Privacy notice
Last updated: 2 October 2026
The short version
- DealDetective is run by JimJak Ltd. We're responsible for your personal data.
- We collect what we need to run your account: your email, the products and settings you save, your plan and usage, and billing records.
- Card payments are handled by Stripe. We never see or store your full card number.
- We don't sell your data, we don't use advertising or tracking cookies, and we don't send marketing emails unless you've asked for them.
- You can see, export, correct or delete your data. Email contact@ddec.co.uk.
- Who we are
- What we collect
- The browser extension
- Why we use it, and our lawful bases
- Who we share it with
- Transfers outside the UK
- How long we keep it
- Cookies and browser storage
- Keeping it secure
- Your rights
- Children, decisions and changes
- Contact and complaints
1. Who we are
DealDetective (the website at ddec.co.uk, the web app at ddec.co.uk/app, and the DealDetective browser extension) is a service run by JimJak Ltd ("we", "us", "our").
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), JimJak Ltd is the controller of the personal data described here. You can contact us about anything in this notice at contact@ddec.co.uk. Our terms of service cover how you can use DealDetective.
2. What we collect
When you join the waitlist on our website
Your email address and the plan you said you're interested in. We use these only to tell you when DealDetective is available and about your early access.
When you create and use an account
| Information | What it includes |
|---|---|
| Account details | Your email address and password. Passwords are stored only as a secure one-way hash; we can't read them. |
| Products you analyse and save | Product names, supplier names and links, prices, quantities, shipping and cost figures, results, and the sections, stages and notes you add. |
| Your settings | The shops you sell on and their fees, VAT status, cost assumptions, deal criteria, pricing rule and exchange-rate preferences. |
| Plan and usage | Your plan, how many analyses you've used this month, and which supplier pages you've scored with the browser extension this month (so we can apply your plan's allowance). |
| Billing records | If you subscribe: your Stripe customer and subscription references, subscription status and renewal date. Stripe holds your payment details. |
| Feedback | Anything you send through "Send feedback", with your email, your plan and the page you sent it from. |
| Messages to us | Anything you email to us, and our replies. |
When you import a product by link
If you paste a supplier or Amazon link into DealDetective, our server fetches that public page and reads the product details from it (such as the title, price tiers and minimum order). We don't keep a copy of the page; only the details you choose to save are stored with your account.
Technical information
Like any website, our hosting provider receives technical information when you visit, such as your IP address, browser type and the pages requested. This is used to deliver the site, keep it secure and fix problems, and is kept only for short periods in server logs.
What we don't collect
We don't collect special category data (such as health information) and we ask you not to put personal information about other people, beyond what's needed (for example a supplier contact name), into notes.
3. The browser extension
The DealDetective extension only runs on the supplier and marketplace websites it supports (such as Alibaba, AliExpress, Faire, Ankorstore, Qogita, Made-in-China, Global Sources, DHgate, 1688, CJdropshipping and Amazon UK) and on the DealDetective app itself.
- On those sites, it reads the product details on the page you're viewing (such as titles, prices and delivery times) so it can work out the numbers. This happens in your browser.
- It keeps your settings, the products you've chosen to add, and the list of supplier pages you've scored this month in your browser's extension storage.
- It sends to your DealDetective account only the products you choose to add and that list of scored pages (to apply your monthly allowance across your devices).
- It doesn't record your browsing on other websites, and it doesn't read pages on sites it doesn't support.
4. Why we use your data, and our lawful bases
| What we do | Lawful basis under UK GDPR |
|---|---|
| Create and run your account, save your products and settings, apply your plan's limits, and provide the extension | Performance of our contract with you |
| Take subscription payments, send receipts and manage your subscription | Performance of our contract with you |
| Send service emails you need (confirming your email, password resets, important changes to the service) | Performance of our contract with you |
| Keep billing and tax records | Legal obligation |
| Keep the service secure, prevent misuse (including of free-plan limits) and fix problems | Our legitimate interests in running a safe, reliable service |
| Read your feedback and use it, with usage of the service, to improve DealDetective | Our legitimate interests in improving the service |
| Email you about early access after you join the waitlist | Consent, which you can withdraw at any time by replying or emailing us |
We don't send marketing emails to account holders unless you've agreed to them, and every marketing email will include a way to unsubscribe.
