided to us directly |
| Objection | Object to processing based on legitimate interests, including profiling | Yes — particularly for analytics processing |
| Withdraw consent | Withdraw any consent you have given at any time | Yes — for cookie consent via your browser settings or consent tool |
| Lodge a complaint | Complain to a supervisory authority if you believe we are handling your data unlawfully | UK: Information Commissioner’s Office (ico.org.uk) · EU: your national DPA |
Rights relating to data held by third-party services (Google, Microsoft, etc.) must be exercised directly with those companies. We cannot fulfil requests for data held by these providers on our behalf beyond what we can access.
We will respond to rights requests within 30 calendar days. We may ask you to verify your identity before processing a request.
8. International data transfers
Several of our third-party services (Google, Microsoft) process data in the United States and other countries outside the UK and EEA. These transfers are made under one or more of the following safeguards:
- European Commission adequacy decisions for certain third countries
- Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
- The UK-US Data Bridge (where applicable)
For more information about the safeguards used by our third-party processors, refer to their respective privacy policies linked in Section 4.
Data submitted via our contact form is stored on our web hosting provider’s servers. We take reasonable steps to ensure our hosting provider applies appropriate security measures.
9. Children’s privacy
AffordableThing is a general consumer information site not directed at children. We do not knowingly collect personal data from individuals under 13 years of age (or the applicable minimum age in your jurisdiction). If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will delete it promptly.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us via our Contact page and we will take immediate action.
10. Security
We implement technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- SSL/TLS encryption for all data in transit (HTTPS)
- Regular WordPress and plugin updates to address security vulnerabilities
- Access controls limiting database access to authorised personnel only
- Regular backups of our database and site files
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
11. Changes to this policy
We review this Privacy Policy periodically and update it when our data practices change, when we introduce new tools or services, or when applicable law requires it. Material changes will be reflected in an updated “Last updated” date at the top of this page.
For significant changes that materially affect how we process your personal data, we will take additional steps to notify users where practicable (such as displaying a notice on the site).
Your continued use of AffordableThing after a policy update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically.
12. How to exercise your rights or complain
To exercise any of your data rights described in Section 7, or to raise a privacy concern:
- Use our Contact page and select “Privacy / data subject request” as the subject
- Include your full name and email address and a description of the right you wish to exercise or the concern you wish to raise
- We will acknowledge your request within 5 business days and provide a full response within 30 calendar days
If you are not satisfied with our response, you have the right to complain to the relevant supervisory authority:
- United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk/make-a-complaint/
- European Union: Your national Data Protection Authority — Find your DPA
- United States: Federal Trade Commission — reportfraud.ftc.gov
- Australia: Office of the Australian Information Commissioner — oaic.gov.au
- Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca