Privacy Policy

Arturas Koroliovas
Operator of Buy If Works

45–47 Xeropotamou Street, House 51
Agia Triada, Paralimni, 5295
Cyprus

Email: arturas.koroliovas@icloud.com
Telephone: +357 999 37687

Last updated: 10 October 2026.

About this policy

This policy explains how Arturas Koroliovas, the controller of personal data processed through Buy If Works, handles that information. Contact the controller using the details above.

Messages you send us

If you email or telephone us, we receive the contact details and information you choose to provide. We use them to respond to your enquiry, investigate corrections and manage related correspondence. The usual legal basis is our legitimate interest in answering and managing enquiries; where an enquiry concerns steps requested before a contract, that processing may instead be necessary for those steps.

Providing information in an ordinary enquiry is voluntary, but we may be unable to answer without sufficient details. Please do not include unnecessary sensitive information.

We retain correspondence while it is needed to answer the enquiry, investigate a correction or resolve a related dispute. Relevant records may be retained longer where required by law or needed to establish, exercise or defend legal claims. The criteria are the purpose of the enquiry, whether it has been resolved, and any applicable legal obligations; there is no single fixed period for every message. Messages sent to our @icloud.com address are handled through Apple’s iCloud Mail service, which also processes mail under its own privacy terms.

Website requests and security

The website relies on hosting infrastructure to deliver pages. Request information may include IP address, requested page, browser information and timestamps. The purposes of necessary operational processing are page delivery, security and troubleshooting; the relevant basis is the operator’s legitimate interest in providing and protecting the website.

The site uses Spaceship Web Hosting Essential. Spaceship identifies itself as a processor of hosted website data under its Data Processing Addendum. Its hosting privacy information describes storage of website data and possible visitor IP logs. The hosting account’s primary server is in the United States. Server access logs can contain IP addresses, request paths, dates, browser information and referrers. The current cPanel configuration processes access logs every 24 hours, archives them in the hosting account, and has removal of the previous month’s archives at month end selected. This is distinct from provider-managed security logs, statistics reports and backup copies; the archive setting does not establish a universal retention period for those records. Website backups created by the operator are held in the same hosting account until replaced or removed. Spaceship may use authorised sub-processors under its DPA.

Optional local website statistics

If enabled, our local statistics module asks for your consent before counting page views, category clicks, searches, empty search results and retailer clicks. Its purpose is to understand interest in the website and improve navigation. Collection relies on your consent. We store daily aggregate counters in our WordPress database, using page/category identifiers, action names, broad browser categories and viewport groups. The module does not store visitor IDs, IP addresses, full user-agent strings, search terms, URL query strings or session recordings in the statistics table. It does not measure unique visitors or reconstruct individual journeys.

The browser retains your grant or refusal in local storage under biw_statistics_choice_v1 for up to 180 days. The module keeps aggregate counters for a rolling 90 days with daily scheduled cleanup. Use Statistics preferences at the bottom of any page to suspend collection and change your choice. It honours Global Privacy Control and Do Not Track by blocking collection. Refusing does not prevent use of the website. The module sends requests to this website, whose hosting infrastructure can process request information separately from the aggregate table; hosting arrangements and logs are described in the verified sections of this policy.

Other forms, subscriptions and embedded content

Google Analytics, Matomo and Microsoft Clarity are not enabled in the inspected SiteSEO settings. Local statistics is optional and only begins after you choose Accept statistics. The product video uses a local HTML video player. Social links lead to external sites. The inspected public homepage loads its scripts and images from this website, without an external video iframe or newsletter/contact form. Administrator pages use additional tools that are separate from ordinary public visits. This notice describes the current configuration and will be updated when integrations change.

Cookies and referral links

See the Cookie Policy for technologies actually used on this website. Buying links may take you to retailers or affiliate services operated independently of Buy If Works. Their privacy notices apply to their services.

Current source links are ordinary external links, not active affiliate links. The marketplace selector changes which links are shown in the page; it does not determine your location or save your selection to browser storage. A link click can disclose your IP address, browser information and, depending on your browser’s referrer policy, the referring website to the destination. No affiliate-account approval or commission payment is represented by the presence of a retailer link.

Who receives information

Information may be handled by service providers acting on our instructions where needed for the purposes described above, and by authorities where disclosure is required by law.

Recipients include Spaceship, Inc. and its authorised hosting sub-processors, Apple when you correspond with our iCloud Mail address, and authorised people maintaining this website where access is necessary. Retailers and social platforms receive information when you choose to visit them and generally act under their own privacy notices. We may disclose relevant information to professional advisers or authorities where necessary for a legal obligation or claim.

Transfers outside the EEA

Spaceship is a US provider, and its published Data Processing Addendum includes Standard Contractual Clauses for relevant transfers outside the EEA and provisions for UK transfers. The primary hosting server is in the United States. Spaceship incorporates its DPA into the terms for hosted services, including applicable transfer clauses. Email processing by Apple can also involve international transfers; Apple describes its transfer arrangements in its Privacy Policy. Contact us at the email above to request information about the safeguards relevant to your data or a copy where available, subject to necessary redactions.

Your rights

Subject to the conditions in applicable law, you may request access to your personal data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interests, including on grounds relating to your situation. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Send a request to arturas.koroliovas@icloud.com. We may need proportionate information to verify your identity. We normally respond within one month, subject to lawful extensions, and explain any relevant limitation.

You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

Automated decisions

The local statistics module produces aggregate counts and does not create individual visitor profiles. This website does not use these counts to make decisions about an individual with legal or similarly significant effects.

Changes

We update this policy when processing arrangements change. The date above identifies the latest version.

Readers worldwide

You may contact us about privacy regardless of your country. Rights and the competent authority depend on applicable law. We do not claim that a single notice establishes compliance with every jurisdiction. We will assess requests under the law that applies to the processing.

Children

This editorial site is intended for a general adult readership. Do not send children’s personal data in an enquiry. If you believe we hold such information, contact us so we can assess appropriate action.

Back to top ↑