This notice explains how Toolbelt Websites uses personal information about Partner applicants and active Partners, and how referral attribution information is handled.
Version: 2026-10-08 · Last updated: 8 October 2026
1. Who we are
Toolbelt Websites is a trading name of Rikki Webster Ltd, registered in England and Wales under company number 13001015. Registered office: Greenacre House, The Street, Hinderclay, Diss, England, IP22 1HX.
For the Partner Programme personal information described in this notice, Rikki Webster Ltd is the Data Controller.
2. Scope of this notice
This notice applies when you apply to become a Toolbelt Partner, complete Partner onboarding, use the Partner portal, refer businesses, receive rewards or payouts, or communicate with us about the programme.
Our wider Privacy Policy also applies to use of the Toolbelt Websites website. Referral cookies and similar technologies are described in our Cookie Policy.
3. Information we collect
We may collect your name, email address, mobile or WhatsApp number, business name, website, location, promotion methods, information about your intended audience, postal address and Partner account information.
During onboarding and account management we may also hold password security records, Terms acceptance records, referral code and link information, referral and customer status records, reward history, payout history, bank account details needed to make UK bank transfers, and communications with the Toolbelt Websites team.
We may keep limited technical and security records such as timestamps, login activity, browser or device information and security or abuse prevention records where reasonably necessary to protect the programme and our systems.
4. Where information comes from
Most Partner information is provided directly by you. Referral information can also arise when a visitor follows your Partner link, when a business submits an eligible enquiry, when a prospect or customer is matched in the Toolbelt Hub, or when payment and customer status information is recorded in our systems.
If you manually introduce a business or provide contact information about another person, you are responsible for ensuring that you are entitled to provide that information and that your outreach or introduction complies with applicable privacy and marketing rules.
5. Why we use Partner information
We use Partner information to review applications, create and secure accounts, provide referral links, attribute eligible referrals, prevent duplicate or abusive claims, track reward qualification, administer payout runs, make bank transfers, send service and payment notifications, answer support questions and maintain accurate business, tax, accounting and audit records.
Depending on the activity, our lawful bases may include taking steps at your request before entering an agreement, performing the Partner agreement, complying with legal obligations and our legitimate interests in operating, securing and administering the programme. We use consent where consent is specifically required, including for non essential browser tracking.
6. Referral attribution and visitor information
When someone follows a valid Partner link, we may record a limited server side click event such as the Partner identifier, referral code, time and landing route. A persistent first party referral cookie is only stored where the visitor has granted the relevant marketing or tracking consent.
If the visitor has not granted that consent, we do not use hidden persistent identifiers or device fingerprinting to recreate a 60 day attribution window. The referral code can still be carried within the same visit and, once a valid referral is attached to an identifiable prospect, the Partner relationship is stored server side in our CRM and referral records.
The Partner portal shows only the information reasonably needed to understand referral and reward status. It is not intended to expose a customer's private payment information or unnecessary contact details to Partners.
7. Who we share information with
We use service providers where reasonably necessary to operate the website, Hub, email, security and payment administration. These may include hosting and infrastructure providers, transactional email providers, payment providers used for customer billing, banks or payment services used to make Partner transfers, and professional advisers where required.
We do not sell Partner personal information to advertisers or data brokers.
8. Payout and bank details
UK bank details provided for Partner rewards are used to make approved payouts and administer the payment record. Full account details are protected and are not intended to appear in routine Partner or admin screens, emails or normal exports. Routine account views use masked information where practical.
Changing payout details may place a future payment on hold while the new details are reviewed. Partners should keep their payout information accurate and should contact us promptly if they believe an unauthorised change has been made.
9. How long we keep information
We keep Partner information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate administration, security, fraud prevention, accounting, tax, legal or dispute requirements.
Application information that does not lead to an active Partner account may be reviewed for deletion after a reasonable period. Active Partner, referral, reward and payout records may need to be retained after participation ends where they are relevant to financial records, fraud prevention, legal claims or programme audit history.
10. International transfers
Some service providers and their approved subprocessors may process personal information outside the United Kingdom. Where UK international transfer rules apply, we use or require an appropriate lawful transfer mechanism.
11. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to ask for access to personal information, correction, deletion, restriction, objection, portability and withdrawal of consent where processing is based on consent. These rights are not absolute in every situation.
To exercise a right in relation to the Partner Programme, contact support@toolbeltwebsites.co.uk.
12. Security
We use reasonable technical and organisational measures appropriate to the information and risks involved, including access controls, protected credentials, secure Partner sessions and additional protection for payout information. No online system can guarantee absolute security.
13. Changes to this notice
We may update this notice when the Partner Programme, technology, service providers or legal requirements change. The current version will be published with its revision date and material changes will be communicated where appropriate.
14. Contact and complaints
Questions about this notice can be sent to support@toolbeltwebsites.co.uk. You also have the right to complain to the UK Information Commissioner's Office where it has jurisdiction.