Privacy Policy

Effective date: June 26, 2026 Last updated: June 26, 2026

This Privacy Policy explains how newl.ink ("we", "us", or "our") collects, uses, shares, and protects personal information in connection with the website located at newl.ink and any subdomains, profile pages, and related services we operate (together, the "Service").

newl.ink is a private "link-in-bio" service. We host simple profile pages that display a person's or brand's information and a set of outbound links to other websites and destinations. When you click a link on a newl.ink page, you leave our Service and are taken to a third-party website that we do not operate or control.

Please read this Policy carefully. If you do not agree with it, please do not use the Service. If you have any questions, contact us at support@newl.ink.

1. Who we are and our role

newl.ink operates the Service and is the "data controller" of the personal information described in this Policy for the purposes of the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and similar laws.

There are two broad groups of people whose information we may handle:

• Visitors: anyone who views a newl.ink profile page.
• Editors / account holders: people who create, manage, or are authorized to edit a profile page hosted on the Service.

Where a profile page is operated on behalf of a brand or third party, that brand is generally responsible for the content it publishes on its page. We act as a hosting and publishing provider for that content.

2. Information we collect

We aim to collect as little personal information as is reasonably necessary to operate the Service.

2.1 Information collected automatically (all visitors)

When you visit the Service, certain information is collected automatically by our hosting infrastructure and analytics tools, including:

• IP address (which may be truncated, shortened, or anonymized by our analytics provider);
• Device and browser information: browser type and version, operating system, device type, screen size, and language settings;
• Usage and access data: pages or profiles viewed, links clicked, referring/exit URLs, date and time of access, approximate location derived from IP (e.g., country/region), and similar diagnostic data;
• Server and access logs: generated by our hosting and content-delivery providers for security, abuse-prevention, performance, and reliability purposes;
• Cookies and similar technologies: see Section 6 and our separate Cookie / Analytics Notice.

2.2 Information collected from analytics (Google Analytics 4)

We use Google Analytics 4 ("GA4") to understand how visitors use the Service in aggregate. GA4 uses cookies and similar identifiers to collect the kinds of usage, device, and approximate-location data described above. Where required by law, GA4 and any associated cookies are only activated after you have given consent through our cookie/consent mechanism. We have configured GA4 to limit the data collected (for example, by enabling IP anonymization/truncation where available).

2.3 Information you provide (editors / account holders)

If you are an editor or account holder, we may collect:

• Account/authentication data: such as your name or display name, email address, login credentials or authentication identifiers, and (where applicable) records managed through our backend provider;
• Profile content: the text, images, links, branding, and other content you choose to publish on a profile page;
• Communications: the contents of any messages you send us, and our responses.

2.4 Information we do not intentionally collect

We do not intentionally collect special-category / sensitive personal data (such as health, biometric, or precise geolocation data) through ordinary use of the Service, and we ask that you not submit such data to us. We do not knowingly collect personal information from children (see Section 10).

3. How we use information

We use personal information to:

• Provide and operate the Service: serve and render profile pages, deliver outbound links, and maintain the hosting infrastructure;
• Maintain security and prevent abuse: detect, investigate, and prevent fraud, spam, scraping, attacks, and other harmful or unlawful activity;
• Measure and improve the Service: understand aggregate usage trends, diagnose problems, and improve performance, reliability, and content;
• Manage editor accounts: authenticate editors, manage permissions, and let editors create and update profile content;
• Communicate with you: respond to inquiries, support requests, and legal or privacy requests;
• Comply with law: meet our legal, regulatory, and accountability obligations, and enforce our Terms of Service.

We do not sell your personal information for money, and we do not use it for cross-context behavioral advertising.

4. Legal bases for processing (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you have the right to object (see Section 8).

5. Third-party processors and service providers

We share personal information only as needed to operate the Service. We use the following categories of third-party processors, who act on our instructions under appropriate data-processing terms:

These providers may process and store data in countries outside your own (see Section 9). We do not sell personal information.

We may also disclose information to professional advisers, to authorities where required by law, and in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this Policy or notify you of any material change).

6. Cookies and similar technologies

The Service uses cookies and similar technologies:

• Strictly necessary / essential: required for the Service to function securely. These do not require consent.
• Analytics: set by Google Analytics 4 to help us understand aggregate usage. These are non-essential and, where required by law, are only set after you consent. GA4 commonly uses cookies such as "_ga" and "ga(container-id)", which can persist for up to two (2) years.

You can manage or withdraw consent at any time through our consent mechanism (where shown) and through your browser settings. For full details, see our separate Cookie / Analytics Notice.

7. Data retention

We retain personal information only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law:

• Server / access logs: typically retained for a short period for security and diagnostics, then deleted or aggregated.
• Analytics data: retained in accordance with our Google Analytics 4 data-retention settings (commonly 2–14 months), after which it is automatically deleted or aggregated.
• Editor / account data and profile content: retained while the account or page is active, and for a reasonable period afterward to meet legal and security obligations, then deleted or anonymized.
• Communications: retained for as long as needed to handle your request and for a reasonable period afterward.

8. Your privacy rights

Depending on where you live, you may have some or all of the rights below. We will respond within the timeframes required by applicable law.

8.1 Rights under the GDPR / UK GDPR (EEA, UK, and similar)

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion in certain circumstances.
• Restriction: request that we limit processing in certain circumstances.
• Portability: receive certain data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests, and to direct marketing.
• Withdraw consent: where processing is based on consent.
• Lodge a complaint: with your local data protection authority.

8.2 Rights under the CCPA / CPRA (California)

California residents have the right to know/access, delete, and correct personal information; to opt out of "sale" or "sharing" (we do not sell or share for cross-context behavioral advertising, and we honor the Global Privacy Control (GPC) signal); to limit use of sensitive personal information; and to non-discrimination for exercising these rights.

8.3 How to exercise your rights

To exercise any of these rights, contact us at support@newl.ink with enough detail for us to verify your identity and locate your information. We may need to verify your request before acting and may decline requests as permitted by law.

9. International data transfers

We and our processors may store and process personal information in countries other than your own, including the United States. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards required by law, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum). Contact us at support@newl.ink for more information.

10. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children under the age of 16 (or the higher age of digital consent in your jurisdiction). If you believe a child has provided us with personal information, please contact us at support@newl.ink and we will take reasonable steps to delete it.

11. Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration, including reliance on the security practices of reputable infrastructure providers (Supabase, Vercel, and Google). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Third-party links and content

The Service exists to display outbound links. When you click a link on a newl.ink page, you leave our Service and are subject to the privacy policies and terms of the destination site, which we do not control. This Policy does not apply to third-party websites, services, or products. We are not responsible for the content, accuracy, privacy practices, or products of any linked site.

Some profile pages may relate to brands in the peptide, supplement, or wellness space. Any product, health, or wellness content on a linked site is provided by the third party, is not medical advice, and is not endorsed or verified by us. See our Terms of Service for additional disclaimers.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate or required by law, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

newl.ink · Email: support@newl.ink