Privacy Policy
Last updated: 29 March 2026
1. Introduction
PE Deals ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services.
2. Data Controller
PE Deals is the data controller responsible for your personal data. For data protection enquiries, please contact us via our contact page.
3. Information We Collect
Account information: When you register, we collect your email address, hashed password, and account preferences.
Billing information: Payment processing is handled by Stripe. We do not store full credit card numbers. We receive your subscription status, plan type, and billing identifiers from Stripe.
Usage data: We collect analytics data including pages visited, features used, and session duration through PostHog, Google Analytics 4, and Microsoft Clarity. This helps us improve the platform.
Deal submissions: If you submit a deal, we collect the information you provide in the submission form.
Communications: If you contact us, we retain the content of your message and your contact details.
4. How We Use Your Data
- To provide, maintain, and improve the Service
- To manage your account and subscription
- To send transactional emails (account confirmation, password resets, deal alerts you have configured)
- To analyse usage patterns and improve the user experience
- To enforce our Terms of Service and prevent misuse
- To comply with legal obligations
5. Legal Basis for Processing (GDPR)
We process your data on the following bases:
- Contract: Processing necessary to provide the Service you have signed up for
- Legitimate interest: Analytics, fraud prevention, and service improvement
- Consent: Marketing emails and optional cookies (you may withdraw consent at any time)
- Legal obligation: Tax records, regulatory compliance
6. Data Sharing
We do not sell your personal data. We share data with the following categories of service providers, under appropriate data processing agreements:
- Firebase (Google): Authentication and database hosting
- Stripe: Payment processing
- Cloudflare: Hosting and CDN
- Resend: Transactional email delivery
- PostHog, Google Analytics, Microsoft Clarity: Usage analytics
7. Cookies
We use cookies for authentication (session cookies), preferences, and analytics. Essential cookies are required for the Service to function. Analytics cookies can be declined. See our cookie preferences for more detail.
8. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g. billing records retained for 7 years for tax purposes).
9. Your Rights (GDPR)
Under the UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request that we limit processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interest
To exercise any of these rights, contact us via our contact page. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), hashed passwords, HMAC-signed session tokens, and access controls on our infrastructure.
11. International Transfers
Some of our service providers operate outside the UK. Where data is transferred internationally, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses, adequacy decisions).
12. Children
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or on-site notice. Continued use of the Service after changes constitutes acceptance.
14. Contact and Complaints
For privacy-related questions, contact us via our contact page.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.