Privacy Policy

This Privacy Policy explains how DealsFirst("we", "us", "our") collects, uses, shares, retains and protects your personal data. It applies to the DealsFirst website at dealsfirst.co.ukand to the DealsFirst mobile apps for Android and iOS (together, the "Service"). DealsFirst is a UK deals-discovery service and is the data controller for the data described here. If you have any questions, contact us at hello@dealsfirst.co.uk.

You can use DealsFirst without an account

You can browse deals, sales, shops and articles without signing up or giving us any personal information. We only collect the account data below if you choose to create a free account. We never ask for, collect or store payment or card details, purchases happen on the retailer's own website, not on DealsFirst.

Data we collect

• Account information. If you sign up, we store your email address and a username, used to create and manage your account and to sign you in.
• App activity you create. The shops and categories you follow, the searches you save, your favourites, alert preferences and any deals or comments you submit. This powers your personalised feed and alerts.
• Device & usage data. Our servers keep standard access logs (such as IP address, device/browser type and pages requested) for security and to operate the Service. With your consent, we use aggregate analytics to understand which pages are useful.
• Activity we use for personalisation. When you follow an outbound deal, sale or shop link, or run a search, we record that event (for example the product, shop and discount involved) so we can rank deals we think you want higher and improve your feed and alerts. We do this on the basis of our legitimate interest in showing you relevant deals, and you can object at any time using the Personalisationswitch in Account → Profile & settings, which also unlinks your past activity. On the website, this logging happens on our servers and stores nothing on your device: if you are signed in the event is linked to your account, and if you are signed out (or have switched Personalisation off) it is recorded with no account or device identifier at all. In the mobile apps, usage and tap events are recorded under a random identifier created for your app installation and stored on your device; that identifier is not linked to your name, and deleting the app or your account clears it.
• Push notification token. If you enable deal alerts in the app, we store a device push token so we can send the notifications you asked for. You can turn this off at any time in your device settings.
• Cookies & similar technologies. Essential cookies keep the site working and remember your consent choice. With your consent, we set analytics and affiliate-attribution cookies (see below). You control non-essential cookies through the cookie banner.

We do not collect your precise location, contacts, photos, files, messages, health data, or an advertising identifier, and we do not use your data for third-party advertising or to track you across other apps and websites.

How we use your data

• To create and manage your account and sign you in.
• To build your personalised feed and send the deal alerts you opt into.
• To rank and personalise the deals we show you, using your follows, saved deals, and (unless you switch Personalisation off) your deal clicks and searches.
• To operate, secure and troubleshoot the Service (access logs).
• With your consent, to measure aggregate usage so we can improve the Service.
• With your consent, to attribute outbound retailer visits so we may earn a commission (see below).

Who we share data with

We do not sell your personal data. We share data only with the service providers that help us run DealsFirst, and only as needed:

• Supabase, hosts our database and handles account authentication (stores your email, saved searches and follows).
• Vercel, hosts the DealsFirst website and API.
• Resend, delivers our weekly deals digest if you sign up for it. Digest signup is double opt-in (we email you once to confirm; no confirmation, no emails), your address is used for the digest and nothing else, and every issue includes a one-click unsubscribe that takes effect immediately.
• Google Analytics, measures aggregate site usage. Loaded only if you accept analytics cookies.
• Expo, delivers push notifications to your device (processes the push token) if you enable alerts.
• Affiliate networks, when you follow an outbound deal link to a retailer, and you have consented, we redirect you through a tracking link (for example dealsfirst.co.uk/go/…) so the retailer's affiliate network can attribute the visit and we may earn a commission at no extra cost to you. We log the click to operate and secure this feature. These networks include Amazon Associates, Awin and eBay Partner Network. You can decline affiliate tagging in the cookie banner. Whether or not a deal earns us commission never affects how it is ranked, described or shown to you.

We may also disclose data if required by law, or to protect the rights, safety and security of DealsFirst and our users.

International transfers

Some of our service providers (including Supabase, Vercel and Google) may store or process your data on servers outside the United Kingdom. Where data is transferred outside the UK, we rely on appropriate safeguards recognised under UK GDPR, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, so that your data receives an equivalent level of protection.

Security

All data is encrypted in transit using HTTPS. Access to account data is protected by authentication and database access controls. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Data retention & deletion

We keep your account data for as long as your account is active. You can delete your account and all associated personal data at any time:

• In the app: Account → Delete account.
• On the web: dealsfirst.co.uk/account/delete.
• Or email us at hello@dealsfirst.co.uk and we'll delete it for you.

Deletion removes your account, email, saved searches, follows and other personal data, including any activity linked to your account for personalisation. The DealsFirst apps share one user account, so deletion applies across the DealsFirst and FindSales apps. Standard access logs (which may include an IP address) are retained for up to 90 days for security and fraud prevention, then automatically deleted. Personalisation activity events are retained for at most 180 days, then automatically deleted.

Your rights

Under UK GDPR you have the right to access, correct, delete or export your personal data, to withdraw consent, and to object to or restrict certain processing. To exercise any of these, email hello@dealsfirst.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Children

DealsFirst is intended for adults and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after an update means you accept the revised policy.

Contact

Questions about this policy or your data: hello@dealsfirst.co.uk.