Privacy & Data Policy
Last updated 2026-06-15
Who is the data controller
Pearl Lemon Ltd, trading as LemDeals, is the data controller for personal data you provide. Contact privacy@lemdeals.com for any request under UK GDPR / EU GDPR.
What we collect
Account email and name, purchase and refund history, IP and user-agent at checkout (fraud prevention), redemption codes issued to you, reviews/questions you post, and support correspondence. Payment card details are handled by Stripe — we never see or store the full PAN.
Why we collect it
To deliver the purchases you make (Art. 6(1)(b) — contract), to meet legal obligations such as tax invoicing and AML (Art. 6(1)(c)), and to improve the marketplace and prevent abuse (Art. 6(1)(f) — legitimate interests). Marketing email is opt-in only (Art. 6(1)(a) — consent).
Who we share it with
Vendors receive only the redemption email and the licence tier for orders you place with them — never your payment details. Sub-processors: Stripe (payments), Supabase (hosted backend), Resend / our email infrastructure (transactional email), Cloudflare (CDN), and our analytics provider. A current sub-processor list is available on request.
International transfers
Some sub-processors are located outside the UK / EEA. Where required we rely on the UK IDTA or EU Standard Contractual Clauses with supplementary measures.
How long we keep it
Account data: while your account is active plus 30 days. Tax-relevant records (invoices, payouts): 7 years, as required by UK HMRC. Support tickets: 3 years. Anonymised analytics: indefinite.
Your rights
You can access, export (Art. 20), correct, or delete (Art. 17) your data from Account → Data export, or by emailing privacy@lemdeals.com. You can object to processing or withdraw marketing consent at any time. You may also lodge a complaint with the UK ICO or your local supervisory authority.
Children
LemDeals is not directed at children under 16 and we do not knowingly process their data.
Cookies
See our Cookies Policy for the full list and how to withdraw consent.