Last updated: 7 September 2026
Information we may collect
PowderedPurple is an editorial and affiliate website. We do not process payments or fulfil orders. Depending on the features enabled, we may collect:
- Information you choose to send, such as your name, email address or message if you contact us.
- Basic technical information, such as pages visited, device/browser type, approximate location, referring page and timestamps, through hosting logs or analytics tools.
- Essential browser-storage information used to remember local preferences, comparison selections and article ratings in your browser.
- Optional on-site tracking information only after the relevant consent. Clicking a paid link can separately send request and attribution data to the affiliate network, as explained below.
How we use information
We use information to operate the website, respond to messages, improve content, measure performance, prevent abuse, maintain security, and understand which product or tutorial pages are useful.
Legal bases for processing
Where data-protection law requires a legal basis, we rely on consent for optional affiliate tracking and analytics; legitimate interests for basic security, site operation and abuse prevention; contractual necessity where you ask us to respond to an enquiry; and legal obligations where records must be kept or disclosed by law.
Affiliate links and external retailers
When enabled, a Nadula paid link first visits Admitad (xpuvo.com); a WAU paid link first visits Awin (awin1.com). The network redirects you to the merchant for referral attribution. That request can include your IP address, browser/request details, time, referral information allowed by your browser, publisher/campaign identifiers and a generated click identifier. The network or merchant may use cookies or other attribution methods under its own policy.
Our privacy controls govern optional scripts on PowderedPurple. Rejecting, withdrawing or sending Global Privacy Control blocks those scripts here; it does not rewrite paid links, stop their redirects or guarantee that a merchant will not attribute a purchase. You can avoid paid links and visit the retailer independently. Plain source links are identified separately.
The nine current research profiles carry paid links through Awin or Admitad. Following a paid link sends a request to the relevant affiliate network and merchant. No embedded Awin or Admitad tracking script is enabled here.
Cookies and analytics
The website uses essential browser storage for local features such as article ratings, comparison selections and the record of your privacy choice. Optional affiliate and analytics tracking is off by default. On your first visit we ask you to choose Accept affiliate and analytics tracking, Reject non-essential tracking or Manage preferences. Rejecting does not limit access to the website or retailer links.
We store an affirmative or rejection choice with the policy version and timestamp solely to remember it. Where the consent service is configured, a same-origin recorder also stores an append-only event containing a keyed pseudonymous visitor value, the selected purposes, consent and interface versions, Global Privacy Control signal, event source and UTC timestamp. It does not store the raw browser identifier, names, full IP addresses or browsing history. If the recorder is unavailable, local enforcement still applies and optional tracking remains blocked. A browser Global Privacy Control signal is treated as a rejection. You can withdraw at any time through Privacy choices in every page footer. Withdrawal stops future optional requests and removes accessible first-party optional-tracking storage where the browser permits, then reloads the page with tracking disabled. We cannot remove cookies that are controlled solely by a third-party domain; use that provider's controls and your browser controls for those cookies.
No optional affiliate or analytics vendor script is active in this release. Participating in an affiliate programme is not the same as running that network's tracking tag: PowderedPurple does the former and not the latter. If a vendor tag is later enabled, its vendor name, processing purpose, data categories, retention period, destination and applicable privacy notice will be listed here before any non-essential request is made. We do not load optional tracking before acceptance or after rejection. A material change to optional purposes or vendors will use a new consent version and require a new choice.
Vendor and technology register
| Vendor | Purpose | Data involved | Legal basis | Duration | Destination |
|---|---|---|---|---|---|
| Awin — WAU Paid-link network; links active on identified product profiles | Redirect and attribute an intentional paid-link click; no embedded script. | Request details, IP address, timestamp, publisher/campaign and click identifiers; referral information where transmitted. | External network processing is described in Awin's notice; our on-site consent does not control the redirect. | Cookie and attribution duration depend on the programme and network. A programme-specific period has not been independently confirmed here. | awin1.com, then wauglobal.com. Processing can occur internationally; see Awin privacy notice. |
| Admitad — Nadula Paid-link network; links active on identified product profiles | Redirect and attribute an intentional paid-link click; no embedded script. | Request details, IP address, timestamp, publisher/campaign and click identifiers; referral information where transmitted. | External network processing is described in Admitad's notice; our on-site consent does not control the redirect. | Cookie and attribution duration depend on the programme and network. A programme-specific period has not been independently confirmed here. | xpuvo.com, then nadula.com. Processing can occur internationally; see Admitad privacy notice. |
| PowderedPurple consent service First-party, when configured | Record and demonstrate privacy choices and withdrawals. | Keyed pseudonymous visitor value, choice and purpose flags, consent/UI versions, GPC signal, source and UTC timestamp. | Legitimate interests for accountability, and consent records where required to demonstrate consent. | Three years after withdrawal or replacement, subject to a documented deletion request or legal need. | South Africa on the cPanel account, unless the hosting arrangement changes. |
| xneelo (Pty) Ltd cPanel-hosted delivery | Deliver pages, prevent abuse, investigate incidents and maintain service reliability. | IP address, browser/request metadata, timestamp and security/error-log data. | Legitimate interests in security and delivery. | No application log database is operated by the website. xneelo states that web-server logs are normally kept for 60 days and security logs for 12 months or less, unless a specific incident requires longer retention. | South Africa for the current server allocation. xneelo also documents infrastructure in Germany; any server-location change will be recorded here before it affects visitor data. |
| Google Fonts Not an active external vendor | Typography is self-hosted from PowderedPurple, so no visitor request is sent to Google Fonts. | None through Google Fonts. | Not applicable. | Not applicable. | No Google Fonts transfer in the current site implementation. |
Essential local storage: article ratings, comparison selections and the privacy choice remain on your device until you clear site data, change the preference or the stored consent version is replaced.
