Last updated: 6 October 2026
Information we may collect
PowderedPurple is an editorial and affiliate website. We do not process payments or fulfil orders. Depending on the features enabled, we may collect:
- Information you choose to send, such as your name, email address or message if you contact us.
- Basic technical information, such as pages visited, device/browser type, approximate location, referring page and timestamps, through hosting logs or analytics tools.
- Essential browser-storage information used to remember local preferences, comparison selections and article ratings in your browser.
- Optional on-site tracking information only after the relevant consent. Clicking a paid link can separately send request and attribution data to the affiliate network, as explained below.
How we use information
We use information to operate the website, respond to messages, improve content, measure performance, prevent abuse, maintain security, and understand which product or tutorial pages are useful.
Legal bases for processing
Where data-protection law requires a legal basis, we rely on consent for optional analytics; legitimate interests for basic security, site operation and abuse prevention; contractual necessity where you ask us to respond to an enquiry; and legal obligations where records must be kept or disclosed by law.
Affiliate links and external retailers
When enabled, a Nadula paid link first visits Admitad (xpuvo.com); a WAU paid link first visits Awin (awin1.com). The network redirects you to the merchant for referral attribution. That request can include your IP address, browser/request details, time, referral information allowed by your browser, publisher/campaign identifiers and a generated click identifier. The network or merchant may use cookies or other attribution methods under its own policy.
Our privacy controls govern optional scripts on PowderedPurple. Rejecting, withdrawing or sending Global Privacy Control blocks those scripts here; it does not rewrite paid links, stop their redirects or guarantee that a merchant will not attribute a purchase. You can avoid paid links and visit the retailer independently. Plain source links are identified separately.
The nine current research profiles carry paid links through Awin or Admitad. Following a paid link sends a request to the relevant affiliate network and merchant. Awin and Admitad do not have embedded tags on this site; their processing occurs when a visitor follows one of their paid links.
Cookies and analytics
The website uses essential browser storage for local features such as article ratings, comparison selections and the record of your privacy choice. Optional analytics tracking is off by default. On your first visit we ask you to choose Accept analytics tracking, Reject non-essential tracking or Manage preferences. Rejecting does not limit access to the website or retailer links.
We store an affirmative or rejection choice with the policy version and timestamp solely to remember it. Where the consent service is configured, a same-origin recorder also stores an append-only event containing a keyed pseudonymous visitor value, the selected purposes, consent and interface versions, Global Privacy Control signal, event source and UTC timestamp. It does not store the raw browser identifier, names, full IP addresses or browsing history. If the recorder is unavailable, local enforcement still applies and optional tracking remains blocked. A browser Global Privacy Control signal is treated as a rejection. You can withdraw at any time through Privacy choices in every page footer. Withdrawal stops future optional requests and removes accessible first-party optional-tracking storage where the browser permits, then reloads the page with tracking disabled. We cannot remove cookies that are controlled solely by a third-party domain; use that provider's controls and your browser controls for those cookies.
One embedded affiliate script is active in this release: AvantLink's site-verification tag on the home page only. It loads without waiting for a privacy choice, because AvantLink's check must be able to find it, and it is not used for analytics. Awin and Admitad process information only when a visitor follows one of their paid links, not through an embedded tag. If another vendor tag is later enabled, its vendor name, processing purpose, data categories, retention period, destination and applicable privacy notice will be listed here before any non-essential request is made. Optional analytics remains blocked until acceptance and after rejection. A material change to optional analytics purposes or vendors will use a new consent version and require a new choice.
Vendor and technology register
| Vendor | Purpose | Data involved | Legal basis | Duration | Destination |
|---|---|---|---|---|---|
| AvantLink Affiliate network; site-verification script on the home page only, while an application is decided | Lets AvantLink confirm that PowderedPurple owns this website when it reviews PowderedPurple's affiliate application. | The request your browser makes to load the script: IP address, browser and device details, timestamp and the page address. What AvantLink does with it is set out in AvantLink's own privacy notice. | Legitimate interests in completing an affiliate application; it loads without a privacy choice and is not controlled by the analytics preference. | Set by AvantLink; not independently confirmed here. The script will be removed once the application is decided. | classic.avantlink.com. Processing can occur outside South Africa. |
| Awin — WAU Paid-link network; links active on identified product profiles | Redirect and attribute an intentional paid-link click; no embedded script. | Request details, IP address, timestamp, publisher/campaign and click identifiers; referral information where transmitted. | External network processing is described in Awin's notice; our on-site consent does not control the redirect. | Cookie and attribution duration depend on the programme and network. A programme-specific period has not been independently confirmed here. | awin1.com, then wauglobal.com. Processing can occur internationally; see Awin privacy notice. |
| Admitad — Nadula Paid-link network; links active on identified product profiles | Redirect and attribute an intentional paid-link click; no embedded script. | Request details, IP address, timestamp, publisher/campaign and click identifiers; referral information where transmitted. | External network processing is described in Admitad's notice; our on-site consent does not control the redirect. | Cookie and attribution duration depend on the programme and network. A programme-specific period has not been independently confirmed here. | xpuvo.com, then nadula.com. Processing can occur internationally; see Admitad privacy notice. |
| PowderedPurple consent service First-party, when configured | Record and demonstrate privacy choices and withdrawals. | Keyed pseudonymous visitor value, choice and purpose flags, consent/UI versions, GPC signal, source and UTC timestamp. | Legitimate interests for accountability, and consent records where required to demonstrate consent. | Three years after withdrawal or replacement, subject to a documented deletion request or legal need. | South Africa on the cPanel account, unless the hosting arrangement changes. |
| xneelo (Pty) Ltd cPanel-hosted delivery | Deliver pages, prevent abuse, investigate incidents and maintain service reliability. | IP address, browser/request metadata, timestamp and security/error-log data. | Legitimate interests in security and delivery. | No application log database is operated by the website. xneelo states that web-server logs are normally kept for 60 days and security logs for 12 months or less, unless a specific incident requires longer retention. | South Africa for the current server allocation. xneelo also documents infrastructure in Germany; any server-location change will be recorded here before it affects visitor data. |
| Google Fonts Not an active external vendor | Typography is self-hosted from PowderedPurple, so no visitor request is sent to Google Fonts. | None through Google Fonts. | Not applicable. | Not applicable. | No Google Fonts transfer in the current site implementation. |
Essential local storage: article ratings, comparison selections and the privacy choice remain on your device until you clear site data, change the preference or the stored consent version is replaced.
