Version 1.2 · 28 October 2026 · How we handle information about people in the Stimfluencer programme.
This notice explains what information we hold about you as a Stimfluencer, where it comes from, what we do with it and what you can ask us to do. We have tried to write it plainly. If anything is unclear, ask us and we will explain it.
The controller of your information is Flexi Fidgets Co. Ltd, company number 15982398, registered office 43 Dollywaggon Way, Bamber Bridge, Preston PR5 6EW, trading as Stimz.
For anything about your information, email stimfluencer@stimz.com.
This notice is about information relating to Stimfluencers. The programme itself runs on our Stimfluencer Programme Terms. If you are a customer shopping with us, our Stimz Privacy Policy covers you instead, and it is also where we set out how we use cookies and similar technology on stimz.com.
| Information | Where it comes from |
|---|---|
| Your name and email address | Your application and your portal |
| Your social media handles for Instagram, TikTok, YouTube and Facebook | Your portal |
| Your postal address, and where you give it, your National Insurance number or Unique Taxpayer Reference | Your portal, for our tax records |
| Gender and age range, if you choose to tell us. These are optional and there is a "prefer not to say" option | Your portal |
| Your VAT registration number, if you have one | Your portal |
| Links to posts you submit | Your portal |
| Messages you send us | Email and support |
Your bank details. We do not hold these. Payments go through Stripe, which collects your bank and identity details directly from you and holds them under its own privacy notice.
We collect information about you from sources other than you, and we want to be upfront about it.
Using the social media handles you give us, we collect publicly available information about those accounts. We do this so we can see how the programme is performing and work out which revenue share level you sit on.
We collect this at account and post level only. We do not collect information about the people who follow, like or comment on your posts.
All of it comes from publicly accessible sources. We do not access anything private, and we do not ask you for your account passwords or log-in details. Please never send us those.
Follower counts refresh weekly. Post figures refresh weekly for the first two weeks after a post is published, and then stop.
What Stimfluencers can see about customers. Your portal lists each order attributed to you by its order number, date, value and how your share was worked out, along with your counts and totals. It does not show you customers' names, email addresses, addresses or what they bought, and it never will. Where a customer received VAT relief, it is shown the same way as ordinary VAT, so nobody's entitlement can be read from your list. Customer details are not ours to hand on.
| What we do | Why | Legal basis |
|---|---|---|
| Set up and run your account, attribute your sales, calculate and pay commission | To do what we agreed to do | Contract |
| Add store credit to your stimz.com account when you choose to swap your balance for it. We find your customer account on our shop by your email address and add the credit there. | To do what you asked us to do | Contract |
| Send you programme emails: your log-in code, payment confirmations, changes to the terms | To run the programme | Contract |
| Collect your public follower counts and post figures | To measure the programme and set your revenue share level | Contract, because your level depends on it, and legitimate interests in understanding how the programme performs |
| Record clicks and attribute orders | So you get paid for the sales you generate | Legitimate interests in running an affiliate programme fairly. Where the visitor's browser storage is involved, we rely on the visitor's consent given on stimz.com |
| Hold your gender and age range | To match you to campaigns that suit your audience | Consent. These are optional, and you can remove them at any time |
| Keep records of what we paid you | Company, tax and VAT law | Legal obligation |
| Check content for advertising compliance | We are legally responsible for how our products are advertised | Legal obligation and legitimate interests |
| Investigate suspected fraud or manipulation of tracking | To protect the programme and other Stimfluencers | Legitimate interests |
| Marketing emails about the programme beyond what is needed to run it | To tell you about things you might want to take part in | Consent. You can unsubscribe at any time and we will stop |
Where we rely on legitimate interests we have weighed our interests against your rights and concluded that our use is fair, expected and proportionate. You can ask us for a summary of that assessment and we will give you one.
If we operate revenue share levels, your level may move automatically based on your figures, which changes what you earn. We want to be clear about that, and about your right to have it looked at:
| Who | What for | Their role |
|---|---|---|
| Stripe | Paying you, and the identity checks the law requires them to run | Stripe decides how it handles your identity and payment data and is responsible in its own right, not merely acting for us. See stripe.com/gb/privacy |
| Shopify | Our shop, where orders, discount codes and store credit live. Shopify may email you when store credit is added to your account | Acting for us |
| Fly.io | Hosting the Stimfluencer system | Acting for us |
| Resend | Sending programme emails | Acting for us |
| Klaviyo | Programme mailing lists | Acting for us |
| Apify | Reading public post and profile figures | Acting for us |
| Google (YouTube Data API) | Public YouTube figures | Google is responsible in its own right for the API |
| Our accountants and professional advisers | Accounts, tax and legal advice | Bound by confidentiality |
| HMRC, the ICO, the ASA, the CMA and other authorities | Where the law requires it, or where they ask and are entitled to | Responsible in their own right |
We do not sell your information, and we do not share it for anyone else's advertising.
Our system is hosted in London. Some of the services above are based outside the UK, mostly in the United States and the European Economic Area. When your information goes to a country outside the UK we make sure it is protected, either because the UK government recognises that country as providing adequate protection, or because we have put an approved transfer agreement in place with the supplier. You can ask us which applies to which supplier and we will tell you.
| What | How long | Why |
|---|---|---|
| Your account details | While you are in the programme, then 6 years from your last payment | Tax records and the period in which a claim could be brought |
| Records of what we paid you | 6 years from the end of the financial year | Company and tax law |
| Individual click records | 90 days, then deleted | Long enough to attribute a sale and settle a query |
| Your click and visitor totals | Kept as counts, with no individual records behind them | Programme reporting |
| Follower counts and post figures | 2 years, then deleted | Level history and reporting |
| Order records attributed to you | Reduced to what tax law needs after 24 months | Customer service, then legal obligation |
| Emails between us | 2 years after your account closes | Answering questions about past decisions |
| If you unsubscribe | We keep your email address on a do-not-contact list indefinitely | It is the only way to make sure we do not email you again |
Access to the Stimfluencer system is restricted and the connection is encrypted. Your portal log-in works by sending a code to your email address, so there is no password to be stolen. We never hold your bank details. We review who has access and remove it when it is no longer needed.
You can ask us to:
Where we rely on your consent, you can withdraw it at any time. That does not undo anything done before you withdrew it.
Deletion has a limit we should be honest about. Once we have paid you, we have to keep a record of that payment for six years, because tax and company law require it. If you ask us to delete your information we will delete everything we can, keep only the financial record, put it beyond ordinary use, and tell you specifically what we kept and why.
To exercise any of these, email stimfluencer@stimz.com. We will respond within one month. If your request is complicated we may need up to two months more, but we will tell you within the first month if so, and why. There is no charge.
If you are unhappy with how we have handled your information, please tell us first at stimfluencer@stimz.com. We will acknowledge your complaint within 30 days, look into it properly, keep you posted, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office at any time, whether or not you have come to us first. ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint.
The Stimfluencer programme is only open to people aged 18 or over, and we do not knowingly hold information about anyone younger through it. If we find that we have, we will delete it and close the account.
If we change this notice we will update the version and date at the top. If a change matters to you, we will email you before it takes effect.
Flexi Fidgets Co. Ltd, 43 Dollywaggon Way, Bamber Bridge, Preston PR5 6EW. Email stimfluencer@stimz.com.
Stimfluencer Privacy Notice, version 1.2, 28 October 2026. Stimz is a trading name of Flexi Fidgets Co. Ltd, registered in England and Wales, company number 15982398. Registered office 43 Dollywaggon Way, Bamber Bridge, Preston PR5 6EW.