Privacy Policy

This policy explains what Filone Inc.(“we”), operator of A Time To Shop at atimetoshop.com, collects when you use this site, why we collect it, who processes it on our behalf, and the choices you have. It applies toatimetoshop.com and to the emails we send.

The short version

• We do not sell your personal information for money.
• We do not ask you to create an account, and we never see or store your payment card details.
• Two things generate most of the data we hold: subscribing to our email list, and clicking an affiliate link.
• Every marketing email has a working unsubscribe link, and unsubscribing stops the emails.

What we collect

When you subscribe to our email list

We store, at the moment you submit the form:

• your email address;
• the exact consent wording shown on screen, together with your IP address, your browser user agent string, and the timestamp. This is our record that you agreed, and it is the reason we keep the wording alongside the address rather than just the address;
• the page you subscribed from;
• any campaign parameters in the URL (utm_source, utm_medium,utm_campaign), and the click identifier if you arrived through one of our ads.

We do not require a name and the form does not ask for one. We do not buy email addresses or add anyone to the list who did not submit the form themselves.

When you click an affiliate or product link

Outbound product links pass through a redirect on our own domain so we can tell which recommendations are useful and get credited for referrals. At that moment we record:

• a randomly generated click identifier;
• which offer and, where applicable, which advertising campaign the click belongs to;
• campaign parameters in the URL, including the Microsoft Advertising click identifier (msclkid) when you arrive from a Microsoft Advertising ad;
• your IP address, browser user agent string, the referring page, the country and region derived from your IP address, and a coarse device type;
• a score used to filter automated traffic, and the destination the click was sent to.

The click identifier is added to the destination URL so the merchant or affiliate network can report a referral back to us. We do not set a tracking cookie of our own to do this.

When a referral results in a purchase

Affiliate networks report completed referrals back to us. Those reports contain the network's own order reference, the commission amount, and the click identifier where it was preserved. They do not contain your payment details, and we do not receive your name, billing address or card information from them.

When a referral is confirmed we send a record of it from our own servers to our analytics account, and, where the visit came from one of our ads, to the ad platform. What we send is the commission value, the currency, the time, and the advertising click identifier from the original visit. This is how we work out which ads pay for themselves. We do not send your email address, your name or anything you typed, and there is nothing in it that identifies you to those platforms beyond the click identifier they issued themselves.

Automatically, to run and protect the site

• Standard server and network logs held by our hosting provider: IP address, request time, URL, user agent, and response status. These are used for security, abuse prevention and diagnosing faults.
• A challenge on our signup forms, provided by Cloudflare Turnstile, which checks that the submission is not automated.
• Traffic measurement through Google Analytics 4, Google Tag Manager, Microsoft Clarity, loaded by a tag manager container.
• Session recording. Microsoft Clarity records a playback of your visit: pointer movement, clicks, scrolling and the pages you moved through. We use it to find layout and usability problems. It is configured to mask text you type, so form fields including your email address should not appear in a recording. How to switch it off is in our cookie policy.

Sensitive information we do not collect

We do not collect government identifiers, precise geolocation, biometric data, health information, racial or ethnic origin, religious beliefs, union membership, sexual orientation, or the contents of your messages. We do not knowingly collect anything in the categories that California law treats as sensitive personal information.

Cookies and similar technologies

What we store on your device, and how to control it, is set out in our cookie policy.

Why we use it

• To send you the emails you asked for, and the occasional transactional message such as an unsubscribe confirmation.
• To prove, if asked, that a subscriber consented and when.
• To attribute referrals so we are paid for them, and to measure which content and which ads are worth continuing.
• To detect automated and fraudulent clicks.
• To keep the site secure and working, and to comply with our legal and tax obligations.

We do not use your data to make automated decisions about you, and we do not build advertising profiles about individuals.