Sharing information
We do not sell personal information for money. We may share limited information with our hosting provider and security suppliers and an identified optional on-site tracking vendor only after consent and programme approval. The home page also loads AvantLink's site-verification script without a privacy choice, as described in the vendor table. A visitor who follows a paid link also makes a separate request to its affiliate network and merchant. Some US privacy laws may treat certain cross-context advertising or affiliate-tracking activity as a "sale" or "sharing". The site honours Global Privacy Control, provides Privacy choices in every footer and treats withdrawal as a request to stop optional tracking.
Retention and security
We use access controls, HTTPS and deployment safeguards designed to protect the site, but no website or internet transmission can be guaranteed to be completely secure.
Retention schedule
- Hosting access logs: normally 60 days; security logs up to 12 months, unless a specific incident requires longer investigation.
- Affiliate attribution data: network and merchant retention for paid-link clicks follows their policies and is separate from optional on-site tracking consent. PowderedPurple does not maintain a separate affiliate-click database.
- Direct enquiries: three years after the enquiry is closed, unless a longer period is needed to resolve a dispute or meet a legal obligation.
- Consent records: three years after withdrawal or replacement, so we can demonstrate and honour the choice.
- Affiliate, editorial and asset-rights evidence: seven years, or longer where programme terms, a dispute or a statutory limitation period requires it.
- Direct-marketing suppression records: only if marketing is introduced; retained for as long as reasonably necessary to honour an objection, then up to three years to demonstrate compliance.
Direct marketing
PowderedPurple does not currently operate a newsletter or send promotional email. Before direct marketing is introduced, the site will use a separate opt-in record, preserve proof of consent, identify the sender in every message and provide a working unsubscribe method. A withdrawn consent or objection will be added to a suppression record and honoured before any further marketing is sent.
Information Officer and PAIA
The head of PowderedPurple (Pty) Ltd is the Information Officer by operation of POPIA and PAIA unless a properly designated officer is recorded. Contact is privacy@powderedpurple.com. The site does not treat this contact as evidence that the Information Officer has been registered with the Information Regulator. Registration evidence must be retained privately and the public PAIA Manual will be updated once the registration reference is confirmed.
Our PAIA Manual explains the categories of records we may hold and the process for requesting access. It is published in English while the company obtains South African privacy-practitioner advice on required languages, record categories, fees, automatic-availability records and any applicable exemption.
Your choices
You may choose not to use affiliate links, reject or withdraw optional analytics through Privacy choices, use a browser opt-out preference signal, block cookies in your browser, or contact us to ask about personal information you have provided directly. Withdrawing consent does not change whether you can view the site, and it does not guarantee that paid-link attribution on external sites stops.
Privacy rights
Depending on where you live, you may have the right to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your personal information is used. Where the GDPR or another EU/EEA data-protection law applies, PowderedPurple will apply the relevant lawful-basis, transparency, data-subject-rights and international-transfer requirements to the processing in scope. California residents may also have rights under the CCPA/CPRA to know, delete, correct and opt out of certain sale/share uses of personal information. South African visitors may have POPIA rights, including the ability to object to certain processing and to lodge a complaint with the Information Regulator if personal information is processed unlawfully.
To make a privacy request, email privacy@powderedpurple.com. We may need to verify your request before acting on it.
International visitors
PowderedPurple is based in South Africa and may use service providers or affiliate networks in other countries. Paid-link redirects can send information to networks and merchants outside South Africa. Transfers are limited to what is necessary and are handled under the safeguards and contractual arrangements required by applicable law.
Children
PowderedPurple is not directed to children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as the website, analytics setup, affiliate partners or legal requirements change. The latest version will be posted on this page. When an optional-tracking purpose or vendor changes materially, we will issue a new consent version and ask visitors to make a new choice before that optional technology is used.