Privacy Policy

Last updated: October 10, 2026
Effective date: October 10, 2026

1. Introduction

Affiliate House (Staging) (“Affiliate House (Staging),” “we,” “us,” or “our”) is operated by GAEA Botanicals Cosmetics and Skin Care Products Trading OPC (the “Company”).

This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal data when you visit our website, register for an account, use our Platform, participate in campaigns, communicate with us, or interact with our services.

We aim to process personal data in accordance with the Philippine Data Privacy Act of 2012, its implementing rules and regulations, applicable issuances of the National Privacy Commission, and other applicable laws.

Where applicable law requires consent or another specific lawful basis, we will obtain or rely on that basis as required. This Policy does not replace any separate notice or consent required by law.

2. Who Is Responsible for Your Personal Data?

The Company is responsible for personal data processing activities for which it acts as a personal information controller under applicable law.

Company: GAEA Botanicals Cosmetics and Skin Care Products Trading OPC
Address: Metro Manila, Philippines
Privacy contact: hello@affiliatehouse.social
Website: https://affiliatehouse.social

The Company will update its privacy contact and Data Protection Officer details as applicable. The Company will designate and register a Data Protection Officer where required by law.

If the Company acts only as a personal information processor for a particular activity, the relevant controller's instructions and applicable agreement may also govern that processing.

3. Personal Data We May Collect

The information collected depends on how you use the Platform and which features are available.

3.1 Account and Contact Information

This may include your name, username, email address, phone number, login credentials or authentication data, account preferences, and communications with us.

3.2 Business Information

For Brand accounts, this may include business name, business contact details, role, company profile, billing information, registration or verification documents, and information showing authority to act for the business.

3.3 Creator Profile and Social Information

For Creator accounts, this may include profile descriptions, selected creator categories, earning setup, preferred compensation range, niche, portfolio, social-media handles, linked social accounts, audience or performance information made available to us, past collaborations, and campaign preferences.

Social account verification or profile information does not guarantee the authenticity, accuracy, or future performance of a creator.

3.4 Campaign and Transaction Records

This may include campaign briefs, product information, creator applications and acceptances, invitations, deliverables, posting schedules, product shipment and tracking details, draft submissions, approvals, revisions, published-content links, verification results, compensation records, payment methods, transaction references, payment evidence, invoices, disputes, replacements, and administrative decisions.

Where payment proof is submitted, users should avoid uploading unnecessary sensitive information. We may ask users to obscure unrelated account balances, transactions, or personal details.

3.5 Communications and Support

We may collect messages, emails, support requests, complaints, feedback, surveys, and records of interactions with the Company or other users through Platform features.

3.6 Technical and Usage Information

Depending on our configuration and the services used, this may include IP address, device and browser information, operating system, approximate location derived from technical information, log data, pages or features used, timestamps, diagnostic information, cookies, and similar technologies.

3.7 Information from Other Sources

We may receive information from social platforms, identity or business verification providers, analytics providers, payment or shipping providers, other users, and publicly available sources where lawful and relevant to Platform operations.

We do not intentionally collect more personal data than is reasonably necessary for the relevant purpose.

4. Why We Process Personal Data

Subject to applicable law and the appropriate lawful basis, we may process personal data to:

• Create and manage user accounts.
• Authenticate users and protect account security.
• Display profiles and facilitate brand–creator discovery, matching, applications, and invitations.
• Administer campaigns, product shipments, briefs, drafts, approvals, revisions, posting links, and verification.
• Maintain compensation, payment-proof, invoice, and dispute records.
• Provide customer support, respond to inquiries, and communicate service updates.
• Process subscriptions, billing, and service-fee obligations.
• Detect and investigate fraud, abuse, security incidents, and breaches of our agreements.
• Maintain audit trails and evidence of campaign acceptance, payment verification, content approval, and administrative actions.
• Operate, troubleshoot, maintain, and improve Platform features.
• Conduct analytics and measure service performance, subject to applicable requirements.
• Send service-related notices and, where permitted, marketing communications.
• Comply with legal, tax, accounting, regulatory, and lawful governmental requirements.
• Establish, exercise, or defend legal claims and protect the rights, safety, and legitimate interests of users and the Company.

We will not treat every purpose as automatically authorized in every situation. The lawful basis and applicable notice or consent depend on the particular processing activity.

5. Lawful Bases for Processing

Depending on the activity, we may rely on one or more lawful bases recognized under applicable law, including:

• Your consent, where consent is required or relied upon.
• Steps requested by you before entering into a contract, or performance of a contract.
• Compliance with a legal obligation.
• Protection of vital interests where applicable.
• Legitimate interests, where permitted by law and balanced against the rights and interests of the data subject.
• Other lawful bases expressly recognized by applicable law.

Where we rely on consent, you may withdraw it subject to applicable law. Withdrawal does not retroactively invalidate processing lawfully conducted before withdrawal and may affect features that depend on the relevant information.

6. How Information May Be Shared

We may disclose personal data only as appropriate for the relevant purpose, subject to applicable law and appropriate safeguards.

Recipients may include:

• Brands and creators: Information necessary to review profiles, assess applications, coordinate campaigns, communicate, fulfill deliverables, verify content, and make or confirm payments.
• Service providers: Hosting, cloud storage, communications, analytics, security, support, verification, payment-record, and other vendors that help operate the Platform.
• Professional advisers: Lawyers, accountants, auditors, insurers, and other advisers where reasonably necessary.
• Authorities and other parties: Government agencies, regulators, law enforcement, courts, or other parties where required or permitted by law, or where necessary to establish, exercise, or defend legal claims.
• Business transaction parties: A prospective or actual buyer, successor, investor, or other party involved in a lawful corporate transaction, subject to applicable law and safeguards.
• Other recipients with permission: Parties to whom you direct us to disclose information or where you otherwise provide valid authorization.

