Privacy Policy
_Version 2 · Last updated 22 October 2026 · Replaces Version 1 (16 October 2026)_
1. Who we are
Aurum Transfers Limited (Jamaica company number 128348), c/o Ocho Rios Post Office, Ocho Rios, Saint Ann, Jamaica, operates aurum-transfers.com and is the data controller for the personal data described here. Privacy contact: info@aurum-transfers.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR/UK GDPR; Jamaica DPA 2020 equivalent) |
|---|---|---|
| Text you type into trip tools | To answer you and improve answers | Performance of your request; legitimate interests |
| Partner link clicks (partner, page, placement, time, click ID) | To credit commissions and measure what helps | Legitimate interests |
| Device and usage data (pages, browser, approximate location) via analytics | To run, secure and improve the Site | Consent where required; otherwise legitimate interests |
| Advertising cookies (Google AdSense) | To show and measure ads | Consent |
| Purchase data from PayPal (name, email, country, product, order ID, refund status) | To deliver your download link, support you, handle refunds and keep records | Performance of contract; legal obligation |
| Download link events (issued, used, revoked) | To deliver Products and prevent abuse | Performance of contract; legitimate interests |
| Emails you send us | To reply | Your request; legitimate interests |
Please do not type passport numbers, payment card details or health information into the Site's tools.
3. Payments: PayPal
Digital products and plans are sold by Aurum Transfers Limited. Payments (PayPal balance or debit/credit card) are processed by PayPal as an independent controller under its own privacy statement (https://www.paypal.com/myaccount/privacy/privacyhub). We never receive your full card details. PayPal shares with us the order information listed above so we can deliver your Product. We also store your instant-access consent and its time with your order.
4. Cookies and similar technologies
- Essential cookies (for example, remembering your cookie choice and security) are always on.
- Analytics (PostHog) and advertising (Google AdSense) cookies stay off until you choose "Accept all" in the cookie notice. You can change your choice at any time via "Cookie settings" at the foot of every page.
Advertising
- Google's use of advertising cookies lets it and its partners serve ads based on your visits to this and other sites. You can opt out of personalised ads at https://adssettings.google.com and learn more at https://policies.google.com/technologies/partner-sites.
- Affiliate tracking: when you click a Partner link, the link carries a click identifier, and the Partner may set its own cookies on its site so it can credit us for a booking. We do not pass your name or email to Partners. The Partner's own privacy policy applies on its site.
5. Who receives data
Hosting and database (Vultr); analytics (PostHog); error monitoring (Sentry); an automated answer provider (processes trip-tool text); Google (advertising); PayPal (payments, as above); email delivery provider (download links and replies); affiliate networks and Partners (click identifiers only). We may also disclose data where required by law or to protect our rights. We do not sell personal data.
6. International transfers
Some recipients are outside Jamaica, the EU/EEA and the UK. Where required, we rely on safeguards such as standard contractual clauses or the recipient's equivalent commitments.
7. How long we keep data
Trip-tool logs: 90 days, then deleted or anonymised. Click records: 25 months. Contact emails: 2 years. Purchase and refund records: as long as needed for tax and accounting law. Download links expire automatically and are revoked on refund.
8. Your rights
Jamaica (Data Protection Act, 2020), EU/EEA and UK (GDPR / UK GDPR): you may ask to access, correct, erase, restrict or port your data, object to processing (including direct marketing), and withdraw consent at any time without affecting earlier processing. You can complain to Jamaica's Office of the Information Commissioner, or your local supervisory authority (in the UK, the ICO).
California residents
California (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to access, delete and correct it; and not to be discriminated against for exercising these rights. We do not sell personal information. Where advertising cookies could count as "sharing" for cross-context behavioural advertising, they stay off unless you accept them, and you can opt out at any time through "Cookie settings"; we honour Global Privacy Control signals as an opt-out. In the last 12 months we collected the categories in section 2 (identifiers, commercial information, internet activity, approximate geolocation) for the purposes listed there.
To exercise any right, email info@aurum-transfers.com. We may need to verify your identity. We reply within 30 days (or sooner where the law requires).
9. Security
We use reasonable technical and organisational measures, including HTTPS, access controls and signed, expiring download links. No method of transmission is completely secure.
10. Children
The Site is not aimed at children under 18 and we do not knowingly collect their data.
11. Changes
We will date every new version on this page and, for significant changes, give notice on the Site.