1. Introduction
Welcome to WildDeals ("we," "us," or "our"). WildDeals is operated as a sole proprietorship based in British Columbia, Canada. Our website is located at wilddeals.ca. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, mobile application, and related services (collectively, the "Service").
We are committed to protecting your privacy and complying with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), the European Union's General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), as applicable to you based on your jurisdiction.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please discontinue use of the Service immediately.
For any questions or concerns regarding this policy, please contact us at support@wilddeals.ca.
2. What Data We Collect
We collect the following categories of personal information in connection with the Service:
- Name: Your first and last name, as provided during account registration or profile setup.
- Email address: Used for account creation, login, communications, and support.
- Usage data: Information about how you interact with the Service, including pages visited, features used, deal interactions (such as saves, clicks, and views), and navigation patterns.
- Device information: The type of device you use (e.g., smartphone, tablet, desktop), operating system and version, and browser type and version.
- IP address: Your Internet Protocol address, which may be used for approximate geolocation, security, and analytics purposes.
We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
3. Why We Collect Data and Legal Basis
We collect and process your personal data for the following purposes. Where the GDPR applies, we have identified the corresponding legal basis under Article 6 of the GDPR for each purpose:
- To provide and improve the Service (Legal basis: Performance of a contract, Art. 6(1)(b) GDPR): We process your data to create and manage your account, deliver personalized deal recommendations, save your preferences, and continuously improve the functionality and performance of our platform.
- To communicate with you (Legal basis: Legitimate interest, Art. 6(1)(f) GDPR): We use your contact information to send service-related announcements, respond to your inquiries, provide customer support, and notify you of changes to our terms or policies. Our legitimate interest is maintaining an effective communication channel with our users.
- Analytics and service improvement (Legal basis: Legitimate interest, Art. 6(1)(f) GDPR): We analyze usage patterns and aggregated data to understand how our Service is used, identify areas for improvement, diagnose technical issues, and develop new features. Our legitimate interest is improving and optimizing our Service for all users.
- To comply with legal obligations (Legal basis: Legal obligation, Art. 6(1)(c) GDPR): We may process your data when required to do so by applicable law, regulation, legal process, or enforceable governmental request.
Where we rely on legitimate interest as a legal basis, we have conducted balancing tests to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest at any time.
4. How We Collect Data
We collect personal information through the following methods:
Directly from you
When you register for an account, fill out forms, update your profile, contact customer support, or otherwise voluntarily provide information to us, we collect the data you submit.
Automatically
When you access or use the Service, we automatically collect certain information through cookies, web beacons, analytics tools, and similar technologies. This includes usage data, device information, IP address, and browsing behavior on our platform.
From third parties
If you choose to log in or authenticate using a third-party provider (such as Google), we may receive your name, email address, and authentication tokens from that provider. We only receive the information you have authorized the third-party provider to share with us.
5. Firebase Authentication
We use Firebase Authentication, a service provided by Google LLC, to manage user login and authentication. When you create an account or sign in to WildDeals, Firebase Authentication processes the following data:
- Your email address
- Authentication tokens (used to verify your identity across sessions)
- Login metadata (such as the time of your last sign-in and account creation date)
Firebase Authentication data is processed by Google in accordance with Google's Privacy Policy and their Firebase Data Privacy documentation. Google acts as a data processor on our behalf for this service. Firebase Authentication servers may be located in the United States or other countries where Google operates data centers.
6. Firebase Firestore
We use Firebase Firestore, a cloud-hosted NoSQL database provided by Google LLC, to store user-generated data associated with your account, including:
- Deal saves and bookmarks
- User preferences and notification settings
- Application settings and personalization data
Firestore data is processed by Google as a data processor on our behalf, in accordance with Google's Privacy Policy and the Google Cloud Data Processing Addendum. Your data stored in Firestore is encrypted both in transit and at rest. Firestore servers may be located in the United States or other jurisdictions where Google maintains infrastructure.
7. Anthropic Claude AI
We use Claude, an AI assistant developed by Anthropic, to power our support chat functionality. When you use the chat support feature:
- Your chat messages and the AI-generated responses may be processed by Anthropic's servers.
- Conversations may include information you voluntarily provide during the chat interaction.
- We do not sell any conversation data to third parties, and conversation data is not used for advertising purposes.
Anthropic processes this data in accordance with their own privacy practices. We encourage you to review Anthropic's Privacy Policy for details on how they handle data. We take care to minimize the personal data transmitted to Anthropic during support interactions, and we do not send your account credentials or financial information through the chat system.
8. Amazon Associates Affiliate Program
WildDeals is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.ca and Amazon.com. As part of this program:
- When you click on an affiliate link on our Service, you will be redirected to Amazon's website, and a cookie may be placed on your device by Amazon to track the referral.