We do not sell personal data to third parties as a standalone commercial product. We may use service providers that process data on our behalf under appropriate arrangements.

Users should understand that information shared with another campaign participant may be processed by that participant under its own privacy practices and legal responsibilities.

7. Social Accounts and Public Content

If you connect or provide social-media profiles, we may process the information you make available or authorize us to access, subject to the permissions, functionality, and policies of the relevant service.

Publicly accessible information may still be personal data. We will use it only for lawful and relevant Platform purposes.

We do not control social-media platforms and are not responsible for their independent processing, policy changes, outages, or account decisions.

8. Cookies and Similar Technologies

The Platform may use cookies, pixels, local storage, analytics tools, or similar technologies for functions such as:

• Authentication and session management.
• Security and fraud prevention.
• Remembering settings and preferences.
• Understanding Platform usage and diagnosing issues.
• Measuring the effectiveness of communications or marketing where permitted.

Where required by law, we will seek consent before using non-essential cookies or similar technologies. Browser or device settings may allow you to manage certain technologies, although disabling necessary technologies may affect Platform functionality.

9. Marketing Communications

We may send service-related communications necessary to manage your account, campaigns, payments, security, policy changes, and other Platform operations.

Where permitted by law, we may also send marketing communications. You may opt out through an available unsubscribe mechanism or by contacting us. Opting out of marketing does not prevent essential service or legal notices.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including account operation, campaign administration, payment and invoice records, security, dispute handling, legal compliance, and the establishment, exercise, or defense of legal claims.

Retention periods may vary by data category and legal requirement. Some records, including accepted terms, campaign history, compensation changes, verification decisions, invoices, and payment evidence, may need to be retained after an account is closed to document transactions, prevent fraud, resolve disputes, or comply with law.

When personal data is no longer necessary, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to lawful retention obligations, backups, and technical limitations.

The Company will maintain an internal retention schedule specifying periods or criteria for account data, campaign records, payment evidence, support messages, analytics, and backup data.

11. Data Security

We implement reasonable organizational, physical, and technical measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Measures may include access controls, authentication, role-based permissions, secure transmission, vendor controls, monitoring, backup practices, and staff confidentiality obligations, as appropriate to the data and risks.

No system or transmission method is completely secure. We cannot guarantee absolute security, but we will respond to incidents in accordance with applicable law and our incident-response procedures.

Users must protect their credentials, avoid sharing unnecessary sensitive information, and report suspected account compromise or unauthorized disclosure promptly.

12. International Transfers and Service Providers

Some service providers or infrastructure may process or store information outside the Philippines. Where personal data is transferred internationally, the Company will apply the safeguards and legal requirements applicable to the transfer.

13. Your Rights

Subject to applicable law, you may have rights to:

• Be informed about personal-data processing.
• Access personal data held about you.
• Correct inaccurate or incomplete personal data.
• Object to certain processing.
• Request erasure or blocking where legally available.
• Withdraw consent where processing relies on consent.
• Request data portability where applicable.
• Lodge a complaint with the National Privacy Commission or other competent authority.
• Seek remedies available under applicable law.

These rights are subject to legal conditions, exceptions, and limitations. For example, we may need to retain certain records for legal compliance, accounting, fraud prevention, contractual enforcement, or dispute resolution.

To exercise a right, contact us using the privacy contact details above. We may request information reasonably necessary to verify your identity and understand the request. We will respond within the period required by applicable law.

14. Children and Minors

The Platform is intended for users who are legally capable of entering into the relevant arrangements. Users must not provide false age or identity information.

If a campaign or feature could involve a minor, the Company must determine the applicable age, consent, representation, labor, advertising, and child-protection requirements before enabling participation. A parent's or guardian's involvement does not automatically make every activity lawful.

If we learn that personal data was collected unlawfully from a child or minor, we will take appropriate action in accordance with applicable law.

15. Third-Party Websites and Services

The Platform may contain links to third-party websites or integrate third-party services. Those parties may have separate privacy notices, security practices, and terms.

This Policy does not govern a third party's independent processing. Users should review the relevant third-party notices before sharing information or connecting accounts.

16. Automated Matching and Decisions

The Platform may use profile information, campaign preferences, earning setup, and other configured criteria to facilitate discovery, matching, recommendations, or administrative workflows.

Matching results are suggestions or workflow outputs and do not guarantee suitability, authenticity, performance, or acceptance. Where applicable law provides rights regarding solely automated decisions, the Company will address those rights in accordance with law.

17. Data Breaches and Complaints

If a personal-data breach occurs, the Company will assess and respond in accordance with applicable law, including any applicable notification requirements.

To raise a privacy concern, request information, or submit a complaint, contact:

Privacy contact: hello@affiliatehouse.social
Company: GAEA Botanicals Cosmetics and Skin Care Products Trading OPC
Address: Metro Manila, Philippines

Please include sufficient information to help us identify the relevant account or processing activity, but do not send passwords or unnecessary sensitive data.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Platform, our processing practices, service providers, or legal requirements.

We will publish the revised version and update the effective date. Where required by law, we will provide notice or obtain consent for material changes. The version applicable to a particular processing activity will be determined in accordance with applicable law.

19. Contact Details

GAEA Botanicals Cosmetics and Skin Care Products Trading OPC
Operating Affiliate House
Address: Metro Manila, Philippines
Privacy contact: hello@affiliatehouse.social