Privacy policy

Who we are

TomaCorp is an independent software review publication operating at tomacorp.com. The data controller for the purposes of this policy is [ENTER publisher legal name], at [ENTER registered address]. For any privacy question or request, contact [ENTER privacy email].

What we collect

Information you give us

If you email us, we receive your email address and whatever you choose to write. We use it to reply, and we keep correspondence for [ENTER retention period] before deleting it. We do not add email correspondents to a mailing list.

Information collected automatically

Our web server records standard technical log data for each request, including your IP address, browser type and version, operating system, the page requested, the referring page and the time of the request. This is ordinary server operation, used for security, abuse prevention and diagnosing faults. [ENTER log retention period, for example 30 days].

Cookies set by this site

This site runs on WordPress with a caching layer. WordPress sets cookies only for people who log in to administer the site, and the caching layer may set a technical cookie used to serve the correct cached version of a page. Neither is used to profile visitors or to advertise to you.

Confirm this list If you add analytics, a consent banner, embedded video, a comment form, social embeds or advertising tags, each sets its own cookies and must be described here and brought under a lawful basis, which for non essential cookies normally means prior consent.

Affiliate links and third party tracking

This is the part most relevant to a review site, so we will be specific. Some links on this site are affiliate links, described in full in our affiliate disclosure. When you click one, you leave this site and arrive at the vendor’s own website, and that vendor typically sets a cookie in your browser to attribute any later purchase to us.

That cookie is set by the vendor or their affiliate network, not by us, under their privacy policy and not this one. We do not receive your name, email address, payment details or any other personal data about you from these programmes. What we receive is aggregate commission reporting, such as the number of referrals and sales, with no information identifying you individually.

If you prefer to avoid this, visit any vendor by typing their address into your browser instead of following our link. Our content remains fully available either way.

What we do not do

• We do not sell or rent personal data.
• We do not place personal or sensitive data in URLs or query strings.
• We do not build advertising profiles of visitors or run retargeting from this site.
• We do not knowingly collect data from children under [ENTER age per your jurisdiction].

Lawful basis

Where the GDPR applies, we rely on legitimate interests for server logs and security, which is the interest in operating a secure and functioning website; on legitimate interests or the performance of correspondence for replying to your emails; and on consent for any non essential cookie, which we would collect before setting it. [ENTER confirmation once your final cookie set is decided].

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict processing, to withdraw consent where we relied on it, and to lodge a complaint with your data protection authority. Because we hold very little data about ordinary visitors, in practice the main thing we can act on is email correspondence.

To exercise any right, email [ENTER privacy email]. We will respond within one month, and we may need to ask for information to confirm who you are. In the UK the supervisory authority is the Information Commissioner’s Office; in the EU it is the authority for your country. [ENTER your own supervisory authority if different].

Where data is processed

This site is hosted by [ENTER hosting provider], with servers in [ENTER region]. Any transfer of personal data outside your region relies on [ENTER safeguard, for example the UK International Data Transfer Addendum or EU Standard Contractual Clauses]. Confirm this with your host before publishing.

Changes to this policy

We will update this page when our data practices change and revise the date at the top. Material changes affecting how we use personal data will be noted on the page rather than applied silently.

About us  ·  Contact  ·  Terms of use  ·  Affiliate disclosure  ·  Editorial policy