Who we are
deals.community (“we”, “us”, “our”) is operated by Analogue Media Limited, a company registered in England & Wales (company number 15991972), with its registered office at 86-90 Paul Street, London, England, EC2A 4NE. We are the “data controller” for the personal data described in this policy, which means we decide how and why it is used.
For anything to do with privacy or your data, email policies@deals.community, or write to us at Analogue Media, Trinity Church, 14A Queen Square, Bath, BA1 2HN.
The data we collect
We only collect what the service genuinely needs:
- Account: your email address (handled by our authentication provider) and, optionally, a username, display name and short bio you choose. You can sign in with Apple, Google or a one-time email link, so we never see or store a password.
- Things you do: the deals you hi-five, save, comment on, follow and report, and any deals you submit. This is the community activity that makes the site work.
- Notifications & alerts: your deal-alert criteria and, if you opt in, a web-push subscription so we can notify your device.
- Messages you send us: if you email us or submit a form, we keep that correspondence so we can help and keep a record.
- Analytics & attribution(only with your consent): anonymous, cookie-free session stats (pages viewed, the site or campaign that referred you, a coarse country from our edge network, and whether you’re on mobile or desktop). We do not store your IP address.
- Outbound clicks: when you click through to a retailer we record that a click happened (with a coarse device/country) so we can keep links working and understand which deals are useful.
- Consent records: a timestamped record of your cookie choices, which the law requires us to keep.
Why we use it, and our lawful basis
Under UK GDPR we must have a lawful basis for everything we do with your data. Ours are:
- To run the service (sign-in, your profile, posting and ranking deals, keeping you signed in). Lawful basis: performance of a contract with you.
- To keep the site safe and working (moderation, spam, fraud and abuse prevention, fixing broken links, basic operational logging). Lawful basis: legitimate interests in running a safe, reliable community.
- Analytics, attribution and marketing emails or push(understanding what’s useful and telling you about relevant deals). Lawful basis: your consent, which you can withdraw at any time. Every marketing email has a one-click unsubscribe, and you can turn alerts on or off in your account.
- To meet our legal obligations (for example keeping consent records, or responding to a valid legal request). Lawful basis: legal obligation.
Cookies and tracking
Essential cookies (sign-in, security and remembering your privacy choice) are always on. Anything non-essential (analytics and attribution) only runs once you opt in, and you can change your mind anytime via our cookie policyor the “Cookie settings” link in the footer.
Who we share it with
We don’t sell your data, and we never share it for someone else’s advertising. We use a small set of trusted providers (“processors”) to run the service, each bound by a contract to protect your data and use it only on our instructions:
| Who | What they do for us |
|---|---|
| Our database & authentication provider | Stores your account and community data and keeps you signed in (hosted in the UK/EU) |
| Our hosting, security & delivery provider | Serves the site quickly and safely, and provides a coarse country at the edge |
| Our email provider | Sends transactional and opted-in email (when enabled) |
| Affiliate networks (including Amazon and Awin) | Credit us a commission when you click through to a retailer |
| Operational service providers | Help us run, support and keep the platform safe, under contract and only on our instructions |
We may also disclose data where the law requires it, or to establish, exercise or defend legal claims. If we ever sell or transfer the business, your data may transfer with it, and this policy would continue to apply.
Where your data is held
We keep your data in the UK and EU wherever we can. Some of our providers operate outside the UK, so where data is transferred internationally we rely on appropriate safeguards, such as the UK International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum), or a country the UK has found to provide adequate protection. You can ask us for more detail at policies@deals.community.
How long we keep it
- Account & community data: for as long as your account is open. Delete your account and it is removed (see below).
- Analytics & visit logs: aggregated and kept for around 12 months, then pruned.
- Correspondence: kept while it’s useful for support and our records, then deleted.
- Consent records: kept as evidence of your choices for as long as we’re required to.
Your rights
Under UK GDPR you have the right, free of charge, to:
- Access and port your data: download everything we hold about you as a file from Privacy & your data.
- Erase your account: delete it yourself, anytime, from the same page. Your published contributions stay up but are no longer linked to you.
- Rectify: correct your details by editing your account.
- Restrict or object to certain processing, and withdraw consent (for example turn off analytics or marketing) anytime via Cookie settings.
Automated decisions and profiling
We don’t make decisions that have a legal or similarly significant effect on you by automated means alone, and we don’t profile you for advertising. We keep the community safe with a mix of standard safeguards and human review, and a person looks at anything consequential. If a moderation decision affects you and you think it’s wrong, you can ask us to take another look.
How we protect it
Data is encrypted in transit, access is locked down with row-level security so members can only reach their own data, and privileged keys never touch your browser. We keep access to a minimum and review our setup regularly. No system is perfect, but we take this seriously, and if a breach ever put your rights at risk we’d report it as the law requires.
Children
deals.community is not intended for children. You must be at least 16 to create an account. If you believe a child has given us their data, email policies@deals.communityand we’ll remove it.
Complaints
If you’re unhappy with how we’ve handled your data, we’d genuinely appreciate the chance to put it right first, so please email policies@deals.community. You also have the right to complain to the UK’s data regulator, the Information Commissioner’s Office: ico.org.uk, helpline 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this policy
We’ll update this policy as the service evolves and change the date above. For significant changes we’ll make it obvious, and ask for your consent again where the law requires it.