Privacy Policy
Last updated: 14 August 2026
Template for professional review: This page is a practical starting template and is not legal advice. Professional legal review is recommended for the jurisdictions in which the website operates.
1. Who controls the information
The website is operated by Stella Ijeoma Ahaiwe, trading as StellyStar the Affiliate Coach. Privacy and data requests can be made through the WhatsApp contact published on this website.
2. Information collected
When you use the WhatsApp guidance form, the website may collect only the information needed to respond to your request:
- Your WhatsApp number in international E.164 format.
- Your first name, when you choose to provide it.
- Your selected experience level and learning goal, when provided.
- Your consent status, consent wording version, and consent timestamp.
- The landing-page URL, approved UTM campaign parameters, and referrer.
- A random request or session identifier used for security and duplicate protection.
- Technical security information such as a one-way hash derived from the request IP address. Raw IP addresses should not be retained in ordinary application logs.
The site does not intentionally collect sensitive browser fingerprints, passwords, payment-card details, or course payment information.
3. Why the information is used
- To respond to your request for affiliate-marketing course guidance.
- To recommend a suitable next step based on information you voluntarily provide.
- To maintain a record of your consent and honour opt-out requests.
- To protect the form from spam, repeated submissions, abuse, and security threats.
- To understand campaign attribution using non-sensitive UTM information.
4. Legal basis and consent
WhatsApp marketing and follow-up messages are sent only after you actively select the consent checkbox. The exact legal basis may vary by location and should be confirmed by a qualified professional. You may withdraw consent at any time by replying STOP or by using the verified contact information published on this page.
5. Lead storage and service providers
The production form first sends a validated request to a same-origin server-side endpoint. If secure lead storage is later enabled, the endpoint may forward the validated record to an approved server-side storage provider. The public browser is not given private storage credentials. This policy should be updated if an additional processor is enabled.
Do not connect the public browser directly to a private Google Sheets credential, database password, or secret webhook. The supplied project uses a server-side endpoint and environment variables.
6. Cookies and optional tracking
Necessary browser storage remembers your cookie preferences. Optional analytics or advertising technologies load only after the relevant consent is given and valid tracking identifiers are configured. The default project does not activate GA4, Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity, or similar tools until configured.
Names, phone numbers, and free-text form answers must never be sent to advertising pixels or analytics platforms.
7. Data retention
Lead information should be retained only for as long as reasonably necessary to respond to the request, maintain required consent records, prevent abuse, and meet applicable legal obligations. Data should be deleted when it is no longer needed for those purposes or when a valid deletion request applies.
8. Sharing and international transfers
Information is not sold or rented. It may be processed by carefully selected providers needed to host the website, store a lead, deliver messages, protect the service, or measure approved campaign performance. Any international transfers and safeguards must be documented after the production providers are selected.
9. Security
The supplied implementation includes origin checks, server-side validation, request-size limits, rate limiting, duplicate protection, safe logging, spreadsheet-formula protection, restrictive CORS, timeout handling, and environment-based secrets. No internet system can be guaranteed completely secure, so the site operator must maintain dependencies, hosting, access controls, backups, and incident procedures.
10. Your choices and rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Send a request to StellyStar on WhatsApp at +234 707 883 9388. Identity verification may be required before a request is completed.
11. Children
This service is not designed to collect personal information from children who cannot lawfully provide their own consent. Where parental or guardian consent is required by applicable law, do not submit the form without that consent.
12. Changes to this policy
Update the “Last updated” date when material changes are made. Where required, provide a clear notice and seek renewed consent.
13. Contact
WhatsApp: +234 707 883 9388
Website: https://stellystar.org/