- Amazon collects data about your browsing and purchasing activity on their platform in accordance with Amazon's Privacy Notice.
- We may receive information from Amazon about completed purchases made through our affiliate links (such as the product category and commission earned), but we do not receive your personal information or specific purchase details from Amazon.
Your interactions with Amazon's website are governed by Amazon's own privacy policy and terms of service. We encourage you to review Amazon's privacy practices before making a purchase.
9. We Do Not Sell Your Data
WildDeals does not sell, rent, lease, or trade your personal information to third parties for monetary or other valuable consideration. We only share your data with third-party service providers (as described in this policy) who process data on our behalf and are contractually obligated to protect your information.
For California residents under the CCPA: We do not sell or share your personal information as defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We have not sold or shared personal information in the preceding 12 months, and we have no plans to do so in the future.
For Canadian residents under PIPEDA: Your personal information is not disclosed to third parties for purposes other than those for which it was originally collected, without your knowledge and consent, except as permitted or required by law.
10. Cookies and Tracking
Our Service uses cookies and similar tracking technologies to enhance your experience, analyze usage, and support our affiliate partnerships. A cookie is a small text file stored on your device by your web browser.
Types of Cookies We Use
- Essential cookies: These cookies are necessary for the basic operation of the Service, including user authentication, session management, and security. Without these cookies, the Service cannot function properly. These cookies do not require consent under most privacy laws.
- Analytics cookies: These cookies help us understand how visitors interact with our Service by collecting and reporting information anonymously. We use this data to improve the performance and usability of our platform.
- Affiliate cookies: When you click on an affiliate link (such as an Amazon Associates link), a cookie may be placed on your device by the affiliate partner to attribute the referral. These cookies are set by third parties and are governed by their respective privacy policies.
Managing Cookies
When you first visit our Service, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, at which point the consent banner will reappear.
You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent the Service from functioning correctly. For more information on managing cookies, visit your browser's help documentation.
11. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account data (name, email, preferences): Retained for as long as your account remains active. If you close your account or request deletion, we will delete or anonymize your account data within 30 days of the verified request, unless retention is required for legal or legitimate business purposes.
- Usage data (pages visited, interactions, analytics): Retained for a maximum period of 24 months from the date of collection, after which it is automatically deleted or anonymized.
- Support chat data: Retained for up to 12 months to help us resolve ongoing issues and improve our support services.
Upon receipt of a verified deletion request, we will delete your personal data within 30 days, subject to any legal retention obligations. We will also instruct our third-party processors to delete your data from their systems.
12. Your Privacy Rights
Depending on your jurisdiction, you may have specific rights regarding your personal information. Below is a summary of your rights under applicable privacy laws.
Canadian Users (PIPEDA and Quebec Law 25)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), you have the right to:
- Access: Request access to the personal information we hold about you and receive a copy of that information.
- Correction: Request the correction of inaccurate or incomplete personal information.
- Withdrawal of consent: Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. We will inform you of the implications of withdrawing consent.
- De-indexation (Quebec Law 25): Request that your personal information be de-indexed or cease to be disseminated if the dissemination contravenes the law or a court order.
- Portability (Quebec Law 25): Request that your personal information be communicated to you in a structured, commonly used technological format, or to another organization, where technically feasible.
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca, or with the Commission d'acces a l'information du Quebec if you are a Quebec resident.
EU/EEA Users (GDPR)
Under the General Data Protection Regulation (GDPR), if you are located in the European Union or European Economic Area, you have the right to:
- Access (Art. 15): Obtain confirmation as to whether your personal data is being processed and request a copy of your personal data.
- Rectification (Art. 16): Request the correction of inaccurate personal data or the completion of incomplete data.
- Erasure (Art. 17): Request the deletion of your personal data ("right to be forgotten") where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent.
- Data portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format, and transmit that data to another controller without hindrance.
- Restriction of processing (Art. 18): Request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
- Objection (Art. 21): Object to the processing of your personal data based on legitimate interests, including for direct marketing purposes.
- Withdraw consent (Art. 7): Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
- Lodge a complaint: File a complaint with your local data protection supervisory authority if you believe your rights have been infringed.
California Users (CCPA/CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:
- Right to know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
- Right to delete: Request the deletion of personal information we have collected from you, subject to certain exceptions (such as legal compliance).
- Right to correct: Request the correction of inaccurate personal information.
- Right to opt-out of sale or sharing: You have the right to opt out of the sale or sharing of your personal information. However, as stated in this policy, WildDeals does not sell or share your personal information, so this right is already effectively honored.
- Right to non-discrimination: You will not be discriminated against for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level or quality of service because you exercised your privacy rights.