5. Who we share it with
We don't sell your personal data or share it for advertising. We use a small number of trusted service providers who process data on our behalf, under contracts that require them to protect it and use it only on our instructions:
| Provider | What they do |
|---|---|
| Supabase | Stores your account, saved products and settings, and handles sign-in. Our database is hosted in the UK (London). |
| Netlify | Hosts our website and app, runs our server functions, and stores waitlist sign-ups. |
| Stripe | Processes subscription payments. Stripe also acts as a separate controller for some purposes, such as fraud prevention and meeting its legal obligations; see Stripe's privacy policy. |
| Our email delivery provider | Sends account emails such as sign-up confirmations and password resets. |
We fetch daily exchange rates from a public service based on European Central Bank data; no personal data is sent to it. We may also share data if the law requires it, to protect our rights or the safety of others, or as part of a sale or restructuring of our business (in which case the buyer would have to protect it in the same way).
6. Transfers outside the UK
Some of our providers, or their support teams and sub-processors, are based outside the UK, for example in the European Economic Area or the United States. Where your data is transferred outside the UK, we make sure it's protected by UK adequacy regulations (including the UK–US data bridge where it applies) or by appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more detail.
7. How long we keep it
| Data | How long |
|---|---|
| Your account, saved products and settings | While your account is open. When you ask us to delete your account, we delete it within 30 days. Copies in our database provider's backups are overwritten within a further 30 days. |
| Billing and tax records | 6 years after the end of the tax year they relate to, as UK law requires |
| Monthly usage counts | Reset each month; the current month's record is kept while your account is open |
| Feedback and emails to us | Up to 2 years, or less if you ask |
| Waitlist sign-ups | Until we've invited you, or you ask us to remove you, and in any case no longer than 12 months |
| Server logs | Usually no more than 30 days |
8. Cookies and browser storage
We don't use advertising, analytics or tracking cookies. The DealDetective app stores a small amount of information in your browser that's strictly necessary for it to work: your sign-in session, your current draft analysis, and display preferences such as which settings sections you've opened. The extension stores the information described in section 3. Because this storage is essential to the service you've asked for, we don't need to ask for consent, but you can clear it at any time in your browser settings (you'll be signed out).
If we ever add optional cookies, such as for analytics, we'll ask for your consent first and update this notice.
9. Keeping it secure
All connections to DealDetective are encrypted (HTTPS). Your data is stored with access controls that let each user see only their own records, passwords are hashed, and payment details stay with Stripe. Access to our systems is limited to the people who need it to run DealDetective. No system is perfectly secure, but if a breach affecting your data ever happened, we'd tell you and the Information Commissioner's Office where the law requires.
10. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you and get a copy of it
- Correct data that's wrong or incomplete (you can change most of it yourself in the app)
- Delete your data ("right to be forgotten")
- Restrict or object to how we use it, including where we rely on legitimate interests
- Data portability: receive your data in a common format (you can also export your saved products as a spreadsheet at any time from Saved Products)
- Withdraw consent where we rely on it, such as for waitlist emails
To use any of these rights, including closing your account and deleting your data, email contact@ddec.co.uk from the address on your account. We'll respond within one month. It's free, though we may need to confirm your identity first. You can cancel a paid subscription yourself at any time from Plan & Usage → Manage billing.
11. Children, decisions and changes
Children. DealDetective is a business tool for adults. It isn't intended for anyone under 18, and we don't knowingly collect their data.
Automated decisions. DealDetective calculates figures and labels such as "Potential Deal" from the information you enter, to help you make your own decisions. We don't make decisions about you with legal or similarly significant effects by automated means.
Changes. We'll update this notice when how we use personal data changes, and change the date at the top. If a change is significant, we'll tell account holders by email or in the app before it takes effect.
12. Contact and complaints
JimJak Ltd, operator of DealDetective
Email: contact@ddec.co.uk
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.