Privacy Notice

1. Who we are

BioLink.page is operated by Dijital Mekan Ltd, a company registered in England and Wales. For the personal information described in this notice, Dijital Mekan Ltd is the controller.

• Company: Dijital Mekan Ltd, company number 14955219
• Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
• Email: hi@biolink.page

Our supervisory authority in the United Kingdom is the Information Commissioner's Office (ICO).

2. Who this notice covers

This notice applies to people who visit biolink.page, create an account, buy a paid plan, visit a bio page or short link created on BioLink.page, contact us or report content, use our API, subscribe to our emails or push notifications, or join the affiliate program.

When a BioLink.page user collects information from their own visitors, for example through a contact form, an email or phone collector, or an appointment block on their page, that user decides why and how the information is used and is responsible for it. We host and deliver that information on the user's behalf under our Data Processing Addendum. If you have a question about how a particular page owner uses your information, please contact them directly.

3. What we collect

Information you give us

• Account details: name, email address, username and password. Passwords are stored only as a secure hash.
• Profile content: the text, images, links, files and settings you add to your pages, short links, QR codes and email signatures. Much of this content is public by design.
• Billing details: billing name, address, country and, for businesses, a VAT number. Card and bank details are entered with our payment providers, and we do not store full card numbers.
• Messages and reports: what you send us by email, WhatsApp or the contact form, including reports about content on the platform.
• Affiliate details: referral records, commissions and the payout details you give us when you request a payout.
• Preferences: your email and push notification choices.

Information collected automatically

• When you use your account: IP address, device and browser details, sign-in times and security events. We use these to keep accounts secure and to prevent abuse.
• When someone visits a bio page or short link: we record the visit with the time, country, city, device type, operating system, browser, browser language, referring site where one is passed, and any UTM parameters in the link. The IP address is used to look up the country and city at the moment of the visit and is not stored in the page owner's statistics.
• Cookies and similar technologies: described in the Cookie Policy, together with the choices available to you.

Information from other sources

• Payment providers tell us whether a payment succeeded, failed or was refunded.
• If you sign in with a social account where that option is available, the provider shares the basic details you allow, such as your name and email address.
• People who report content, and competent authorities, may send us information about an account or a page.

4. How we use information

• To create and run your account and provide the features you use, including pages, short links, QR codes, statistics, custom domains and email signatures.
• To take payments, issue invoices, apply taxes and keep accounting records.
• To answer questions, handle reports and respond to legal requests.
• To keep the platform secure, prevent spam, fraud, phishing and other abuse, and enforce our Terms and Conditions.
• To send service messages about your account, and marketing messages only where you have agreed to them or where the law allows. Every marketing message includes a way to opt out.
• To run the affiliate program, including referral attribution, commissions and payouts.
• To understand how the platform is used, fix problems and improve features.

The lawful basis for each of these purposes under the UK GDPR is set out in the Data Protection Notice.

5. Who we share information with

We share personal information only where it is needed for the purposes above:

• Hosting and infrastructure providers that run our servers, storage and backups.
• Cloudflare, which provides the content delivery network, DNS and security protection in front of the platform.
• Payment providers such as Stripe and PayPal, which process payments, refunds and fraud checks under their own privacy policies.
• Email and notification delivery providers that send account, security and, where permitted, marketing messages.
• AI service providers, only when you use an optional AI feature such as AI site generation. The text you enter for that feature is sent to the provider to produce the result.
• Professional advisers, such as accountants and lawyers, for bookkeeping, tax and legal matters.
• Courts, regulators and law enforcement, where a valid legal request or a legal obligation requires it.
• A buyer or successor, if the business or part of it is sold or reorganized, subject to this notice.

Content you publish on a public page can be seen by anyone who visits it. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

If you add third-party tools to your own page, such as tracking pixels or embedded videos, those providers receive information from your visitors under their own terms. Please describe them in your own privacy information.

6. International transfers

We are based in the United Kingdom. Some of our providers process information in the European Economic Area, the United States or other countries. Where information leaves the United Kingdom, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or another safeguard permitted under the UK GDPR. You can ask us for details at hi@biolink.page.

7. How long we keep information

• Account and profile data: for as long as your account is open. When you delete your account, this data is removed from our active systems. Short-term backups kept for disaster recovery are overwritten within a limited period.
• Visit statistics: for the period included in the page owner's plan, currently 30 days on Free, 90 days on Starter and 180 days on Pro, after which they are deleted.
• Invoices and payment records: for at least six years, as required by UK tax and accounting rules.
• Messages and reports: for as long as needed to deal with them, and longer only where they may be needed for a legal claim.
• Affiliate records: while you take part in the program, and afterwards for as long as needed for payments, tax and disputes.
• Marketing preferences: until you change them. If you opt out, we keep a record of that so we can respect it.

8. How we protect information

We use technical and organizational measures to protect personal information, including encrypted connections, hashed passwords, optional two-factor authentication and restricted access for the people who need it. No system is completely secure. If a breach affects your information, we will notify you and the ICO where the law requires it.

9. Children

BioLink.page is not intended for anyone under 18, and you must be at least 18 to create an account. If you believe a child has given us personal information, please contact us and we will delete it.

10. Your rights

Depending on where you live, you may have the right to access your information, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time. You can also object to direct marketing at any time. The Data Protection Notice explains these rights in more detail.

To make a request, email hi@biolink.page, preferably from the address registered on your account. We may ask for reasonable information to verify your identity. We answer within one month, or tell you within that month if we need longer for a complex request.

You can complain to the ICO at ico.org.uk. We would appreciate the chance to resolve your concern first, but you do not have to contact us before going to the ICO.

11. Information for US residents

If you live in California or another US state with a comprehensive privacy law, this section applies to you in addition to the rest of this notice.

• Categories we collect: identifiers such as name, email address and IP address; commercial information such as the plans you bought; internet activity such as how you use the platform; and approximate location such as country and city. We collect them from you, from your use of the platform and from the providers described above, for the purposes in section 4.
• Disclosure: we disclose these categories to service providers for business purposes, as described in section 5.
• No sale or sharing: we do not sell personal information or share it for cross-context behavioral advertising, including information about people under 16.
• Your rights: you can ask to know what we collect and how we use and disclose it, to access it, to correct it and to delete it, and you will not be treated differently for using these rights.
• Opt-out signals: where state law requires it, we treat a Global Privacy Control signal as a request not to sell or share information from that browser. There is no common standard for Do Not Track signals, so we do not respond to them.
• Requests: email hi@biolink.page. An authorized agent may act for you with your written permission. We verify requests before acting on them and answer within 45 days, which we may extend once by another 45 days where the law allows.

We do not share personal information with third parties for their own direct marketing, so California's Shine the Light law does not require any further choice from you.

12. Legal requests

If we receive a valid legal request from a court, regulator or law enforcement agency, we may disclose the information that the request covers and that we hold, such as the email address on an account, sign-in times and IP addresses, and the content of a page. We review each request and disclose only what the law requires.

13. Changes to this notice

We update this notice when our practices or the law change. The current version is always on this page, with its effective date at the top. If a change significantly affects how we use your information, we will tell you before it takes effect.

14. Contact us

For questions about this notice or your information, email hi@biolink.page or write to Dijital Mekan Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.