privacy policy

The Dealery is the data controller for the information described here. If you want to reach a human about any of it, email hello@thedealery.com.

When you join the list, the signup form records:

• Your email address — so I can send you the drops. This is the only way I contact you.
• Your first name — so the emails read like they came from a person.
• Your country — deals are region-specific. This stops me sending you an offer you can't buy.
• The date and time you joined, and your founding member number.
• Whether you ticked the consent box, and when you ticked it.
• Campaign tags in the link you arrived on (utm_source, utm_medium, utm_campaign, utm_content) and the page that referred you — so I know which post brought people in.

That is the whole list. I don't collect your address, your phone number, your date of birth, or anything about what you buy. There are no advertising trackers, no third-party analytics scripts, and no cookies used to profile you.

Under the GDPR and equivalent rules elsewhere, I rely on your consent — the box you ticked on the signup form. Consent is the only basis I use for sending you the newsletter, and you can withdraw it at any time. Withdrawing it doesn't affect anything I sent before.

Campaign tags are held on the same basis, as part of the signup record, and are only ever used in aggregate to see which posts worked.

Your record sits in a managed Postgres database with row-level security switched on. The public website has no read access to it at all — the signup form can add a record, and nothing on the public site can list, search, or export one.

Only I can see the table, through a password-protected admin view. Data is encrypted in transit and at rest by the hosting provider. If I later move the list to an email platform in order to actually send the emails, that provider will process the same fields on my behalf under a data-processing agreement, and this page will be updated to name them.

Nobody. Your details are not sold, rented, swapped, or handed to advertisers or brands I negotiate with. Suppliers get told how many people are on the list, never who they are. The only exception would be a legal obligation I can't refuse.

For as long as you're subscribed, plus a short window afterwards. When you unsubscribe or ask for deletion, your record is removed from the database — not flagged and archived. Founding member numbers are never reissued, so the number of a deleted record simply stops existing.

Every email has a one-click unsubscribe link at the bottom. One click, no survey, no "are you sure". You can also email hello@thedealery.com and I'll do it by hand.

Use the deletion form. Enter the address you signed up with and the record is removed from the database immediately — this is not a ticket that sits in a queue.

Delete my data

If you'd rather a person did it, email hello@thedealery.com and I'll confirm within 30 days, usually the same week.

If you're in the UK, EU, or somewhere with comparable law, you can ask me for a copy of what I hold on you, ask me to correct it, ask me to restrict or stop using it, or ask for it in a portable format. Email the address above and say which one you want. There's no charge and no form to fill in.

If you think I've handled your data badly and I haven't fixed it, you can complain to your national data protection authority — in the UK that's the Information Commissioner's Office.

The Dealery isn't intended for anyone under 16. If a record turns out to belong to a child, tell me and I'll delete it.

If what I collect changes, this page changes with it, and the date at the top updates. If the change is significant — a new processor, a new field — I'll say so in an email rather than quietly editing the page.