GDPR Notice

Last updated: May 6, 2026.

This GDPR Notice applies to individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland when personal data is processed by CipiDeals.

1) Data controller

CipiDeals acts as the data controller for personal data processed through our Services, except where a separate controller is identified.

2) Categories of personal data

  • Identity and account data (username, email, profile details).
  • Content and engagement data (deals, comments, votes, reports, saved items).
  • Technical and usage data (IP-derived location, device/browser metadata, analytics events).
  • Security and compliance data (logs, moderation actions, abuse signals).

3) Purposes and lawful bases

  • Service delivery and account operation: contract necessity.
  • Platform safety, moderation, abuse prevention: legitimate interests.
  • Analytics, personalization, and optional ad features: consent and/or legitimate interests.
  • Legal/regulatory obligations: legal compliance.

4) International transfers

If personal data is transferred outside the EEA/UK/Switzerland, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

5) Data retention

We retain personal data only for as long as necessary for the purposes described above, including security, legal compliance, and dispute resolution needs.

6) Your GDPR rights

  • Right of access.
  • Right to rectification.
  • Right to erasure.
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing based on legitimate interests.
  • Right to withdraw consent at any time for consent-based processing.
  • Right to lodge a complaint with your supervisory authority.

7) Automated decision-making

We may use automated ranking signals to organize deals and engagement; we do not currently use solely automated decisions that produce legal or similarly significant effects without meaningful human oversight.

8) Contact and DPO inquiries

For GDPR requests, contact privacy@cipideals.com. If a Data Protection Officer is appointed, contact details will be published here.