Legal

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: June 2025

1. Who we are

We operate the website cheapsubs.net (the “Site”), a marketplace for buying shared subscription access to digital services.

2. Data we collect

We collect the following categories of personal data:

  • Account data — email address and password when you register.
  • Order & payment data — billing details, transaction history, and payment method tokens (card numbers are vaulted with Stripe; we never store them directly).
  • Usage data — pages visited, search queries, and interaction events, collected via analytics tools.
  • Support data — messages and attachments you send to our support team.
  • Technical data — IP address, browser type, device identifiers, and cookies (see our Cookie Policy).

3. How we use your data

We use your personal data to:

  • Create and manage your account.
  • Process and fulfil orders.
  • Detect and prevent fraud.
  • Provide customer support.
  • Send transactional emails (order confirmations, refund notices).
  • Improve the Site through aggregate analytics.
  • Comply with legal obligations.

4. Legal bases (UK GDPR)

We rely on the following lawful bases under UK GDPR:

  • Contract — processing necessary to fulfil your order.
  • Legitimate interests — fraud prevention, security, and site improvement.
  • Consent — marketing emails (you can withdraw at any time).
  • Legal obligation — compliance with applicable law.

5. Data sharing

We do not sell your personal data. We share it only with trusted service providers who help us operate the Site, including:

  • Stripe — payment processing.
  • Supabase — database and authentication infrastructure.
  • Resend — transactional email delivery.
  • PostHog — product analytics.

All processors are contractually bound to use your data only as instructed and to maintain appropriate security.

6. Data retention

We retain account and order data for as long as your account is active and for up to 7 years afterwards to meet legal and tax obligations. You may request deletion at any time (subject to legal holds).

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.

To exercise any right, contact us at privacy@cheapsubs.net. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies. For full details see our Cookie Policy.

9. Security

We use industry-standard measures including TLS encryption in transit, encrypted credential storage at rest, and access controls. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy periodically. Material changes will be communicated by email or a notice on the Site. Continued use after the effective date constitutes acceptance.

11. Contact

For privacy questions or to exercise your rights, contact us at privacy@cheapsubs.net or by post at our registered address above.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.