Sharing information
We do not sell personal information for money. We may share limited information with our hosting provider and security suppliers and an identified optional on-site tracking vendor only after consent and programme approval. A visitor who follows a paid link also makes a separate request to its affiliate network and merchant. Some US privacy laws may treat certain cross-context advertising or affiliate-tracking activity as a "sale" or "sharing". The site honours Global Privacy Control, provides Privacy choices in every footer and treats withdrawal as a request to stop optional tracking.
Retention and security
We use access controls, HTTPS and deployment safeguards designed to protect the site, but no website or internet transmission can be guaranteed to be completely secure.
Retention schedule
- Hosting access logs: normally 60 days; security logs up to 12 months, unless a specific incident requires longer investigation.
- Affiliate attribution data: network and merchant retention for paid-link clicks follows their policies and is separate from optional on-site tracking consent. PowderedPurple does not maintain a separate affiliate-click database.
- Direct enquiries: three years after the enquiry is closed, unless a longer period is needed to resolve a dispute or meet a legal obligation.
- Consent records: three years after withdrawal or replacement, so we can demonstrate and honour the choice.
- Affiliate, editorial and asset-rights evidence: seven years, or longer where programme terms, a dispute or a statutory limitation period requires it.
- Direct-marketing suppression records: only if marketing is introduced; retained for as long as reasonably necessary to honour an objection, then up to three years to demonstrate compliance.
Direct marketing
PowderedPurple does not currently operate a newsletter or send promotional email. Before direct marketing is introduced, the site will use a separate opt-in record, preserve proof of consent, identify the sender in every message and provide a working unsubscribe method. A withdrawn consent or objection will be added to a suppression record and honoured before any further marketing is sent.
Information Officer and PAIA
The head of PowderedPurple (Pty) Ltd is the Information Officer by operation of POPIA and PAIA unless a properly designated officer is recorded. Contact is privacy@powderedpurple.com. The site does not treat this contact as evidence that the Information Officer has been registered with the Information Regulator. Registration evidence must be retained privately and the public PAIA Manual will be updated once the registration reference is confirmed.
Our PAIA Manual explains the categories of records we may hold and the process for requesting access. It is published in English while the company obtains South African privacy-practitioner advice on required languages, record categories, fees, automatic-availability records and any applicable exemption.
Your choices
You may choose not to use affiliate links, reject or withdraw optional affiliate tracking through Privacy choices, use a browser opt-out preference signal, block cookies in your browser, or contact us to ask about personal information you have provided directly. Withdrawing consent does not change whether you can view the site, and it does not guarantee that paid-link attribution on external sites stops.
Privacy rights
Depending on where you live, you may have the right to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your personal information is used. Where the GDPR or another EU/EEA data-protection law applies, PowderedPurple will apply the relevant lawful-basis, transparency, data-subject-rights and international-transfer requirements to the processing in scope. California residents may also have rights under the CCPA/CPRA to know, delete, correct and opt out of certain sale/share uses of personal information. South African visitors may have POPIA rights, including the ability to object to certain processing and to lodge a complaint with the Information Regulator if personal information is processed unlawfully.
To make a privacy request, email privacy@powderedpurple.com. We may need to verify your request before acting on it.
International visitors
PowderedPurple is based in South Africa and may use service providers or affiliate networks in other countries. Paid-link redirects, when enabled, can send information to networks and merchants outside South Africa. Any future optional on-site vendor will also be identified in the vendor register before activation. Transfers are limited to what is necessary and are handled under the safeguards and contractual arrangements required by applicable law.
Children
PowderedPurple is not directed to children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as the website, analytics setup, affiliate partners or legal requirements change. The latest version will be posted on this page. When an optional-tracking purpose or vendor changes materially, we will issue a new consent version and ask visitors to make a new choice before that optional technology is used.