Who else processes it

We use the following service providers. Each processes data on our instructions for the purpose listed, and each publishes its own privacy terms:

• Cloudflare: hosts and serves this site, filters automated traffic, provides the signup challenge, and stores our subscriber and click records. Privacy terms.
• Resend: delivers the emails you subscribe to. Privacy terms.
• Microsoft Advertising: serves our ads and reports which ad a visit came from. Privacy terms.
• Impact: the affiliate network that credits and reports our referrals. Privacy terms.
• PartnerStack: a second affiliate network that credits and reports our referrals. Privacy terms.
• Google (Analytics and Tag Manager): measures site traffic and receives a server-side record of confirmed referrals. Privacy terms.
• Microsoft Clarity: records a playback of your visit so we can find usability problems. Privacy terms.

When you follow an affiliate link you leave our site. From that point the merchant or network you land on is a separate controller of your data under its own policy, and we have no control over what it collects. Read their policies if that matters to you.

Do Not Sell or Share My Personal Information

We do not sell personal information for money. However, affiliate click tracking passes an identifier and technical details about your visit to advertising and affiliate partners, and California law defines “sharing” broadly enough that this activity can fall within it. We would rather tell you that plainly than rely on a narrow reading.

To opt out of that sharing:

• use the privacy preferences control on this site, reachable from the link in the footer, and switch off advertising and analytics categories;
• email filone@atimetoshop.com with the subject “Do Not Sell or Share”, and we will apply it to the records we hold;
• avoid using our outbound product links. Nothing on this site requires you to click one, and the content is the same either way.

We do not currently detect the Global Privacy Control browser signal automatically. We are telling you that rather than implying coverage we do not have; use one of the routes above.

Your California privacy rights

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the right to:

• know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to;
• receive a portable copy of it;
• have it corrected if it is inaccurate;
• have it deleted, subject to the records we are required to keep;
• opt out of the sale or sharing of it, as described above;
• limit the use of sensitive personal information, which in our case is moot because we do not collect any;
• not be discriminated against for exercising any of these rights. We do not offer financial incentives for your data, and our content is not priced.

To exercise any of them, email filone@atimetoshop.com from the address you want us to act on, or write to us at the postal address below. We will acknowledge within 10 business days and respond within 45 days, extending once by a further 45 days if we tell you why. We may need to verify that the request is really yours, which for an email-list record normally means confirming control of the email address. An authorised agent may act for you if you give them written permission and we can verify it.

Other state privacy rights

Several other states now give residents comparable rights to access, correct, delete and opt out. We apply the process above to every request we receive, whichever state you are in, because running one honest process is simpler than running several.

Email, and how to stop it

Every marketing email we send identifies us, states why you are receiving it, carries a working unsubscribe link, and includes our postal address, as the CAN-SPAM Act requires. Unsubscribing takes effect on our systems immediately and ends the sequence you were in, not just the next message. You can also email filone@atimetoshop.com and ask to be removed. We do not charge for this and we do not require you to give a reason.

Children

This site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13, and our email form is not aimed at them. If you believe a child has given us information, email filone@atimetoshop.com and we will delete it.

How long we keep it

We keep subscriber records, including the consent record, for 5 years after you unsubscribe or your last interaction with us, whichever is later. The reason for keeping them after you leave is that the consent record is our evidence that the subscription was lawful, and a suppression record is what stops us from mailing you again by accident. Click and referral records are kept for 5 years for commission reconciliation, fraud investigation and tax purposes. After that they are deleted or aggregated so they no longer identify anyone.

Security

The site is served over HTTPS. Subscriber and click data is held in our hosting provider's managed database, reachable only through our own authenticated interfaces. Access is limited to the people who operate the site. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal information we will notify you and the Florida Department of Legal Affairs as Florida Statutes section 501.171 requires.

Where your data is processed

We operate from the United States and our providers process data in the United States. If you use this site from outside the United States, your information is transferred there, where privacy law differs from your own.

Changes

If we change this policy we will update the “last updated” date at the top of this page. If a change materially affects how we use data you have already given us, we will say so in an email to subscribers rather than relying on you to notice.

Governing law and contact

This policy is governed by the laws of the State of Florida, without regard to its conflict-of-laws rules. Questions, requests and complaints go to filone@atimetoshop.com, or to the postal address above.