Affiliate Privacy Notice

Last updated: 10 November 2026

Contour Laboratories Ltd (company number 10429539)
124–128 City Road, London EC1V 2NX, United Kingdom
Email: info@contourlaboratories.com
ICO registration: ZB094967

1. Introduction

Contour Laboratories Ltd (“Contour”, “we”, “us”) is the controller of personal information handled for its affiliate and prospective affiliate relationships. This notice explains how we collect, use, share, keep and protect that information, including photographs and videos sent before someone joins the Affiliate Programme.

2. Information we collect

We may collect your name, residential or business address, contact information, business details, social media handles and profile links, follower counts, registration and agreement records, electronic signatures, relevant correspondence, PayPal email, referral and commission information. We may also receive photographs, before-and-after images, videos, captions and testimonials through Instagram direct messages, email, registration or other communications. Some images may reveal surgery, scars, recovery or other health information, which may constitute special-category personal data.

3. How information is used and lawful bases

We use information to discuss prospective collaborations, register affiliates, manage programme communication, referral codes, sales and commission payments, maintain business and accounting records, protect programme security, and meet legal obligations. Depending on the activity, the UK GDPR Article 6 lawful basis is performance of a contract or steps requested before entering a contract, compliance with legal obligations, our legitimate interests in proportionate programme administration, or consent. Where content reveals special-category health data we additionally identify an appropriate Article 9 condition; for promotional processing relying on consent, we request explicit consent.

4. Photographs, videos and testimonials

Creators may send photographs or videos before registration, after registration, or publish them on their own social channels. We normally request permission for particular images or videos through an Instagram direct message or email when content is sent. We retain evidence of what was permitted and for which purposes. Public posting or private delivery of an image does not, by itself, authorise Contour to reuse it. The Affiliate Registration Form also offers a separate, optional and unticked express permission covering original Contour-related content supplied privately before or after joining or posted publicly, for future use on our own organic social media channels, owned website and non-paid marketing communications. Registration is possible without giving this permission. Where photos reveal surgery, scars or recovery, the consent expressly addresses publication of the health information revealed by the content. Agreement at registration cannot retrospectively authorise earlier uses. We may ask for confirmation about particular content to establish exactly which photographs are covered. Copyright remains with the creator, subject to others’ rights, and credit will be given where practicable. We seek separate permission for paid advertisements, third-party campaigns, print advertising and materially different purposes, and appropriate permissions where another identifiable person or rights holder is involved. Before-and-after photographs must not be misleadingly altered.

5. Withdrawing consent

You may withdraw consent at any time by emailing info@contourlaboratories.com, including identifying the relevant photographs or posts where possible. Withdrawal does not make earlier lawful processing unlawful. We will stop future consent-based use and assess and act on existing website or social media publications under applicable data-protection law. Some copies shared independently by third parties may be outside our direct control.

6. Service providers

Our main affiliate service providers include Jotform for registration, Shopify for store and referral or sales administration, and PayPal for affiliate payments. They may use authorised subprocessors. We may share relevant details with professional advisers, regulators or public authorities when lawful and necessary. We do not sell affiliate registration information.

7. International processing

Service providers and their subprocessors may access or process personal information outside the UK. Where UK law requires safeguards for restricted international transfers, we rely on relevant adequacy decisions or appropriate contractual safeguards, such as the UK international data transfer agreement or approved addendum, as applicable. Contact us for further information about safeguards.

8. Retention

We retain information only for as long as justified by its purpose and relevant law. Registration and contact information is held during the affiliate relationship and reviewed when it ends. Agreements and relevant contractual records may generally be kept for up to six years after termination where justified by legal claims or accounting needs. Financial and company tax records are generally retained for at least six years after the relevant accounting period, or longer if required by law or an ongoing enquiry. Images and videos are kept only while a valid purpose and lawful basis remain. We retain minimum necessary evidence of consent and its wording while needed to demonstrate lawful use or deal with requests or claims. We review, erase or anonymise records when no longer needed.

9. Security

We use appropriate organisational and technical measures to protect personal information and restrict access to people and service providers with a legitimate need to know.

10. Your rights

Subject to applicable UK GDPR conditions and exemptions, you may request access, correction, erasure, restriction or portability of personal data, object to certain processing, and withdraw consent. We will consider requests according to applicable law. Contact info@contourlaboratories.com.

11. Privacy information before registration

We may receive contact details and private photographs when discussing a potential collaboration before affiliate registration. We provide relevant information about intended use and request appropriate permission when photographs are supplied. If you do not join, we review whether there is a continuing need to retain the information.

12. Complaints and updates

Please contact us first if you have concerns. You may also complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk or 0303 123 1113. We may update this notice when our processes or legal requirements change and will make the current version available on our website.