Privacy policy

Last updated: September 2, 2026

We are committed to protecting your privacy and handling your personal information in a transparent and secure manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with our website and our mobile app.

1. Introduction

We are committed to protecting your privacy and handling your personal information in a transparent and secure manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or interact with our website, our mobile app, and links we publish.

2. Information We Collect

We may collect the following types of information:

• Contact information (such as name and email address)
• Transaction and order details
• Device and browser information (device type, operating system, browser, app version)
• Website and app usage data (pages and screens viewed, products viewed, items added to cart, checkout steps, purchases, and the campaign or link that brought you to us)
• Pseudonymous identifiers we generate ourselves for analytics, testing and attribution (see section 4). These are random values; they are not your name, email, phone number, advertising ID or IP address.
• Approximate location (country only), derived from your IP address at the moment of a request and then discarded — we do not store IP addresses in our analytics systems.
• Consent decisions — a record of whether you accepted or declined analytics and marketing processing, and when.

3. How We Use Your Information

We use personal information to:

• Provide and deliver our products and services
• Process payments and transactions
• Communicate with customers
• Improve website and app performance and usability
• Conduct analytics, testing, and optimisation
• Measure our marketing and credit partners who refer customers to us
• Comply with legal obligations

4. Website Analytics, Optimisation & Testing

We measure how our website and app are used so we can improve them and understand which of our marketing works. We do this in two ways.

Simify Track (our own analytics). We operate our own first-party analytics system rather than sending browsing data to a general-purpose analytics provider. When you use our website or app, Simify Track records events such as pages or screens viewed, products viewed, items added to the cart, checkout started and purchase completed, together with:

• a random visitor identifier and a random session identifier that we generate (stored in your browser or on your device only after consent where consent is required);
• the page or screen, the referring page, the currency shown to you, and the campaign parameters (utm_*) or link identifier that brought you to us;
• your country, derived from your IP address when we receive the event and then discarded;
• which A/B test variant you were shown, where a test is running.

Simify Track does not record your IP address, your browser's user-agent string, your name, email address, or payment details. Event data is deleted after 60 days; session and attribution summaries are kept for up to 15 months so we can compare seasons year-on-year; the link between an order and the browsing session that produced it is removed after 15 months while the order itself is retained for financial record-keeping.

Third-party testing tools. We also use VWO (Visual Website Optimizer) on our website to run A/B tests, analyse behaviour, generate heatmaps and review anonymised session recordings. The information collected may include pages viewed, interactions, session duration, device type, browser data and anonymised behavioural insights. This information does not intentionally include sensitive personal information.

Where consent is required by law (including the UK and EU), Simify Track and VWO are only activated after you accept analytics in our consent banner or, in the app, in the onboarding consent screen. If you decline, no identifier is stored on your device and no analytics events are sent. If you later withdraw consent, we delete the events and sessions associated with your identifier and remove the link between your identifier and any orders.

You can change your cookie choices at any time by clicking here to manage cookie preferences. For details of the cookies and storage we use, see our Cookie Policy.

4A. The Simify App

Our mobile app asks for your analytics and marketing preferences when you first open it (where required by law) and you can change them at any time in the app's settings. The app processes information as follows:

• Analytics (Simify Track) — as described in section 4, activated only with analytics consent where required.
• Install and campaign attribution (AppsFlyer) — with marketing consent, and on iOS only if you also allow tracking when prompted by the operating system, we use AppsFlyer to understand which advertising campaign or partner led you to install the app and whether that campaign resulted in a purchase. AppsFlyer receives device information (including the advertising identifier where you have allowed tracking), the app's install and purchase events, campaign identifiers, and a random link identifier described in section 4B. Where a partner network (see section 4B) referred the install, AppsFlyer notifies that network of the install and of purchases made within 30 days so the partner can be paid. AppsFlyer is not activated if you decline marketing consent. See AppsFlyer's privacy policy.
• Marketing communications (Klaviyo) — with marketing consent, to send you emails and push notifications about your orders and offers.
• Advertising measurement (Meta) — with marketing consent and, on iOS, tracking permission, to measure the effectiveness of our advertising on Meta platforms.
• Crash reporting and performance (Firebase) — to detect and fix crashes.
• Reviews (Okendo) — to display product reviews.

Deep links: when you open a Simify link and have the app installed, the app opens the relevant page and reports to us which link was opened, so the visit can be attributed to that link. This is required to route you to the right page and does not depend on consent; the visit is only joined to your analytics identifier if you have accepted analytics.

4B. Simify Links and Partner Attribution

Short links on link.simify.com take you to a page on our website, into our app, or to the App Store or Google Play. Each time a link is opened we record: a random link click identifier, the link's name, the time, whether the device is a phone, tablet or desktop, your country (derived from your IP address and then discarded), the campaign the link belongs to, and — where the link was shared by an advertising or affiliate partner — the partner's own click or campaign identifiers passed in the link. Opening a link does not set any cookies or store anything on your device.

The link click identifier is added to the page you land on and, if you have consented to analytics, to your Simify Track session and to any order you place, so we can tell which links lead to purchases. Where a link was shared through an affiliate network such as impact.com, the partner identifiers are passed to that network's tracking on our website and, for app installs, to AppsFlyer, so the partner can be credited and paid for referring you. Partner networks receive their own identifiers, our random link click identifier, and order details needed to calculate commission (order number, amount, currency); they do not receive your name, email address or payment details from us. See impact.com's privacy policy.

