Privacy Policy

What we collect

We collect the minimum information needed to operate the site:

• Automatically, from your browser: IP address (truncated), approximate country, browser type, pages viewed, and referral source. This data is processed by Vercel Analytics and is aggregated; we do not link it to you personally. Only if you click "Accept all" on our cookie banner do we also run a Pinterest conversion tag, to measure our own Pinterest marketing and build retargeting audiences on Pinterest — this is a third-party script controlled by Pinterest, Inc., subject to Pinterest's own privacy policy. Choosing "Necessary only" means this tag never loads. You can change your choice any time via the "Cookie Preferences" link in the footer.
• When you click a deal link: Our affiliate partners (currently Amazon Associates and CJ Affiliate; other networks are added here once they're actually earning commissions — see our Affiliate Disclosure page for the current list) may set cookies in your browser to credit the sale to DIBA Deals. We do not receive your name, email, payment details, or any personally identifying shopping history from these partners.
• When you subscribe to our newsletter: Only your email address, which we store to send you the newsletter and to know who's subscribed.
• When you contact us: Only the email address and message contents you send. We use this solely to reply.

We do NOT collect: names, phone numbers, payment information, home addresses, biometric data, or any information from minors under 13.

How we use your data

• To operate and improve the site (aggregated analytics only)
• To track affiliate commissions (via partner cookies — we do not see individual purchase data)
• To measure and improve our own Pinterest marketing, via the Pinterest conversion tag described above — only ever with your opt-in consent
• To send our weekly newsletter to subscribers, and to let you unsubscribe at any time — email privacy@dibadeals.com or use the unsubscribe link in any newsletter email
• To respond to emails you send us

We do not sell your data. We do not share it with third parties except as required by law, to process affiliate commissions as described above, or with Pinterest via the conversion tag for our own ad measurement and retargeting.

Cookies

We do not set a general-purpose visitor session cookie. The only first-party cookie this site sets is an admin session cookie, used solely when our own internal team authenticates to the admin dashboard — it is never set in a regular visitor's browser.

• Vercel Analytics — aggregated visitor metrics (no PII)

We also run one third-party tracking script — opt-in only, via the cookie banner shown on your first visit — and our currently-active affiliate partners set their own cookies when you click a deal link:

• Pinterest: Pinterest privacy policy — conversion tracking for our own Pinterest marketing
• Amazon: Amazon.ca privacy notice
• CJ Affiliate: CJ privacy policy (publishers & consumers)

Impact.com and Rakuten Advertising are set up as publisher accounts but are not yet live (no approved, commission-earning merchants through those networks), so they do not currently set cookies through deal links on this site. We'll add them here once they go live — see our Affiliate Disclosure page for current status.

You can change your Pinterest tracking choice any time via the "Cookie Preferences" link in the footer, or decline cookies generally via your browser settings. The site will still work either way, though some preferences may reset each visit.

Your rights

Under PIPEDA and Quebec Law 25, Canadian residents have the right to:

• Access any personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca)

To exercise any of these rights, email us at privacy@dibadeals.com. We respond within 30 days as required by law.

Data retention

Analytics data: aggregated and retained for up to 24 months, then purged.

Email correspondence: retained for 12 months after the last reply, then deleted.

Newsletter subscriber emails: retained for as long as you're subscribed. You can unsubscribe at any time by emailing privacy@dibadeals.com or via the unsubscribe link in any newsletter email; once you unsubscribe we stop emailing you and keep only a record that you unsubscribed, so we don't contact you again by mistake.

Security

We use industry-standard measures: HTTPS everywhere, Supabase encrypted storage, Vercel's infrastructure security. No system is perfectly secure, but we take reasonable steps to protect the limited data we hold.

Where your data is processed

Some of the tools we rely on process data outside Quebec, so here's a plain-language account of where things actually go, as required under Quebec's Law 25:

• Supabase (our database): hosted in the Canada Central region — the emails, contact messages, and site data we store stay in Canada.
• Resend (our newsletter provider): stores account and delivery data (including subscriber emails) on servers in the United States, regardless of which region an individual email is sent from. Governed by Resend's privacy policy.
• Vercel (our hosting): our site's server functions default to United States regions, though page content is served from a global edge network close to you. Governed by Vercel's privacy policy.

We chose each of these providers in part because they publish their own security and privacy commitments, and we only send them the minimum data described above — never payment details, home addresses, or anything beyond what's listed in What we collect.

Children

DIBA Deals is intended for adults in Canada and the United States. We do not knowingly collect information from anyone under 13. If you believe we have done so, email us immediately and we will delete it.

Contact & Privacy Officer

DIBA Deals' Privacy Officer is accountable for our compliance with this policy and with PIPEDA and Quebec's Law 25. Questions, requests, or complaints — including to access, correct, or delete your data — reach the Privacy Officer directly at privacy@dibadeals.com.