13. How to Exercise Your Rights
To exercise any of the rights described above, please submit a request to us using the appropriate method for your jurisdiction:
- EU/EEA users (GDPR): Email support@wilddeals.ca with "GDPR Request" in the subject line. Please specify which right you wish to exercise and provide sufficient information for us to verify your identity.
- California users (CCPA): Email support@wilddeals.ca with "CCPA Request" in the subject line. You may also designate an authorized agent to make a request on your behalf, provided the agent has your written authorization.
- Canadian users (PIPEDA / Quebec Law 25): Email support@wilddeals.ca with "PIPEDA Request" in the subject line. Please include your full name and email address associated with your account.
We will acknowledge receipt of your request and may ask for additional information to verify your identity before processing it. We will respond to your request within the following timeframes:
- GDPR requests: Within 30 days of receipt. This period may be extended by an additional 60 days for complex or numerous requests, in which case we will notify you of the extension and the reasons for the delay.
- PIPEDA / Quebec Law 25 requests: Within 30 days of receipt.
- CCPA requests: Within 45 days of receipt. This period may be extended by an additional 45 days if reasonably necessary, in which case we will notify you of the extension.
All requests will be fulfilled free of charge, unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline the request in accordance with applicable law.
14. International Data Transfers
WildDeals is based in British Columbia, Canada. Your personal information may be transferred to, stored, and processed in countries outside of your country of residence, including Canada and the United States, where our third-party service providers (such as Google/Firebase and Anthropic) operate their servers and infrastructure.
These countries may have data protection laws that differ from the laws of your jurisdiction. When we transfer personal data internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection:
- Standard Contractual Clauses (SCCs): For transfers of personal data from the EU/EEA, we rely on European Commission-approved Standard Contractual Clauses with our service providers to ensure an adequate level of data protection.
- Adequacy decisions: Canada has been recognized by the European Commission as providing an adequate level of data protection under PIPEDA for commercial activities, facilitating lawful data transfers from the EU/EEA to Canada.
- Contractual protections: We enter into data processing agreements with all third-party processors that include obligations to protect personal data in accordance with applicable privacy legislation.
By using our Service, you acknowledge that your data may be transferred internationally as described in this section. If you have questions about international data transfers, please contact us at support@wilddeals.ca.
15. Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption: Data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Data at rest is encrypted using industry-standard encryption methods provided by our infrastructure partners.
- Access controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis. We use strong authentication mechanisms and role-based access controls.
- Regular security reviews: We conduct periodic reviews of our data collection, storage, and processing practices to identify and address potential vulnerabilities and ensure our security measures remain effective.
- Third-party security: We carefully select third-party service providers who maintain robust security programs and require them to adhere to strict data protection standards through contractual obligations.
While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to taking all reasonable steps to safeguard your data. If you become aware of any security breach or unauthorized access, please notify us immediately at support@wilddeals.ca.
16. Children's Privacy
The Service is not directed at or intended for use by children. We do not knowingly collect personal information from children under the age of 13 (or under 16 in the European Economic Area). If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@wilddeals.ca.
If we become aware that we have collected personal information from a child under the applicable age threshold without verified parental consent, we will take immediate steps to delete that information from our records and terminate the associated account.
17. Data Protection Officer
If you have any questions, concerns, or complaints about our data protection practices or this Privacy Policy, you may contact our designated privacy contact at:
WildDeals - Privacy Inquiries
Email: support@wilddeals.ca
WildDeals, British Columbia, Canada
We will review and respond to all privacy-related inquiries in a timely manner. For EU/EEA residents, if you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
18. How to Request Data Deletion
You may request the deletion of your personal data at any time by emailing support@wilddeals.ca with the subject line "Data Deletion Request." Please include the following in your request:
- Your full name
- The email address associated with your WildDeals account
- A clear statement that you wish to have your personal data deleted
Upon receiving your request, we will verify your identity and process the deletion within 30 days. We will confirm the deletion by email once it is complete. Please note that:
- Certain data may be retained if required by applicable law or for legitimate business purposes (such as fraud prevention or legal compliance).
- Anonymized or aggregated data that can no longer be associated with you may be retained for analytics purposes.
- Data that has already been shared with third-party processors will be subject to deletion requests sent to those processors, who are contractually obligated to comply.
19. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, applicable laws, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will:
- Update the "Last updated" date at the top of this page.
- Provide notice of the changes through a prominent notice on our Service, by email notification, or through other appropriate communication channels.
- Where required by applicable law (including GDPR and Quebec Law 25), obtain your consent before applying material changes that affect the processing of your personal data.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
20. Contact Us
If you have any questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us:
WildDeals
Email: support@wilddeals.ca
Website: wilddeals.ca
British Columbia, Canada
We are committed to working with you to resolve any complaints or concerns about your privacy. If you feel that your inquiry has not been satisfactorily addressed, you may contact the appropriate regulatory authority in your jurisdiction.