Link click records are retained for up to 15 months.

5. Legal Basis for Processing

We process personal information only where we have a lawful basis to do so. Depending on your location and applicable laws, this may include:

• Consent, where required (such as in the UK and EU)
• Legitimate interests, such as improving our website, products, and services
• Performance of a contract, such as fulfilling an order
• Compliance with legal obligations

Where consent is required by law, analytics and optimisation tools are only activated after consent is obtained via our cookie consent mechanism. In other regions, such processing may occur based on legitimate interests in accordance with applicable privacy laws.

Specifically: Simify Track analytics, AppsFlyer, VWO and marketing SDKs run on the basis of your consent where consent is required, and on legitimate interests elsewhere. Recording that a Simify link was opened (section 4B), routing you to the right destination, and passing an affiliate partner's own identifiers to that partner so they can be paid for the referral, are carried out on the basis of our legitimate interests in measuring our marketing and honouring our contracts with partners; this processing stores nothing on your device and does not use your IP address beyond deriving your country. Keeping a record of your consent decisions is necessary to comply with our legal obligations.

6. International Visitors

Our website and app are accessible globally, and privacy laws vary by jurisdiction. We apply privacy and consent practices designed to comply with applicable laws based on the visitor's location at the time of access.

7. Data Sharing & Third Parties

We may share personal information with trusted third-party service providers who assist us in operating our website and app, conducting analytics, processing payments, or delivering services. These providers are authorised to use personal information only as necessary to provide services to us and are subject to confidentiality and data protection obligations. They include:

• Shopify — our store, checkout and order platform (data processor).
• Amazon Web Services — hosting for Simify Track and link.simify.com (data stored in the United States, protected by standard contractual clauses).
• VWO — website testing and optimisation (with consent where required).
• AppsFlyer — app install attribution (with consent where required).
• impact.com and other affiliate networks — partner referral tracking, so partners who refer you can be paid.
• Klaviyo — email and push communications (with consent where required).
• Meta — advertising measurement (with consent where required).
• Google (Firebase) — crash reporting.

Some of these providers are located outside your country, including in the United States. Where required, we rely on standard contractual clauses or the provider's UK/EU data protection commitments for such transfers.

8. Your Rights & Choices

Depending on your location, you may have rights to:

• Access your personal information
• Request correction or deletion
• Withdraw consent where processing is based on consent
• Object to certain processing activities

You may also opt out of analytics and tracking by adjusting browser settings or using available opt-out mechanisms.

Changing your consent. On the website, you can change your cookie choices at any time by clicking here to manage cookie preferences. In the app, go to Settings → Privacy to change analytics and marketing preferences. Withdrawing analytics consent deletes the events and sessions recorded under your identifier and unlinks them from any orders. Withdrawing marketing consent stops AppsFlyer and marketing SDKs from running. On iOS you can also disable tracking for the app under Settings → Privacy & Security → Tracking.

Requesting your data. You can ask for a copy of the analytics, link and consent records associated with your identifiers, or ask us to delete them, by contacting us through live chat or at the address in section 13. Because these identifiers are random and not tied to your name, we may ask you to provide the identifier shown in the app's Settings → Privacy screen so we can locate your records.

9. Data Security

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure.

10. Account Deletion

You have the right to request deletion of your Simify account and the personal information associated with it.

How to request deletion

• In the app: Go to the Profile tab, find the account deletion option, and follow the prompts. Note: account deletion is only available on our latest app — please make sure you've updated to the newest version before trying.
• On the web: Start a live chat, tell us you'd like to delete your account, and provide your full name and email address so we can verify your identity.

What happens to your data

• No order history: Your account and all associated personal information will be permanently deleted.
• Existing orders: Due to legal and financial obligations (including chargeback dispute periods), we cannot immediately delete accounts with order history. Instead, we permanently erase your personal information — including your name, address, email, IP address, and payment card details — while retaining order records in anonymised form for legal and financial compliance.
• Analytics and attribution data: when your personal information is erased, we also delete the analytics events and sessions linked to your identifiers, remove the link between your identifiers and your orders, and remove your identifier from any link-click or app-install records. Aggregate statistics (for example, daily totals) that cannot identify you are retained.

Timing

Erasure is completed by whichever of the following comes later:

• 10 days from the date we receive your request, or
• 60 days from the date of your most recent order (to allow time for chargeback resolution)

Third-party processors

Our store operates on Shopify, which acts as a data processor and manages the technical deletion of data on our behalf. You can learn more in Shopify's Privacy Policy.

11. How Long We Keep Analytics Data

Data	Retention
Analytics events (page views, cart, checkout)	60 days
Session and attribution summaries	15 months
Link click and app install records	15 months
Link between an order and its browsing session / link click	15 months (the order itself is kept for financial record-keeping)
Consent decisions	3 years
Daily aggregate statistics (no identifiers)	Indefinitely

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, or legal requirements. Updated versions will be published on this page.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, you can contact us:

• By email: hello@simify.com
• By live chat on our website