GDPR Compliance Statement

Last Updated: September 21, 2024

Introduction

While the General Data Protection Regulation (GDPR) primarily applies to organizations operating within the European Union (EU), Discountlyy recognizes the importance of data privacy and protection for all its users, regardless of their location. This statement outlines how we handle personal data in compliance with the GDPR principles, even though our primary target audience is US residents.

Data Controller

Discountlyy is the data controller responsible for the processing of your personal data. Our contact details are provided at the end of this statement.

Lawful Basis for Processing

We process your personal data based on the following lawful bases:

  • Consent: We may ask for your explicit consent to process your personal data for specific purposes, such as sending you marketing communications. You have the right to withdraw your consent at any time.  
  • Contractual Necessity: We may process your personal data when it is necessary for the performance of a contract with you, such as when you subscribe to our newsletter or contact us for support.
  • Legitimate Interests: We may process your personal data for our legitimate interests, such as improving our website, analyzing user behavior, and preventing fraud, provided that these interests do not override your fundamental rights and freedoms.

Data We Collect

We collect the following types of personal data:

  • Information you provide: This may include your name, email address, and any other information you voluntarily provide to us.
  • Information we collect automatically: This may include your IP address, browser type, device information, pages visited, and referring website.
  • Information from third parties: We may receive personal data about you from third parties, such as Amazon and Mavely, in connection with our affiliate partnerships.

How We Use Your Data

We use your personal data for the following purposes:

  • To provide and improve our services: This includes providing you with the deals, discounts, and content you request, personalizing your experience, and improving our website’s functionality and performance.
  • To communicate with you: We may use your email address to send you newsletters, updates, promotional offers, and other relevant information. You can opt-out of these communications at any time.  
  • To analyze and understand our audience: We use aggregated and anonymized data to analyze user behavior, understand our audience demographics, and improve our content and marketing strategies.
  • To comply with legal obligations: We may process your information to comply with applicable laws, regulations, or legal processes.  

Data Sharing

We may share your personal data with the following parties:

  • Third-party service providers: We may engage trusted third-party service providers to assist us in operating our website, conducting our business, or providing services to you. These providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.  
  • Business partners: We may share your information with our business partners, such as Amazon and Mavely, to provide you with exclusive deals and promotions.  
  • Legal requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, or ensure the safety of our users or the public.  

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.  

Your Rights

Under the GDPR, you have the following rights:  

  • Right to access: You have the right to request access to your personal data and information about how we process it.
  • Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.  
  • Right to erasure: You have the right to request that we erase your personal data in certain circumstances.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.  
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.  
  • Right to object: You have the right to object to the processing of your personal data in certain circumstances.  

International Data Transfers

Although our primary target audience is US residents, we may transfer your personal data to countries outside the EU/EEA. We will ensure that any such transfers are made in compliance with the GDPR, such as by using appropriate safeguards like standard contractual clauses.

Contact Us

If you have any questions or concerns about this GDPR Compliance Statement or our data practices, please contact us at:

Please note that this statement is provided for informational purposes only and does not constitute legal advice. If you have any specific questions about your rights under the GDPR, you should consult with a qualified legal professional.