Last updated: 15 July 2026
This page explains how the PassGMC Affiliate Programme, operated by Toval Holdings (ABN 16 155 716 770), handles information about affiliates and the visitors they refer. It sits alongside the main PassGMC Privacy Policy, which continues to apply to everything not covered here.
What we collect from affiliates
When you join the programme you sign in with Google, and we receive your name and email address. We then store your unique referral code, your dashboard statistics (visits, referrals, conversions, and earnings), the payout details you provide for receiving payments, and any correspondence you have with us about the programme.
What we collect about referred visits
When someone clicks your referral link, we set a referral cookie that lasts 15 days and record the visit. If that visitor later makes a purchase while your attribution is active, we record a conversion linked to your affiliate account so your commission can be calculated, confirmed, and paid.
Your dashboard shows this activity as counts and amounts only. Affiliates never see the personal details of referred customers: no names, no email addresses, no order contents. Referred customers themselves are covered by the main PassGMC Privacy Policy like every other customer.
How we use this information
We use affiliate data to run the programme: tracking referrals, calculating commissions, applying the 30-day confirmation period, detecting fraud and self-referrals, processing payouts once your balance reaches the threshold, and sending you programme emails such as payout notifications. We do not sell affiliate data, and we do not use it for advertising.
Sharing
Affiliate data lives on the same infrastructure as the rest of PassGMC and is shared only with the providers needed to operate the service, as listed in the main Privacy Policy: our database and hosting providers, our email provider for programme notifications, and our error monitoring (with personal details scrubbed). Payout details are used solely to pay you.
Cookies
The referral cookie exists to attribute sales fairly and lasts 15 days from the click, on a last-click basis. It contains a referral identifier, not personal information. Blocking or clearing it stops attribution but does not affect browsing.
Retention and deletion
We keep affiliate data while your affiliate account is active. You can delete your PassGMC account yourself from Account settings, which removes your affiliate profile and dashboard data along with the rest of your account. Records of commissions already paid are retained in anonymised form where tax and accounting rules require.
Your rights
You can view and update your payout details in your dashboard, correct your account details in Account settings, and delete your account at any time. For anything else, including a copy of the affiliate data we hold about you, contact us through the contact page and we will help promptly.
Changes and contact
If we make material changes to this page, we will update it here and revise the date above. Questions? Reach Toval Holdings (ABN 16 155 716 770) through our contact page.