MayFair Leads - Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how MayFair Leads B.V. ("MayFair Leads", "we", "us", "our") collects, uses, shares, and protects personal data in connection with our affiliate marketing platform (the "Platform") and our website at https://mayfairleads.com (the "Website"). This Policy applies to Publishers/Affiliates, Advertisers, their representatives, and visitors to our Website.

We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).

1. Who Is Responsible for Your Data

MayFair Leads B.V. is the data controller for the personal data described in this Policy, unless stated otherwise.

MayFair Leads B.V.

Amsterdam, The Netherlands

Website: https://mayfairleads.com

Email: info [at] mayfairleads [dot] com

2. Personal Data We Collect

2.1 Data provided directly by you

Identification and contact data: name, job title, company name, business address, phone number, and email address, provided during registration or in correspondence with us.
Business and financial data: tax/VAT identification number, business sector, company size, banking/payment details, and invoicing information, required for onboarding, verification, and payments.
Verification documents: where necessary for fraud prevention or legal compliance, identification or company registration documents.
Communication content: messages you send us via our contact forms, support channels, or email.

2.2 Data collected automatically

Technical and browsing data: IP address, browser type, device and operating system information, pages visited, and referral/traffic source, collected when you use the Platform or Website.
Tracking and transaction data: click identifiers, conversion and campaign performance data, timestamps, and Program attribution data generated through our affiliate tracking technology (see also our Cookie Policy).
Cookie data: as described in our Cookie Policy.

2.3 Data relating to End Users of Advertiser Offers

In the course of operating the affiliate network, MayFair Leads' tracking technology may process limited data about End Users who interact with an Advertiser's Offer through a Publisher's traffic (for example, a click identifier, timestamp, and conversion event), for the sole purpose of attributing the Conversion to the correct Publisher and Program. This data is processed on the instructions of, and for the purposes of, the relevant Advertiser and Publisher; MayFair Leads acts as a processor in respect of this specific attribution data.

3. Purposes and Legal Bases for Processing

Where we rely on legitimate interest, we have considered that this interest is not overridden by your rights and freedoms; you may object to such processing at any time as described in Section 7 below.

4. Automated Decision-Making and Fraud Prevention

To protect the integrity of the network, MayFair Leads uses automated and AI-assisted tools, including third-party fraud-detection services, to help identify potentially fraudulent applications, traffic, or transactions. Where such tools contribute to a decision that produces legal or similarly significant effects on you (such as rejection of an application or suspension of an account), you have the right to request human review of that decision, to express your point of view, and to contest the decision, by contacting us using the details in Section 10.

5. Who We Share Your Data With

Network partners: to the extent necessary to facilitate a Program, an Advertiser's attribution/tracking data may be shared with the relevant Publisher (and vice versa), limited to what is needed to operate that Program.
Service providers (processors): hosting providers, tracking and analytics platforms, payment and invoicing providers, CRM and email service providers, fraud-detection and identity-verification providers, and IT support providers, who process personal data on our behalf and under contractual data processing agreements.
Professional advisers: accountants, auditors, and legal advisers, where necessary.
Authorities: tax, law enforcement, or regulatory authorities, where we are legally required to do so, or in connection with the investigation of fraud or unlawful activity.
Business transfers: in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity; we will notify you of any such change and of any choices available to you.

We do not sell personal data to third parties.

6. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision of the European Commission, the European Commission's Standard Contractual Clauses, or other appropriate safeguards recognised under the GDPR. You may request further information about these safeguards using the contact details in Section 10.

7. Your Rights

Under the GDPR, you have the right to:

Access: obtain confirmation of whether we process your personal data and receive a copy of it.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of your personal data, subject to legal retention obligations.
Restriction: request that we limit the processing of your personal data in certain circumstances.
Portability: receive your personal data in a structured, commonly used, machine-readable format, or have it transmitted to another controller, where technically feasible.
Objection: object to processing based on legitimate interest, including for direct marketing purposes.
Withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info [at] mayfairleads [dot] com. We will respond within one month, as required by the GDPR. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption of data in transit (HTTPS/TLS), access controls, regular backups, and staff training on data protection. No system can guarantee absolute security; if a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens and affected individuals in accordance with the GDPR.

9. Retention and Children

We retain personal data only for as long as necessary for the purposes described in this Policy, taking into account legal, accounting, and regulatory retention obligations (see Section 3). Our Platform is intended for business use by Advertisers and Publishers and is not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Contact and Complaints

For any questions about this Privacy Policy or the processing of your personal data, please contact us at: